Security of Safety Important I&C Systems - Nuclear Power Plant Instrumentation and Control Systems for Safety and Security - page 233

Chapter 7
Security of Safety
Important I&C Systems
Vyacheslav Kharchenko
National Aerospace University named after N.E. Zhukovsky KhAI, Ukraine & Centre for Safety
Infrastructure-Oriented Research and Analysis, Ukraine
Andriy Kovalenko
Centre for Safety Infrastructure-Oriented Research and Analysis, Ukraine
Anton Andrashov
Research and Production Corporation Radiy, Ukraine
ABSTRACT
One of the most challenging modern problems—security assessment and assurance for safety important
I&C systems—is discussed. Interrelations and hierarchical structure of I&C systems attributes, includ-
ing safety and security, are considered. Review of existing regulatory documents that covers various
development and operation aspects of safety important I&C systems is presented. Such a review also ad-
dresses issues related to requirements for safety important I&C systems, including security requirements,
depending on their underlying technology, as well as reveals the impact of the main features, including
used technologies and development approaches. Main challenging problems and requirements in the
area of security assurance for complex safety important I&C systems are outlined. A possible way to
analyze the security vulnerabilities of safety important I&C system is considered; it is based on process-
product approach, and it requires performance of assessments for products (components of I&C system
at diferent life cycle stages) and all the processes within the product life cycle. A possible approach
to assessment and assurance of safety important I&C systems security is discussed. Such an approach
takes into account possible vulnerabilities of Field Programmable Gate Arrays (FPGA) technology and
appropriate points of their insertion into the life cycle. An analysis of existing techniques for assurance
of safety important I&C systems security is performed.