No.106

2018 ISS Square (2019/2/22)
E1 @ . EA8 0 P
IG I P
AC@ E 5 @ @A80 @8A: 0AA AAdroa

sp
08

kvc
Aeu

,@0 C05- 5 @ 08

Pfj
88A

Sgnhm
Gtl
5 @ E1 @ . EA8 0 AEA

00e
C@8 E - A 8 C

A 8A0 AC 0bi
5- 5 @ 08

C@8 Ex¯Cyber-PhysicalđēĘĩĶCPSķă@òûôðèĀêúóõÔW6đēĘĩĶITķôĔĊĬįĘąð"RđēĘĩĶOTķôĔĵĢĘąĵă¡.óqèĀS¯Ý×ĀÕéãïÔoõCPSă¡^óīęİ)æÔ 4įēċqă«ÙZôbuă{ðæêÕoõÔônÌðæîi>įēċqZă¼sæê ră÷ðúêûôï×ĀÕi>įēċqZðæîÔĉĆěĮĆĳăĥĵēðæêZÔFTA/ATAÔĄĤıĵĖÔFMEAÔSTAMP/STPAÔPetri Netă,ÿâîØĀÕAbstract
In order to make this Cyber-Physical System (CPS) secure, it is necessary to analyze the security of the information system (IT) and the safety of industrial control system (ICS) in an integrated manner.
Therefore, this research aims at proposing a method of conducting latent risk analysis by modeling CPS in a comprehensive manner.
This paper summarizes the results of investigating the existing risk analysis methods as an early stage of research. As an existing risk analysis method, the guideline-based method, FTA / ATA,
stochastic approach, FMEA, STAMP / STPA, Petri Net are taken up.
ĊĵĲĵě ĺ Cyber-Physical System(CPS)ÔIndustrial Control System(ICS)Ôįēċ ĄĔēĪĳĚÔĆĳđęĳĚÔĔĵĢĘąĵÔFTAÔATAÔFMEAÔSTAMP/STPAÔPetri Net
Keyword: Cyber-Physical System(CPS), Industrial Control System(ICS), Risk assessment, Incident, Safety, FTA, ATA,FMEA, STAMP/STPA, Petri Net

joÝA?ă`âîaÄèĀIndustry 5.0 ó ­äāĀCyber-PhysicalđēĘĩĶCPSķðõÔCĶPhysical systemķôĔĳđĳČ ęğĆēăĜėĚĲĵċï¥ßÔC ïøäāĀ©:òęĵ
ĕă+ÍĴqæèĀãðïgêò¾üăøæĶCyber systemķÔéāăC óÇèĀãðïzÖò 2Ñô´ăúåèûôï×ĀÕĜėĚĲĵċ)Ýèèù"RđēĘĩĶICSķõÔéôCPSă ­èĀûôô1íðòìîÛÿÔ"R[¬ðW6[¬ôª.ï×ĀÕæÜæÔéāõ÷ë£óíØêöÜÿï×ÿÔÈ¯1Ñï×ĀĜėĚĲĵċ)äāê"RđēĘĩô@óõ÷ë»ÑÝ9ØôÝï×ĀÕ ãā÷ï"RđēĘĩĶ
OTķ[¬§ðW6đēĘĩĶITķ[¬§õØóĂĀãðòàw(ăÅ«æîÞêÝÔďĵĠēô9z)ÔÓK)ÔĎēĚ#òñô¯½óýÿÔ"RđēĘĩôćĵĤĳòĜėĚĲĵċ)ôāõ8ÖOàòĀãðõkþÜï×ĀÕoõÔOT/IT[¬§ÝóG¿CPSă´æÔįēċ¯3\ ô&ðòāĀgêòįēċ ĄĔēĪĳĚôbuă_èûôï×ĀÝÔoõÔéônÌðæîi>ôCPSđēĘĩ ôīęİ)Ôįēċ ĄĔēĪĳĚZă¼sæ÷ðúêûôï×ĀÕYĆĝĥĵđĭĳ%ÃĤıČĮĩĶSIPķ
IoT  óGTæêďĆğĵĴĢąĒĈİĴĔĊĬįĘą Éµ ýÿĞĐĵěÔĆĳđęĳĚGTðéô;|ôĨėġĳČ"RđēĘĩïèĀĞĐĵěüĄċđęĳĚóGèĀGTòñõÔãā÷ïûFTAÔETAÔFMEAÔHAZOPòñôįēċ ĄĔēĪĳĚZóýÿįēċ
Ý\äāÔéô$QGÝBäāÔ·¤ûChäāîÞêÕQÀãÿÚĀÔW6ĔĊĬįĘą ĆĳđęĳĚă;|ðæîæêĞĐĵě
óGèĀGTðæîûÔãā÷ïóäāêĞĐĵěGTõm'ï×Āð¦ÚþāĀÕæÜæÔto*3ÝVXôĸ§óýĀW6dï×Ā7.ó
õÔ$ô¿óGTèĀëáïõÔK/çĞĐĵěăMÞÀãäāîæ÷ÙÕ
æêÝìîÔCPSóÛØîõÔæÙĀW6dðÔéôI ðæîèĀĞĐĵěðôGTáÝSÐï×Āð¦ÚĀÕQôĞĐĵěGTïõÔĞĐĵěGTôChððûóÔéāÝW6dóýÿæÙĀûôï×ĀÜ fæÔûæW6dïæÙĀûôï×Āôï×āöéô*3ôkÝSÐï×ĀÕ     Sensor #1: Detect;→Motor: On;→Sensor#2: Detect;→Timer: 30 Sec;
→Motor: OFF;
Sensor #1

Sensor #2

Sensor #1: Detect;→Motor: On;→Timer: 30 Sec;
→Motor: OFF;
→Sensor#2: Detect; HMISensor #1: Detect;→Motor: On;→Sensor#2: Detect;→Timer: 3600 Sec;
→Motor: OFF;
Motor



message{data{$temp = 4;}}
message{const{$target = 110;}}20message{data{$temp = 42;}}ºÎºF±²­m0ČĮĢòñÔĪėĔĵĒôāüĆĥĳĚôp

M_I ô­òÿè÷äāêĪėĔĵĒôħĆĳĚÔāÝ

M_B ô­~°ĪėĔĵĒôģıėċÝv¶æüèØÜlÊô­ĦĵİěĕĆĨĵòñÔlÊp

ÏJô­®eôĆĥĳĚôÏJËĴ>ËÝ­æüèØÜ

ÌHò­

đēĘĩôÌHyÃă­æüèØÜ

PLv¹D³­ïÔv¹-¨ÜĶFormalismķ

ô­òºÝC«æüèØÜ

đĵčĳē"RÔPID"RòñôĆĳđęĳĚôÜþÔW6dăÒ5)æ
ÔóÆ.èĀZăBæêØĪėĔĵĒôĆĳďĵĚ ĶM_I ð­¸ķi.e.) XóĪėĔĵĒĶĎĨĳěüĔĳďĵķăÁïÞĀôĄĮĵĚW6ôÁĪėĔĵĒôģıėċ ĶM_B ð­¸ķi.e.) É=Ô}òñôĎĨĳěă<E¢UĄĮĵĚă<EÝ­æüèØÜ

CPS đēĘĩóGèĀįēċqZă¼sÂĶĪėĔĵĒcķó
OSI ĹÌHīęİđēĘĩ ó
Fault Tree Analysis / Attack Tree Analysis (FTA/ATA)
Event Tree Analysis (ETA)
Failure Mode and Effect Analysis (FMEA)
Hazard and Operability Studies (HAZOP)Petri net ðéô]NSTRAIDE
System Theoretical Accident Model and Process (STAMP)

21lïô!æüèäô¼sròñÝ­æüèØÜÿüèà­ïÞĀÜ