网络攻击下安全级仪控系统人因失误风险分析初探  

Preliminary Risk Analysis of Human Errors for Safety Digital I&C System Induced by Cyber Attacks in Nuclear Power Plants

作　　者：郝祖龙 袁睿 郝琦 玉宇[1,2] HAO Zulong;YUAN Rui;HAO Qi;YU Yu(School of Nuclear Science and Engineering,North China Electric Power University,Beijing 102206,China;Beijing Key Laboratory of Passive Safety Technology for Nuclear Energy,North China Electric Power University,Beijing 102206,China)

机构地区：[1]华北电力大学核科学与工程学院,北京102206 [2]非能动核能安全技术北京市重点实验室,北京102206

出　　处：《核科学与工程》2022年第4期959-967,共9页Nuclear Science and Engineering

基　　金：国防科技工业核动力技术创新中心资助项目;北京市自然科学基金资助项目(1192016)。

摘　　要：为研究网络攻击下人因失误对核电站安全级仪控系统的风险影响,在传统概率安全评价模型基础上引入网络攻击要素,采用情境分析并结合核电厂应急运行规程研究了一种网络攻击下安全级仪控系统人因失误风险分析方法。简要分析了网络攻击可能引发的操纵员失误行为,并给出相应人误风险分析方法及流程。以丧失二回路冷源为例,从人因失误角度定性分析了网络攻击导致的操纵员作业失误风险,建立了相应的人因失误风险故障树模型,并比较了不同人因失误概率下的事故发生概率。初步结果表明,人因在被明显误导的状况下,对应事故概率不可忽略,通过提高操纵员对网络攻击的认知能力可有效降低事故概率水平。A novel probabilistic safety evaluation model considering human error under cyber attack was investigated in combination with scenarios analysis and emergency operation guidance to study the risk of human error caused by cyber attack on safety digital instrument and control(DCS) system of nuclear power plant. This paper mainly analyzed the operator error behavior caused by cyber attack and provided the corresponding method and process. Then, for a hypothetical accident of loss of secondary loop cold source, a human error risk fault tree model was built to qualitatively analyze the risk of operator error caused by cyber attack and compare the occurrence probability of different operator cognitive competence. Preliminary results of the case study demonstrate that the human error probability cannot be ignored when the operator is obviously misled and the human error risk may be effectively reduced by improving the operator’s cognitive ability to deal the cyber attack events.

关 键 词：核电厂 数字化仪控系统 网络攻击 人因失误 故障树 

分 类 号：TL362[核科学技术—核技术及应用]