KR101732682B1 - Method for making report for cyber security management apparatus - Google Patents

Abstract

Provided is a method of making a report of a cybersecurity apparatus, comprising the steps of: designing a configuration of digital devices in a nuclear plant and access devices that can access the digital devices to correspond to an environment of the nuclear plant for management of cybersecurity assessment; setting and inputting security level information and security property information of each of the digital devices, and setting and inputting user property information for each of the digital devices; completing designing the configuration by connecting network connection lines between the digital devices to carry out set data transmission corresponding to data transmission information included in the security property information; if a questionnaire command is input, entering a questionnaire conforming to a predetermined questionnaire list for each of the digital devices and access devices; if an execution state command is input, inputting an execution state of state and requirement compatibility of each of the digital devices and access devices based on a preset regulation guideline on each of the digital devices and access devices; and if writing a report is input, outputting a report result including at least two among the questionnaire, the state, and the requirement compatibility.

Description

{METHOD FOR MAKING REPORT FOR CYBER SECURITY MANAGEMENT APPARATUS}

The present invention relates to a method for generating a report of a cyber security device, and more particularly, to a method of designing a cyber security apparatus for a nuclear power plant, The present invention relates to a method of generating a report of a cyber security apparatus,

In today's general IT environment, cyber threats and attacks can be technically and physically addressed according to established procedures and regulations. However, nuclear reactors that can cause national threats at the moment of cyber attack are not enough to deal with them. Therefore, technological and physical countermeasures must be prepared to secure cyber security from the design stage.

One of the top priorities for establishing cyber security countermeasures in the field of nuclear instrumentation control is to develop cyber security management items and regulatory guidelines for them. This is because cyber security management items and regulatory guidelines can provide the basis for the development and operation of nuclear cyber security related technologies that are developed later.

However, even if regulations and guidelines are well-equipped, it is difficult to apply them to actual work. Existing cyber security requirements often do not provide an implementation plan, so there are many difficulties in meeting the requirements.

In recent years, it has provided the necessary measures and examples to develop requirements for cyber security management items suitable for domestic environment, and conducted risk analysis, vulnerability assessment, security evaluation tools and system improvement for cyber security of nuclear facilities Research is underway.

It is an object of the present invention to provide a cyber security device report which is easy to design a diagram of a nuclear power plant actually constructed and evaluate the requirements of the cyber security measures and to make a query report on the digital equipments included in the diagram And to provide a method for creating the same.

The method for generating a report of a cyber security apparatus according to the present invention is designed to include a digital apparatus of a nuclear power plant and access devices connectable to the digital apparatuses in response to a nuclear power plant environment for cyber security evaluation management Setting security level and security attribute information of each of the digital equipments and setting and inputting user attribute information of each of the access equipments, setting data transmission information corresponding to the data transmission information included in the security attribute information, Connecting the network connection lines for the digital devices to the digital devices to complete the design for the configuration diagram; upon inquiry command input, issue a questionnaire according to a pre-established question list for each of the digital devices and the access devices When entering the transition status command, Inputting a status of compliance with the status and requirements of each of the digital devices and the connection equipment based on the contents of the predefined regulatory guidance for each of the wireless devices and the connection devices, And outputting a report result including at least two of the query, the status, and the requirement synthesis.

The method for generating a report of a cyber security apparatus according to the present invention includes analyzing data transmitted to the network connection lines when a cyber security evaluation test command is input to the configuration diagram, If at least one of the access devices is not satisfied with the security measure, repairing at least one of the digital devices for cybersecurity, evaluating the security of the digital devices of the actual installed nuclear facility according to the simulated nuclear facility environment Analyzing the configuration corresponding to the level of the nuclear power plant, performing at least one of the source diagnosis, the network scanning diagnosis, the apparatus vulnerability diagnosis, and the maintenance policy diagnosis for the nuclear facility constructed in the simulated nuclear facility environment, Security related to the diagnosis result And managing the data.

The security attribute information may include at least one of a manufacturer of each of the digital devices, data transmission information, an operating system type and version, an application program, and a deployment location.

The user attribute information may include at least one of a user type, an account type, and an authentication state using each of the access devices.

Wherein the repairing step comprises repairing any of the digital equipments to arbitrary digital equipment transmitting data that does not satisfy the cyber security measure among the digital equipments, And resetting the security level.

The method of generating a report of the cyber security apparatus according to the present invention may further include storing the analysis result of the data and the repair result of the arbitrary digital equipment after the repair step.

The method of generating a report of a cyber security apparatus according to the present invention may further include storing an analysis result of the data if the analysis result of analyzing the data satisfies a set cyber security measure after analyzing the data have.

The data transmission information may include at least one of a type of the data and a transmission method.

The method of generating a report of a cyber security apparatus according to the present invention includes the steps of receiving an update check list for a cyber security threat element from an external device connected to the web or the Internet network before analyzing the configuration diagram, Evaluating security related information that can be analyzed through the analysis of the workflow and evaluating security level of the digital devices based on the security related information, .

The security-related information evaluation step evaluates security-related information that can be analyzed through analysis of the previous workflow when the update check list is not received, and the security-related information evaluation step includes: The threat analysis and the vulnerability analysis are evaluated by inquiring the update check list according to the update check list, and the management step may manage the security data for managing the development process and the security environment occurring in the entire process.

The inquiry input step may input a query for at least one of equipment name, location, physical management status, manager, accessibility, accessibility, and maintenance records for each of the digital equipments.

The transition status inputting step may input the current state and the requirement composite including the connection protocol for other digital equipments and accessing equipments connectable to the digital equipments based on the content of the regulation instruction.

A method of generating a report of a cyber security apparatus according to the present invention is a method of generating a report corresponding to a nuclear facility environment corresponding to a currently established nuclear facility environment, that is, a simulation nuclear facility environment is evaluated and managed according to a cyber security measure requirement , The cyber security level is set according to the stored case, or the cyber security level is set to be changed, and the cyber security can be improved by making it possible to find the security weak part.

In addition, the method for generating a report of a cyber security apparatus according to the present invention has an advantage that essential digital assets can be protected from cyber threats according to the system designing stage, the detailed designing stage, and the implementation evaluation stage of the digital equipments of nuclear facilities.

A method of generating a report of a cyber security apparatus according to the present invention is a method of generating a report by checking cyber security of an external device based on IP and login information included in an update check list, Having the ability to apply a list has the advantage of enhancing cyber security.

In addition, the method of generating a report of a cyber security apparatus according to the present invention is advantageous in that essential digital assets with improved security can be finally developed by suggesting a cyber risk mitigation method to digital equipments of a nuclear power facility.

In addition, a method of generating a report of a cyber security apparatus according to the present invention may include inputting a questionnaire and a current status of each of digital equipments and access devices included in a simulation nuclear facility environment, So that the user or the administrator can easily check the maintenance and security status.

1 is a control block diagram showing a control configuration of a cyber security apparatus according to the present invention.
2 is a flowchart illustrating a method of generating a report of a cyber security apparatus according to the present invention.
FIG. 3 is a flowchart showing in detail the step (S300) shown in FIG.
4 is a flowchart showing the step (S400) shown in FIG. 2 in detail.
5 to 8 are operation screen diagrams showing a configuration diagram and a design operation of the cyber security apparatus shown in FIG.

While the invention is susceptible to various modifications and alternative forms, specific embodiments thereof are shown by way of example in the drawings and will herein be described in detail. It should be understood, however, that the invention is not intended to be limited to the particular embodiments, but includes all modifications, equivalents, and alternatives falling within the spirit and scope of the invention.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as a second component, and similarly, the second component may also be referred to as a first component. And / or < / RTI > includes any combination of a plurality of related listed items or any of a plurality of related listed items.

It is to be understood that when an element is referred to as being "connected" or "connected" to another element, it may be directly connected or connected to the other element, . On the other hand, when an element is referred to as being "directly connected" or "directly connected" to another element, it should be understood that there are no other elements in between.

The terminology used in this application is used only to describe a specific embodiment and is not intended to limit the invention. The singular expressions include plural expressions unless the context clearly dictates otherwise. In the present application, the terms "comprises" or "having" and the like are used to specify that there is a feature, a number, a step, an operation, an element, a component or a combination thereof described in the specification, But do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, or combinations thereof.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs. Terms such as those defined in commonly used dictionaries should be interpreted as having a meaning consistent with the meaning in the context of the relevant art and are to be interpreted in an ideal or overly formal sense unless explicitly defined in the present application Do not.

Hereinafter, preferred embodiments of the present invention will be described in detail with reference to the accompanying drawings. In order to facilitate the understanding of the present invention, the same reference numerals are used for the same constituent elements in the drawings and redundant explanations for the same constituent elements are omitted.

FIG. 1 illustrates a monitoring apparatus for driving a cyber security apparatus, for example, a central processing apparatus. FIG. 1 illustrates a configuration corresponding to the environment of a nuclear power plant according to a user's input during a design process using a monitoring apparatus. Simulation Nuclear Power Plant Environment ") to design and manage cyber security.

1, the monitoring apparatus 100 includes a monitoring unit 110, a program executing unit 120, a security evaluation executing unit 130, a communication unit 140, a diagnosis unit 150, and a control unit 160 can do.

The monitor unit 110 may display a screen for executing the cyber security evaluation management program by the control unit 160 when the cyber security evaluation management program installed by the user is executed.

The program execution unit 120 executes the cyber security evaluation management program under the control of the control unit 160 and executes the cyber security evaluation management program on the basis of the IT equipment menu including the design screen, the digital equipment included in the atomic energy facility and the digital control equipment, And a connection equipment menu including a plurality of connection equipment connectable to the digital control apparatuses.

The program executing section 120 may design the plurality of digital devices and digital control devices and at least one of the plurality of connection devices on the design screen at the user's option.

When the program executing unit 120 selects the plurality of digital devices and digital control devices displayed on the design screen, the program executing unit 120 inputs security setting menus and security attributes to set security levels of the digital devices and digital control devices Attribute input menu can be displayed.

Here, the security attribute may include at least one of a manufacturer of a digital apparatus of the nuclear power plant, an operating system type, a version, data transmission information, an application program, and a deployment position, and the security level may be upper, The user can arbitrarily select the set level or set the level of security level set for each digital device of the nuclear power plant.

When the security level is set by the user, the program execution unit 120 performs a cyber security evaluation according to the security level and the security attribute for each of the digital devices and digital control devices .

The program execution unit 120 may display a user attribute information menu for inputting user attribute information for each of the plurality of access devices when the user selects the digital devices and the digital control devices, as in the above-described method.

The user attribute may include at least one of a user type using the access equipment, an account type, and an authentication status.

In addition, the connection equipment may include an external input device, for example, an externally connectable device such as a smart phone, a notebook, and a tablet, but is not limited thereto.

The connection equipment may be installed in the digital equipment of the nuclear power plant to maintain the digital equipment of the nuclear power plant.

The program execution unit 120 may transmit the digital devices and the digital control devices to the data transmission unit 120 included in the security attributes of each of the digital devices and the digital control devices, The connection lines for the set data transmission corresponding to the information can be automatically connected. The data transmission information may include at least one of a type of data and a transmission method, but is not limited thereto.

The security evaluation executing unit 130 may perform the cyber security evaluation according to the input of the user. The security evaluation executing unit 130 analyzes the data transmitted from each of the digital equipments of the plurality of nuclear power plants to the network connection lines and determines whether the analysis result analyzing the data satisfies the set cyber security measure have.

Here, the security evaluation executing unit 130 may include an analysis result obtained by analyzing the data in the check list in which the security level set in each of the digital metrology control systems and the arbitrary security level set in each of the digital control systems is set Cyber security measures that can block cyber security threats.

If at least one of the security level set in each of the digital metrology control systems and the arbitrary security level set in each of the digital control systems does not satisfy the cyber security measure, the security evaluation executing unit 130, Diagnosis can be made by performing at least one of source diagnosis, network scanning diagnosis, device vulnerability diagnosis, and maintenance policy diagnosis for the power plant environment.

In addition, the security evaluation executing unit 130 may be configured to determine, based on the security data related to the diagnosis result, at least one of the digital metering control systems and the digital control system, One control system can be repaired, and the analysis result and the repair result can be stored.

If at least one of the security level set in each of the digital metering control systems and the arbitrary security level set in each of the digital control systems satisfies the cyber security measure after the analyzing step , And store the analysis result.

At this time, the security evaluation executing unit 130 performs, for the at least one control system that transmits data that does not satisfy the cyber security measure among the digital metering control systems and the digital control systems, And at least one of the digital control systems can repair the at least one control system and reset the security level and the security level.

The communication unit 140 may receive an update check list for a newly added check list due to an event related to cybersecurity through communication with an external device connected to the web or the Internet network such as a server or an external computer . The communication unit 110 may receive the update check lease and transmit the update check lease to the security evaluation executing unit 130.

The diagnosis unit 150 performs detailed design vulnerability modeling for modeling the detailed design of the development environment using the design design tool to support the security level performed by the security evaluation executing unit 130, The development environment can be analyzed.

The diagnosis unit 150 can perform at least one of diagnosis, source diagnosis, network scanning, system vulnerability diagnosis through simulation hacking, and maintenance policy diagnosis for system diagnosis of the development environment.

The control unit 160 may control the monitor unit 110, the program executing unit 120, the security evaluation executing unit 130, the communication unit 140, and the diagnosis unit 150 according to the user's input. And transmit the analysis result and the maintenance result to a connected external device in a network state.

Also, after the simulated nuclear power plant environment is designed, the control unit 160 can set up a questionnaire for each of the digital equipments according to the input of the user.

At this time, the questionnaire may be at least one of equipment name, location, physical management status, administrator, accessibility, accessibility, and maintenance records for each of the digital equipments, but is not limited thereto.

That is, the questionnaire may be information on one digital device as described above, but it may include a questionnaire on a protocol used by the user as a set of the starting digital device and the destination digital device for the system analysis There is no limitation.

After completing the questionnaire setting, the control unit 160 can set the transition status for each digital device according to the input of the user.

Here, the control unit 160 displays the content of the set regulation instruction on the monitor unit 110, and the user can select the current status including the connection protocol for other digital equipment and access equipment that can be connected to the digital equipment, But it is not limited thereto.

Thereafter, the control unit 160 may control the monitor unit 110 to output the report of the questionnaire and the status and compliance of the requirement, after the execution status is set.

2 is a flowchart illustrating a method of generating a report of a cyber security apparatus according to the present invention.

Fig. 2 illustrates a method of executing a program for cyber security evaluation and management by the monitoring apparatus shown in Fig. 1. Fig.

Referring to FIG. 2, the program executing unit 120 of the monitoring apparatus includes digital equipment of a plurality of nuclear power plants and a plurality of access equipment connectable to the digital equipment in response to a nuclear facility environment for cyber security evaluation management A simulation nuclear plant environment can be designed (S210).

The program execution unit 120 executes a cyber security evaluation management program under the control of the control unit 140 and executes a program including a design screen, an IT equipment menu including digital equipment of a plurality of nuclear power plants, and a digital equipment of the plurality of nuclear power plants The display unit 110 may display a menu of connection equipment including a plurality of connection equipment connectable to the display unit 110. [

The program execution unit 120 may design at least one of the digital equipments and the plurality of connection equipment of the plurality of nuclear power plants on the design screen by the user's selection.

Simulation After the environment designing step S210 of the nuclear power plant, the program executing unit 120 sets the security level of each of the digital equipments of the plurality of nuclear power plants and inputs security attribute information, Attribute information may be input (S220).

When the program execution unit 120 selects the digital devices of the plurality of nuclear power plants displayed on the design screen, the program execution unit 120 displays a security setting menu for setting the security level of the digital devices of the plurality of nuclear power plants, Input menu can be displayed.

Here, the security attribute information may include at least one of a manufacturer of a digital apparatus of the nuclear power plant, an operating system type, a version, data transmission information, an application program, and a placement position, Alternatively, the user may arbitrarily select the set level or set the level of security level set for each digital device of the nuclear power plant.

The program execution unit 120 performs the cyber security evaluation according to the security level and the security attribute information for each digital device of the plurality of nuclear power plants when the security level is set by the user and the security attribute information is input can do.

The program executing unit 120 may display a user attribute information menu for inputting user attribute information for each of the plurality of access devices when the user selects the plurality of access devices, as in the above-described method.

In operation S230, the program executing unit 120 may manually connect the network connection lines connecting the digital equipments of the plurality of nuclear power plants based on the security attribute information in operation S230.

The program executing unit 120 may be configured to execute the program executing unit 120 and the program executing unit 120. The program executing unit 120 may be configured to execute the program executing unit 120, The network connection lines for the established data transmission corresponding to the transmission information can be manually connected by the user.

However, the program execution unit 120 can automatically connect network connection lines, but is not limited thereto.

The control unit 160 controls the security of the at least one of the digital devices and the access devices in accordance with the input command of the user after the design of the simulation nuclear power plant designed by the program executing unit 120 is completed, Mode (S300), or a report mode (S400) that requires a report result on questionnaires, status, and compliance with requirements.

FIG. 3 is a flowchart showing in detail the step (S300) shown in FIG.

3, when the security mode is selected by the user after the network connection line manual connection step S230, the security evaluation executing unit 130 of the monitoring device checks whether the security evaluation mode of the simulation nuclear facility (S310), and analyzes data transmitted from the digital metering control systems and the digital control systems to the network connection lines (S320).

That is, the security evaluation executing unit 130 may perform the cyber security evaluation according to the input of the user and analyze the data transmitted from the digital metering control systems and the digital control systems to the network connection lines .

After the analysis of the data transmitted to the network connection lines (S320), the diagnosis unit 150 determines whether the analysis result of the analysis of the data indicates the security level set in each of the digital metering control systems and the security level set in each of the digital control systems (S330) whether the selected security level satisfies the cyber security measure that can block the cyber security threat elements included in the set check list.

After the determination step S330 of the data transmitted to the network connection lines, the diagnosis unit 150 determines at least one of the security level set in each of the digital metrology control systems and the arbitrary security level set in each of the digital control systems If the cyber security measure does not satisfy the cyber security measure, at least one of source diagnosis, network scanning diagnosis, device vulnerability diagnosis, and maintenance policy diagnosis for the simulated nuclear facility environment may be performed (S340).

Based on the security data related to the diagnosis result, at least one of the digital metering control systems and the digital control system may be used by the security evaluation executing unit 130 for the cyber security, The control system can be repaired (S350), and the analysis result and the maintenance result can be stored (S360).

In step S340, the security evaluation executing unit 130 may determine that at least one of the security level set in each of the digital metering control systems and the arbitrary security level set in each of the digital control systems is the cyber security measure , The analysis result can be stored.

That is, if the security evaluation executing unit 130 satisfies the cyber security measure, the security evaluation executing unit 130 stores the analysis result. If the cyber security measure is not satisfied, the security evaluation executing unit 130 determines that the digital equipment of the plurality of nuclear facilities is not satisfied with the cyber security measure It is possible to select and maintain one of the plurality of connection equipment for cyber security of the digital equipment of the nuclear facility transmitting the data and to store the analysis result and the maintenance result ).

4 is a flowchart showing the step (S400) shown in FIG. 2 in detail.

4, when the report mode is selected by the user after the network connection line manual connection step S230, the control unit 160 of the monitoring device checks the device name , The location, the physical management status, the manager, the approach approach, the accessibility, and the maintenance record (S410).

Here, the control unit 160 may be configured to determine, based on at least one of the device name, the location, the physical management status, the administrator, the accessibility, the accessibility, and the maintenance record for each of the digital devices input in step S410, A separate inquiry list may be generated and displayed on the monitor 110 (S420).

The control unit 160 may check whether the list changed or modified by the user is re-entered in the inquiry list for each digital device (S430).

The control unit 160 regenerates the changed inquiry list for each digital device and displays it again on the monitor unit 110 in step S440. If the re-input does not occur in steps S430 and S440, The recommendation and the XML file for the questionnaire list pertaining to the digital device can be generated and stored (S450).

Then, the control unit 160, upon inputting the transition status command, determines whether the digital devices and the access devices are in compliance with the status and requirements of the digital devices and the access devices, respectively, (S460).

At this time, the status and compliance of the requirement may include, but is not limited to, connection protocols for other digital equipment and access equipment that can be connected to the digital equipment based on the content of the regulation guide.

When the execution status is input, the control unit 160 stores the execution status of each digital device (S460). At the input of the report, the control unit 160 generates a report including at least two of the questionnaire, the status, The result may be generated as an XML file (S470).

The control unit 160 may convert the report result into an encrypted file (S480).

The cyber security apparatus according to the present invention can store information on connected users and equipment connected to the user in real time in order to derive the current design, cyber security, report result when designing a simulated nuclear power plant environment, Even when the stored data is opened and confirmed, the information can be stored, but the present invention is not limited thereto.

5 to 8 are operation screen diagrams showing a configuration diagram and a design operation of the cyber security apparatus shown in FIG.

5 to 8 illustrate the monitoring device as described above with reference to FIG.

5, the monitoring apparatus includes a design screen 1 for executing a cyber security evaluation management program, a screen menu 2, and digital equipment of a plurality of nuclear facilities, And an access equipment menu (4) including a plurality of access equipment connectable to the digital equipment of the plurality of nuclear facilities.

6, the program executing unit 120 of the monitoring apparatus may access the design screen 1 of the monitor unit 110 according to the input of the user by using the digital equipment of a plurality of nuclear facilities included in the IT equipment menu 3 A plurality of connection equipment 4_1 of the connection equipment menu 3_1 and the connection equipment menu 4 can be arranged.

In addition, the program execution unit 120 displays a security setting menu for setting a security level for the digital equipment 3_1 of a plurality of nuclear facilities and an attribute input menu for inputting security attribute information, .

7, the program executing unit 130 of the monitoring apparatus includes a plurality of pieces of digital equipment 3_1 and a plurality of connecting equipment 4_1 arranged in a design screen 1 of the monitor unit 110 And a network connection for setting data transmission corresponding to the data transmission information contained in the security attribute information of each of the digital equipments 3_1 and the plurality of connection equipments 4_1 of the plurality of nuclear facilities, The lines 5_1 can be manually connected or automatically connected by the user.

In this case, although the connection line menu 5 for the network connection lines 5_1 is displayed in FIG. 7, it is not limited thereto.

8, after the network connection line 5_1 is automatically connected, the security evaluation executing unit 130 of the monitoring device inputs the input for the cybersecurity evaluation from the user, and the digital devices 3_1 And the plurality of access devices 4_1 to the network connection lines 5_1 to analyze whether the analyzed result of the analysis of the data satisfies the established cyber security measure.

The security evaluation executing unit 130 analyzes the analysis result of the data by using the analysis result menu 6_1 for the digital equipments 3_1 of the nuclear facility and the analysis result menu for the plurality of connection equipments 4_1 6-2 for the network connection line 5-1, the menu 6_3 for the analysis result for the network connection line 5-1 and the menu 6_4 for the other errors are selected and input by the user, the analysis results and cyber security measures corresponding thereto are satisfied (6_5) so as to confirm whether or not it is displayed on the result confirmation screen (6_5).

If the cyber security measure is satisfied, the security evaluation executing unit 130 stores the analysis result when the analysis result menu 6_1, 6_2, 6_3 is selected and inputted. If the cyber security measure is not satisfied, It is possible to select and maintain one of the plurality of access devices 4_1 for cyber security of the digital equipment of the nuclear facility transmitting the data that does not satisfy the cyber security measure among the plurality of access devices 3_1 , The analysis result and the maintenance result can be stored.

It will be understood by those skilled in the art that various changes in form and details may be made therein without departing from the spirit and scope of the invention as defined in the appended claims. It will be possible.

Claims (12)

Designing a simulated nuclear power plant environment including digital equipment of a nuclear power plant and access equipment connectable to the digital equipment in response to a nuclear power plant environment for cyber security evaluation management;
Setting and inputting security level and security attribute information of each of the digital devices, setting and inputting user attribute information of each of the access devices;
Connecting network connection lines for the set data transmission corresponding to the data transmission information included in the security attribute information between the digital devices to complete a design for the configuration diagram;
Inputting a questionnaire according to a predetermined inquiry list for each of the digital equipments and the access equipment at the time of inquiry command input;
Inputting a status of compliance with status and requirement conformity of each of the digital devices and the access devices based on a content of a predetermined regulation instruction for each of the digital devices and the access devices at the time of inputting the status information; ; And
And outputting a report result including at least two of the questionnaire, the current status, and the requirement compliance at the time of report creation input,
Wherein the questionnaire input step inputs a questionnaire for at least one of a device name, a location, a physical management status, an administrator, an accessibility, accessibility, and maintenance records for each of the digital devices. The method according to claim 1,
Analyzing data transmitted to the network connection lines upon inputting a cyber security evaluation test command for the simulation nuclear power plant environment;
Repairing at least one of the digital devices for at least one of the access devices for cybersecurity if the analyzed result of the analysis of the data is unsatisfied with the set cyber security measure;
Analyzing an evaluated security level of digital devices of a nuclear power plant actually constructed according to the simulated nuclear power plant environment;
Performing at least one of a source diagnosis, a network scanning diagnosis, a device vulnerability diagnosis, and a maintenance policy diagnosis for the nuclear power plant constructed as the environment of the simulated nuclear power plant to diagnose the nuclear power plant; And
And managing the security data related to the diagnosis result. 3. The method of claim 2,
Wherein the security attribute information includes at least one of a manufacturer of each of the digital devices, data transmission information, an operating system type and version, an application program, and a deployment location. 3. The method of claim 2,
Wherein the user attribute information includes at least one of a user type, an account type, and an authentication status using each of the access devices. 3. The method of claim 2,
Wherein the repairing step comprises repairing any of the digital equipments to arbitrary digital equipment transmitting data that does not satisfy the cyber security measure among the digital equipments, A method of generating a report of a cyber security device, comprising the steps of resetting the security level. 6. The method of claim 5,
Further comprising: after the repairing step, storing the analysis result of the data and the repair result of the arbitrary digital equipment. 3. The method of claim 2,
Further comprising the step of storing the analysis result of the data when the analysis result of analyzing the data satisfies the established cyber security measure after the analysis of the data. 3. The method of claim 2,
Wherein the data transmission information includes at least one of a type of the data and a transmission method. 3. The method of claim 2,
Prior to analyzing the configuration diagram,
Receiving an update check list of a cyber security threat element from an external device connected to the web or internet network;
Designing a previously designed previous workflow as a workflow according to the update check list and evaluating security related information that can be analyzed through the analysis of the workflow; And
And evaluating a security level of the digital devices based on the security-related information. 10. The method of claim 9,
The security-related information evaluation step evaluates the security-related information that can be analyzed through analysis of the previous workflow when the update check list is not received,
The security-related information evaluation step may include a step of evaluating the threat analysis and the vulnerability analysis by querying the security-related information with the update check list according to the workflow,
Wherein the managing step manages the security data for managing a development process and a security environment occurring in the entire process. delete Designing a simulated nuclear power plant environment including digital equipment of a nuclear power plant and access equipment connectable to the digital equipment in response to a nuclear power plant environment for cyber security evaluation management;
Setting and inputting security level and security attribute information of each of the digital devices, setting and inputting user attribute information of each of the access devices;
Connecting network connection lines for the set data transmission corresponding to the data transmission information included in the security attribute information between the digital devices to complete a design for the configuration diagram;
Inputting a questionnaire according to a predetermined inquiry list for each of the digital equipments and the access equipment at the time of inquiry command input;
Inputting a status of compliance with status and requirement conformity of each of the digital devices and the access devices based on a content of a prescribed regulation instruction for each of the digital devices and the access devices at the time of inputting the status information; ; And
Outputting a report result including at least two of the questionnaire, the current status, and the requirement concatenation at the time of report creation input,
The execution status input step may include generating the report of the cyber security device that inputs the current status and the requirement compliance including the connection protocol for the other digital devices and access devices connectable to the digital devices based on the content of the regulation guide Way.

Images