Development of a Cybersecurity Workforce Management System

사이버 보안 분야 전문가 프로파일 관리 시스템 연구

  • 안준영 (상명대학교 소프트웨어학과) ;
  • 이승훈 (상명대학교 소프트웨어학과) ;
  • 박희민 (상명대학교 소프트웨어학과) ;
  • 김현철 (상명대학교 소프트웨어학과)
  • Received : 2021.08.27
  • Accepted : 2021.09.16
  • Published : 2021.09.30

Abstract

According to the trend of increasingly sophisticated cyber threats, the need for technology research that can be applied to cyber security personnel management and training systems is constantly being raised not only overseas but also in Korea. Previously, the US and UK have already recognized the need and have been steadily conducting related research from the past. In the United States, by encouraging applications based on related research (NICE Cybersecurity Workforce Framework) and disclosing successful use cases to the outside, it is laying the groundwork for profiling cyber security experts. However in Korea, research on cyber security expert training and profiling is insufficient compared to other countries. Therefore, in this study, in order to create a system suitable for the domestic situation, research and analysis of cases in the United States and the United Kingdom were conducted over the past few years, and based on this, a prototype was produced for the study of profiling technology for domestic cyber security experts.

Keywords

References

  1. Ponemon Institute LLC, "2018 Cost of Data Breach Study: Impact of Business Continuity Management", IBM, 2018.
  2. T.S. Kim, H.S. Jeon, Y.B. Kim, T.Y. Kim, S.H. Lee, "Prior research for development of national cyber security manpower management system", The Korea Society of Management Information Systems, 2020.
  3. William Newhouse, Stephanie Keith, Benjamin Scribner, and Greg Witte, "National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework", National Institute of Standards and Technology, USA, 2017.
  4. CIISec, "CIISec Skills Framework V2.4", Chartered Institute of Information Security, UK, 2019.
  5. CIISec, "IISP Knowledge Framework V1.1.1", Chartered Institute of Information Security, UK, 2019.
  6. CIISec, "CIISec Roles Framework V0.3", Chartered Institute of Information Security, UK, 2019.
  7. Awais Rashid, Howard Chivers, George Danezis, Emil Lupu, and Andrew Martin, "The Cyber Security Body of Knowledge V1.0", CyBOK, 2019.
  8. Ministry of Employment and Labor, Human Resources Development Service of Korea, "2020 National Competency Standards (NCS) Development and Improvement Manual", 2020.