A Study on Security Requirements of Shipboard Combat System based on Threat Modelling

The shipboard combat system is a key for naval that supports command and control process cycle consisting of Detect - Control Engage in real time to ensure ship viability conduct missions. Modern systems were developed on the basis Open Architecture(OA) maximize acceptance latest technology interoperability between systems, actively introduced COTS(Commercial-of-the-shelf). However, as result that, vulnerabilities inherent COTS SW HW also occurred system. importance cybersecurity being emphasized but research reflecting characteristics still lacking Korea. Therefore, this paper, we systematically identify threats by applying Data Flow Diagram, Microsoft STRIDE threat modelling methodology. analyzed using Attack Tree & Misuse case. Finally derived applicable security requirements which can be used at stages planning designing verified through NIST 800-53 items.