A Study on the Identification of Cloud Security Risks in the Manufacturing Industry

제조산업 클라우드 보안위험 식별 연구

  • 오정훈 (중앙대학교 융합보안학과) ;
  • 이주노 (중앙대학교 융합보안학과) ;
  • 장항배 (중앙대학교 산업보안학과)
  • Received : 2023.11.21
  • Accepted : 2024.01.10
  • Published : 2024.04.30

Abstract

In the trend of digital transformation and the increase in non-face-to-face services triggered by the Fourth Industrial Revolution, the demand for cloud computing services is being sharply stimulated. Currently, the cloud is being introduced in various industrial sectors including public, IT, and finance, and the manufacturing industry is also adopting the cloud to secure future sustainability and is promoting innovation through smart manufacturing. However, it has been found that there are constraints in the adoption of cloud by manufacturing companies due to concerns about security. Existing studies that have identified cloud security risks have been limited to presenting general cloud security risks or technical security risks rather than focusing on the manufacturing industry. Therefore, this study aimed to identify cloud security risks in the manufacturing industry based on the actual concerns in the field. For this, expert interviews and literature research were conducted to newly identify cloud security risks in the manufacturing industry, and the adequacy and urgency of the selected security risks were verified through surveys. Based on this study, if a cloud security management system for the manufacturing industry is designed in the future, it is expected that the adoption of cloud in the manufacturing industry will be more activated.

제4차 산업혁명으로 촉발된 디지털 전환과 비대면 서비스의 증가라는 흐름 속에서 클라우드 컴퓨팅 서비스에 대한 수요가 가파르게 촉진되고 있다. 현재 클라우드는 공공, IT, 금융 등 다양한 산업 분야에 도입되고 있으며, 제조산업 역시 미래 지속가능성 확보를 위하여 클라우드를 도입, 스마트 제조를 통한 혁신을 추진하고 있다. 하지만 제조기업이 클라우드를 도입하는 데는 보안 우려사항으로 인한 제약이 존재하는 것으로 나타났다. 클라우드 보안위험을 확인한 기존 연구는 제조산업을 고려했다기 보다는 일반적인 클라우드 보안위험이나 기술적 보안위험을 중심으로 클라우드 보안위험을 제시한 한계가 있었다. 이에 본 연구는 제조산업 현장에서 실제 우려하는 사항을 바탕으로 제조산업 클라우드 보안위험을 분석하고자 하였다. 이를 위해 전문가 인터뷰와 문헌조사를 시행해서 제조산업 클라우드 보안위험을 새롭게 식별하였으며, 선정된 보안위험에 대하여 설문조사를 통해 적합성과 시급성을 검증했다. 본 연구를 기반으로 향후 제조산업 클라우드 보안관리 체계가 설계된다면, 제조산업의 클라우드 도입이 보다 활성화될 것으로 기대한다.

Keywords

Acknowledgement

이 논문은 2023년도 정부(산업통상자원부)의 재원으로 한국산업기술진흥원의 지원을 받아 수행된 연구임(P0008703, 2023년 산업혁신인재성장지원사업).

References

  1. Q. Qi, F. Tao, "A Smart Manufacturing Service System Based on Edge Computing, Fog Computing, and Cloud Computing," IEEE Access, Vol. 7, pp. 86769-86777, Jun. 2019. https://doi.org/10.1109/ACCESS.2019.2923610
  2. J. Lee, "Data(D.A.T.A.): A Strategy for Digital Transformation in Manufacturing Industry Using Cloud," Trade Focus, No. 27, Korea International Trade Association (KITA), Aug. 2021.
  3. "2023 Domestic Cloud Computing Status and Prospects: Market Pulse," IDG Korea, Feb. 2023.
  4. Korea Academy of Industrial Security, "Protection Measures for Industrial Technology in Response to the Spread of Cloud Computing," in Proc. of the 2022 Industrial Security Conference, Seoul, Nov, 2022.
  5. Y. Oh, T. Kang, "Analysis of New Technology Adoption Strategies in Manufacturing Companies: Focusing on Domestic Smart Production Cases," Innovation Studies, Vol. 18, No. 1, pp. 97-117, Feb. 2023. https://doi.org/10.46251/INNOS.2023.2.18.1.97
  6. S. J. Jung. (2022, Dec), [Focus] AWS, Introduction of the Role of Cloud and Examples for Digital Transformation in Manufacturing Industry. CAD&Graphics [Online]. Available: https://www.cadgraphics.co.kr/newsview.php?pages=news&sub=news01&catecode=2&num=71901#
  7. "Top Threats to Cloud Computing," Cloud Security Alliance, 2022.
  8. "National Cloud Computing Security Guidelines," National Intelligence Service and National Security Technology Research Institute, Jan. 2023.
  9. "2030 Future Society Changes and Cyber Threats Outlook Research," Korea Internet & Security Agency, Dec. 2021.
  10. S. W. Ahn, H. S. Yoo, D. H. Kim, "Key Issues and Countermeasures in Cloud Security," Software Policy Research Institute, Dec. 2017.
  11. Y. J. Choi, J. H. Ra, P. K. Hong, S. H. Lee, "Vulnerability and Security Management System from the Perspective of Cloud Service Users," Journal of Information Technology and Architecture, Vol. 9, No. 4, pp. 401-411, Dec. 2012
  12. C. S. Park, "Study on Security Considerations in the Cloud Computing," Journal of Korea Academia-Industrial Cooperation Society, Vol. 12, No. 3, pp. 1408-1416, Mar. 2011. https://doi.org/10.5762/KAIS.2011.12.3.1408
  13. O. C. Na, H. B. Chang, "Design of National R&D Project Security Rating Evaluation Model," Journal of Korea Technology Innovation Society, Vol. 23, No. 4, pp. 841-862, Aug. 2020. https://doi.org/10.35978/jktis.2020.8.23.4.841