정보보증 기반의 함정 전투체계 사이버 보안 발전방안

The warship's combat system is an automated system that can effectively respond to various threats occurring simultaneously on the battlefield. The warship's combat system can provide commanders with the valuable information for command decisions in a timely manner and ensure victory in battle when it has an advantage in time and space domain. In this paper, we will analyze cyber threats that may arise in the warship's combat system, examine the limitations of cybersecurity currently applied to the its combat system, and present cybersecurity reinforcement plans for the its combat system. Until now, the Republic of Korea Navy has applied cybersecurity measures in a bolt-on manner, which is independent of warship's combat system. In order to apply reinforced cybersecurity measures for the warship's combat system, the Risk Management Framework of Korea must be applied from the stage of initial planning stage. We need to internalize reliable cybersecurity technologies into the warship's combat system through close review, and mitigate the level of cyber risk by managing, evaluating, and authorizing them according to predefined security controls. In addition, cybersecurity that can guarantee cyber resilience based on Information Assurance can respond to cyber attacks effectively.