JAEA's experience in strengthening computer security and challenges of capacity building

Nakamura, Hironobu ; Shibata, Ryodai ; Tomioka, Osamu ; Shiromo, Hideo 

Computer-controlled systems are commonly used in the operation of nuclear facilities and Physical Protection System (PPS). Cybercrime can have critical impacts on security. Those computer systems in the nuclear facility is basically not connect to the external LAN, It has a possibility to cause the cyber-attacks by employee (insider). If insider changes program or installs malwares to PPS, they are invalidated. Due to insufficient detection etc., and then unauthorized removal and sabotage may be caused. In order to prevent the cyber-attacks and to respond to incidents when they occur, JAEA is working on the implementation of cyber security measures and the development of a cyber security incident response team (PPCSIRT). This presentation introduces the computer systems and anticipated threats in nuclear facilities. Then it introduces the required human resources and capacity building for them.