• Electronics and Telecommunications Trends
• /
• v.10 no.2 s.36
• /
• pp.143-162
• /
• 1995

최근 정보보호문제와 관련하여 많은 논의가 일고 있으며, 또한 이와 관련된 여러 법규들이 제. 개정 중에 있다. 이러한 노력을 통하여 과거에 문제되었던 개인정보나 통신 비밀의 보호 문제는 이제 어느정도 효과적으로 대응할 수 있게 되었다. 그러나 현행 법규들은 새롭게 등장한 정보침해 문제의 대응에 급급한 나머지 관련법들간의 상호조정이 제대로 이루어지지 못한 상황이다. 이와 같은 문제점들을 보완하기 위한 하나의 수단으로써 본 고에서는 정보 보호 문제와 관련된 전체 법체계를 종합적으로 검토하여 향후 정보보호관련 법규의 재정비 및 심화되는 정보보호 문제 해결에 도움을 주고자한다. 특히, 국책연구소로서 정보통신분야의 연구를 수행하고 있는 우리 연구소의 입장을 고려해 볼때, 본 고는 여러 관계자들이 간과하기 쉬운 정보보호의 중요성을 재인식하고 관련 법, 제도를 이해하는데 주요한 자료가 될 것으로 기대한다.

• 한국정보교육학회:학술대회논문집
• /
• 2010.01a
• /
• pp.3-8
• /
• 2010

정보시대를 살아가는 학생들에게 사이버 공간의 영향력은 날로 커지고 있다. 그러나 정보통신기술의 이면에는 역기능 또한 적지 않다. 자아 정체성의 혼돈, 바이러스 유포, 개인 정보의 오남용, 지적 재산권 침해, 불건전 정보의 유통, 사이버 폭력 등과 같은 역기능의 폐해를 경험하고 있다. 이러한 문제점들을 극복하고자 정보통신 윤리교육의 중요성은 점점 강조되고 있으나 기존의 오프라인 교육방법으로는 효과적인 정보통신윤리 교육을 하는데 어려움이 있다. 이러한 문제에 대해 본 논문에서는 기존의 정보통신 윤리교육의 단점을 보완할 수 있는 위키 기반의 웹기반 토의 학습모형을 개발하고 초등학교에 실험적으로 적용한 결과를 제시한다.

• Annual Conference of KIPS
• /
• 2023.05a
• /
• pp.180-182
• /
• 2023

많은 기업에서 시스템 보안 침해사고가 증가함에 따라 국내에서는 보안성 강화를 위해 정보보호 및 개인정보보호 관리체계(ISMS-P) 인증 의무대상을 확대하고 있다. 이에 중소기업에서도 ISMS-P 인증을 받기 위한 준비가 필요해졌다. 그러나 ISMS-P 인증을 위한 시스템을 구축하기 위해 많은 비용과 인력이 필요하고 이를 중소기업에서 구축하기엔 현실적으로 어려운 부분이 있다. SCAP는 정보시스템의 취약점을 보안기준에 맞춰 자동 관리하는 프로토콜이다. 본 논문에서는 ISMS-P 인증 항목 중 시스템 자동관리가 가능한 부분을 도출하여 상용 소프트웨어와 동작 방식을 비교함으로써, 중소기업에 SCAP를 적용하여 시스템을 구축하는 것이 정보보호 강화에 도움이 될 수 있음을 검증하고자 한다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.18 no.6
• /
• pp.1249-1254
• /
• 2014

As ICT ecosystem changes, security-related threat on individuals and corporations has increased. With the recent sophistication of hacking strategy, hacking serves commerce and its scale becomes larger than ever. Accordingly, the analysis on cyber intrusion is required. As a number one electronic government around the world, the government's role for security solution for realization of safe electronic government. This manuscript analyzes cyber intrusion cases, speculates the government's measures and suggests political recommendation for the current phenomena.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2017.10a
• /
• pp.343-345
• /
• 2017

With the development of IoT technology, terminals connected with IoT are being used. However, security incidents are occurring as IoT is applied to society as a whole. IoT security incidents can be linked to personal risk and social disruption. In this study, we extract the evidence of security breach in IoT device. Analyze IoT security breach environment and extract Hashing function to secure original integrity and integrity. Then, the Forensic evidence is extracted from the IoT security device to verify the integrity of the original and Forensic reports should be written and studied to be used as legal evidence.

• Convergence Security Journal
• /
• v.16 no.7
• /
• pp.31-39
• /
• 2016

The biometrics information is very useful by the convenience of ownership and using. but the risk of crime of malicious re-uses and infringement of personal privacy exist because the biometrics information is impossible to change typically when the illegal interception occurred from others. therefore the importance of security on stored management of biometrics information has been increased steadily. the existing biometric authentication system has been stored only encrypted complete template at a single storage place. In this paper, we designed the Distributed Stored of Multiple Split bio_Template System that a template is divided in different ways by each user and stored in other storage places from personal information to relieve user's anxiety about the saved template and illegally leaked through restored only template to authenticate and then delete.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.2B
• /
• pp.296-301
• /
• 2010

Radio frequency identification(RFID) system can identify an object using wireless transmission. RFID applications are numerous and far reaching. The most interesting and widely used applications are supply chain management for companies. Currently, RFID tags must be detached or killed for security and privacy reasons when tagged objects are purchased. In this paper, we present a new architecture that transfers information about products from the electronic product code information services (EPCIS) server of a company to an individual's personal purchases management (PPM) server when products with RFID codes are sold. It solves the security and privacy issues without detaching the tag. Moreover, the PPM server described in this paper allows customers to handle the expiration dates, updates, location management, and group management of products.

• Journal of Information Management
• /
• v.40 no.1
• /
• pp.69-86
• /
• 2009

The biggest paradigm of the latest telecommunications is ubiquitous computing. It is a technology basis to realize ubiquitous society that would affect social, economical and cultural industries with positive influence. However, there is a simultaneous concern that the approach to ubiquitous society may violate one's privacy. Therefore, the existence of legal and technological regulation would be the biggest obstacle in further RFID technology and industry dissemination. Also, in business side, they must invest with enormous expense and technology if technological method is only approached for the solution. As in the research, 8 RFID applications, application process and inspection items and 85 appraisal list of "An impact assessment for the privacy protection in RFID applications" developed by P. K. Han(2006), will be used as an indicator to measure RFID privacy impact assessment. In addition, it is to develop RFID privacy impact assessment index by applying objective data with survey of applied specialists. This would provide a data with feasibility and reliability to RFID related companies and able to utilize policy making on RFID private data. In addition, it is expected to contribute as an efficiency tool for individual data to build basis of ubiquitous society.

• Asia-pacific Journal of Multimedia Services Convergent with Art, Humanities, and Sociology
• /
• v.6 no.7
• /
• pp.9-16
• /
• 2016

As life in a rapidly changing Internet age at home and abroad, large amounts of information are being used medical, financial, services, etc. Accordingly, especially hospitals, is an invasion of privacy caused by leakage and intrusion of personal information in the system in medical institutions, including clinics institutions. To protect the privacy & information protection of personal health medical information in medical institutions at home and abroad presented by national policies and de-identification processing technology standards in accordance with the legislation. By comparative analysis in existing domestic and foreign institutional privacy and de-identification technique, derive a advanced one of pseudonymization and anonymization techniques for destination data items that fell short in comparison to the domestic laws and regulations, etc. De-identification processing technology for personal health information is compared to a foreign country pharmaceutical situations. We propose a new de-identification techniques by reducing the risk of re-identification processing to enable the secondary use of domestic medical privacy.

• KIPS Transactions on Software and Data Engineering
• /
• v.12 no.10
• /
• pp.437-444
• /
• 2023

Location-based services play a vital role in our daily lives. While these services enhance user convenience, user's privacy is at risk because they lead to a rapid surge in collecting and utilizing location information for a user. In this paper, we design and implement an application that securely records and manages user location information. We enhance the privacy protection aspect concerning location information by providing some features. Utilizing Room DB, we store collected personal location information in the user's local database instead of the server of the location-based service provider. Furthermore, user can initiate and terminate recording at their discretion, thereby enhancing the protection of personal information related to location data. User's unease regarding their movement paths is reduced by empowering them to have control over their own location information.