Update management apparatus of industry control system, apparatus and method for update verification

An apparatus for verifying an update of a control system comprising:

• one or more processors;
• a memory comprising a plurality of units which are executable by the one or more processors, the plurality of units comprising:
• a pretest performance unit for performing a pretest for a plurality of input update files that input in order to update a program corresponding to a control device of the control system;
• a file type classification unit for classifying the plurality of update files excluding files based on the pretest results from the plurality of input update files into any one file type of a firmware file, a patch file, and another type of file;
• an integrity verification unit for verifying integrity of the plurality of update files so as to correspond to the file types of the plurality of update files;
• an update file generation unit for generating a final update file from the plurality of update files, the integrity of which has been verified;
• and
• a communication unit for sending a result of classifying the plurality of update files to an update management apparatus and receiving information about whether the result of classifying the plurality of update files is approved or the file type of the update file, set by the update management apparatus, from the update management apparatus;
• wherein the pretest performance unit performs the pretest that includes checking whether each input update file violates an application policy unrelated to whether the update file contains malware and excludes all files that violate the application policy from the plurality of input update files,
• wherein the integrity verification unit verifies the integrity based on a Reference Data Set (RDS) comprised of hash values when the update file is the firmware file by comparing the RDS of the update file against the RDS of known firmware provided by the manufacturer of the firmware,
• wherein the integrity verification unit verifies the integrity based on a virus check tool when the update file is any one of the patch file and the other type of file, wherein the virus tool uses a plurality of different virus-checking products on the patch file or the other type of file.