Kibernetička sigurnost nadzorno upravljačkog sustava cestovnog tunela"

professional thesis

• Title (english): Cyber security of a road tunnel surveillance and control system
• Author: Marko Merkaš
• Mentor: Stjepan Groš (mentor)
• Committee member: Miljenko Mikuc (predsjednik povjerenstva)
• Committee member: Stjepan Groš (član povjerenstva)
• Committee member: Krešimir Grgić (član povjerenstva)
• Granter: University of Zagreb; Faculty of Electrical Engineering and Computing; Zagreb
• Defense date and country: 2023, Croatia
• Scientific / art field, discipline and subdiscipline: TECHNICAL SCIENCES; Computing

Abstract

Kibernetička sigurnost upravljačkih sustava od iznimne je važnosti za funkcioniranje kritične infrastrukture, a o njezinoj implementaciji potrebno je voditi računa već kod projektiranja samog sustava. Zbog toga je kod projektiranja sustava za nadzor i upravljanje cestovnim tunelom ključno odabrati arhitekturu koju će biti što je moguće lakše zaštiti od kibernetičkih napada. U radu je odabrana je ISA95 mrežna arhitektura u koju su uključeni svi nadzorni i sigurnosni sustavi u tunelu, a nakon čega je pomoću stabla napada razmatrana sigurnost dobivenog sustava. Zaključeno je da je ISA95 arhitektura primjenjiva u slučaju da se ne koriste IIoT uređaji i da je ključno osigurati vezu između razine 2 – serverske infrastrukture nadzorno-upravljačkog sustava i razine 4 – poslovne mreže tvrtke koja upravlja tunelom. Zaštitu je potrebno provoditi pravilno dizajniranom DMZ zonom.

Abstract (english)

Cybersecurity of control systems is of utmost importance for the functioning of critical infrastructure, and its implementation needs to be taken into account during the design phase of the system itself. Therefore, when designing a supervisory and control system for a road tunnel, it is crucial to select an architecture that can be easily protected from cyber attacks. In this paper, the ISA95 network architecture was chosen that includes all the monitoring and security systems in the tunnel. Subsequently, the security of the obtained system was analyzed using attack trees. It was concluded that the ISA95 architecture is applicable if IIoT devices are not used, and it is crucial to secure the connection between Level 2 - server infrastructure of the surveillance and control system and Level 4 - the business network of the company that responsible for the operation of the tunnel. Properly designed DMZ (demilitarized zone) is necessary for implementing all of the needed defense mechanisms.

• Keywords: kibernetička sigurnost
• Keywords (english): cyber security
• Language: croatian
• URN:NBN: urn:nbn:hr:168:501155
• Study programme: Title: Specialist study programme in information security; Study programme type: university; Study level: postgraduate specialist; Academic / professional title: Specijalist informacijske sigurnosti (Specijalist informacijske sigurnosti)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2024-05-03 10:55:24