교통안전시설 통합관리체계(ROADEE-IMS) 표준화를 위한 ZTA·N2SF·SBOM 기반 OT 보안 요구사항 추적 모델 제안

초록

This study frames ROADEE-IMS security as a traceability problem linking assets, threats, controls, tests, and evidence. Using ZTA, N2SF, and SBOM, it defines a security traceability tuple and seven requirements covering asset grading, access re-evaluation at the integrated controller (R-PEP), and update-package installation decisions (R-SBOM). Three emulated cases illustrate test–evidence linkage: control-path p99 (E1) was 13 ms under plaintext, TLS 1.3, and mTLS+ACL; upstream p99 under repeated container-image deployment (E3) was 56 ms; and fault handling (E2) logged undelivered messages within 67 ms of dispatch. It offers a traceable baseline model for ROADEE-IMS security standardization and conformity-assessment design, not a final validation.

키워드