• Korean Security Journal
• /
• no.61
• /
• pp.39-57
• /
• 2019

The executive authority of the Ministry of Public Administration and Security on the 'management of security of the government complexes' is not sufficiently secured only with the organization law, the Government Organization Act. It is needed to establish an administrative actions law, an individual law that sets detailed contents and limitations of the executive authority to be stipulated. The current regulation, Regulation on the Management of the Government Complexes which is a Presidential Decree, is a legal decree that lacks a legal basis. The decree does not match with the current constitutional framework and raises the issue of its legality. The regulation may have the characteristics as a public property management law so far as it stipulates such matters as supply and maintenance management for the complexes, acquisition and disposition of complexes, facilities management of complexes, etc. However, the regulation includes high authority actions by an administrative organization, such as facilities security and order maintenance including restriction and control of access. This makes the regulation have the characteristics of a public property policy act as well. To supplement the legal framework for this situation, it is needed to level up some of the provisions relating to protection and security management to the level of an act as they stipulate high authority actions by an administrative organization. Other matters in the Regulation on the Management of the Government Complexes such as provisions relating to supply and allocation of complexes, etc. may be maintained as they are. In addition, the protection officers (general service official) does not own legal authority and have limitations on securing the capability to deal with the situations on implementing the on-site protection duty. Therefore, it is needed for the protection officers to secure protection duty-related authority by stipulating in a law. The main contents of the law on the protection and security of the government complexes may be those matters providing reservations on the implementations of laws. These may include the limitation of rights of and charging obligations on the people such as restricting the actions of personnel in the complex, rights and obligations of protection personnels relating to their duties, use of weapons, training of protection personnel, penal provisions, etc. These legal reservations should be included in an individual act.

• Convergence Security Journal
• /
• v.21 no.4
• /
• pp.77-85
• /
• 2021

Cyber protection is an activity that protects the information systems we operate from cyber attacks and threats. To know the level of protection of the currently operating cyber protection system, it is necessary to update the current state of attack technology by reflecting the constantly evolving cyber threats and to analyze whether it is possible to respond with the protection function. Therefore, in this paper, we analyze the relationship between the attack procedures and defense types of the cyber kill chain with the defense technology(Mitigation ID) of MITRE and present the cyber protection level for each military unit type with a focus on defensive cyber activities. In the future, it is expected that the level of cyber protection will be improved through real-time analysis of the response capabilities of cyber protection systems operating in the defense sector to visualize the level of protection for each unit, investigate unknown cyber threats, and actively complement vulnerabilities.

• Convergence Security Journal
• /
• v.24 no.3
• /
• pp.219-229
• /
• 2024

The application of 4th Industrial Revolution technologies in the defense sector is accelerating, leading to the rapid incorporation of information and communication technologies (ICT) into military systems. The biggest threat to these ICT-based military systems is an electromagnetic pulse (EMP) attack, which can result from nuclear explosions or EMP bombs. North Korea's ongoing nuclear advancements and EMP bomb capabilities pose a critical threat, necessitating South Korea's preparedness for such attacks to ensure the effective operation of its ICT-based military systems. Despite this urgency, the South Korean military currently lacks comprehensive standards for EMP protection, relying only on the design criteria for EMP protection facilities for buildings. This gap highlights the absence of sufficient legal and regulatory measures and the lack of focused research to develop EMP protection performance standards for safeguarding military systems. Therefore, this paper aims to analyze existing EMP protection performance standards and relevant laws and regulations. It proposes improvements and establishes necessary standards to enhance the EMP resilience of military facilities and equipment.

• Journal of the Society of Disaster Information
• /
• v.11 no.2
• /
• pp.263-267
• /
• 2015

This study shows the result of the security assessment of the nationwide key energy facilities and suggests the ways of improving the security level. According to the study, most of the energy facilities are adequately equipped with physical security factors such as security personnel, security systems, fences, and guard posts, but lack of awareness is pervasive among those concerned, so the security operation is inefficient. In other words, inefficient deployment of security personnel, lack of the fundamental knowledge of the security systems, excessive dependence on surveillance cameras' functions such as Pan/Tilt/Zoom, misplaced cameras, low efficiency of monitoring, and irrelevant security plans. To solve these problems, above all, the authority concerned need to develop professional training programs to secure certified security mangers, and need to standardize security process to ensure consistency and to harness the standardization as a source of self assessment to improve security level.

• KIPS Transactions on Computer and Communication Systems
• /
• v.2 no.12
• /
• pp.561-568
• /
• 2013

Instrumentation and control system in nuclear power plant performs protecting, controling and monitoring safety operation of Nuclear Power Plant. As cyber attack to the control equipment of instrumentation and control system can cause reactor shutdown and radiation release, it is required to design the instrumentation and control system considering cyber security in accordance with regulatory guides and industrial standards. In this paper, we proposed a design method of uni-directional communication structure which is required in the design of defense-in-depth model according to regulatory guides and industrial standards and we implemented a communication board with the proposed method. This communication board was tested in various test environments and test items and we concluded it can provide uni-directional communication structure required to design of defense-in-depth model against cyber attack by analyzing the results. The proposed method and implemented communication board were applied in the design of SMART (system-integrated modular advanced reactor) I&C (instrumentation and control) systems.

• Review of KIISC
• /
• v.28 no.2
• /
• pp.51-60
• /
• 2018

"원자력시설 등의 방호 및 방사능 방재 대책법"(이하 '방사능방재법')에 의거하여 한국원자력통제기술원은 원자력안전위원회로부터 원자력시설의 사이버보안 규제 업무를 위임받아 수행하고 있으며, 그 중 위협평가 업무를 통해 최신 사이버 위협 사례를 분석하여 사이버보안체제의 기준이 되는 설계기준위협을 설정하고 원자력사업자의 이행 여부를 평가하고 있다. 위협평가의 첫 단계로 방사능방재법에 따라 3년 마다 최신 사이버 위협 사례를 조사 및 분석하여야 하며, 사이버 위협분석 자료는 원자력사업자가 방호해야하는 최대 위협 수준인 설계기준위협 설정에 사용된다. 본 논문에서는 최근 3년간 원자력시설과 같은 중요시설 대상으로 발생한 사이버 위협 사례를 분석하였으며, 향후 분석 자료를 바탕으로 위협평가에 활용하고자 한다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2023.11a
• /
• pp.343-344
• /
• 2023

본 연구는 국가중요시설의 청사 내에 근무하는 청사보안과 안전유지, 질서유지를 담당하는 방호직 공무원에게 발생하는 다양한 민원인 불량행동의 유형과 국가중요시설에서 일어나는 각 유형에 맞는 민원인 불량행동에 대한 개선방안을 효율적으로 제시하는데 그 목적이 있다. 이에 인터뷰를 통해 국가중요시설에서 근무하는 방호직공무원이 느끼는 민원인 불량행동이 어떠한 유형으로 있는지 조사하였고 개별면담을 통해 나타난 대표적인 민원인 불량행동의 유형들은 첫째, 국가중요시설 내에서 큰 소리를 지르고 욕설을 하는 언어폭력형 둘째, 각 국가기관 및 지자체의 국가중요시설에서 서비스 업무수행 과정 중 다른 타 민원인이 있음에도 본인 자신의 이익과 편의를 위해 행해지는 행위를 하는 이기주의형 셋째, 각 국가중요시설의 규정 및 내규가 있음에도 규정된 규칙을 무시하고 따르지 않는 규칙위반형 등이 있다. 이에 따라 각 유형별 민원인 불량행동에 대한 개선방안 항목들로 첫째, 방호직공무원 교육의 체계화, 둘째, 민원인을 응대할 수 있는 기관의 내규 및 규칙, 셋째, 민원인에게 겪는 스트레스를 해소할 수 있는 환경을 제시하였다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2022.10a
• /
• pp.119-120
• /
• 2022

본 연구는 국가중요시설의 청사 내에 근무하는 청사보안과 안전유지, 질서유지를 담당하는 방호직 공무원에게 발생하는 다양한 민원인 불량행동의 유형과 국가중요시설에서 일어나는 각 유형에 맞는 민원인 불량행동에 대한 개선방안을 효율적으로 제시하는데 그 목적이 있다. 이에 인터뷰를 통해 국가중요시설에서 근무하는 방호직공무원이 느끼는 민원인 불량행동이 어떠한 유형으로 있는지 조사하였고 개별면담을 통해 나타난 대표적인 민원인 불량행동의 유형들은 첫째, 국가중요시설 내에서 큰 소리를 지르고 욕설을 하는 언어폭력형 둘째, 각 국가기관 및 지자체의 국가중요시설에서 서비스 업무수행 과정 중 다른 타 민원인이 있음에도 본인 자신의 이익과 편의를 위해 행해지는 행위를 하는 이기주의형 셋째, 각 국가중요시설의 규정 및 내규가 있음에도 규정된 규칙을 무시하고 따르지 않는 규칙위반형 등이 있다. 이에 따라 각 유형별 민원인 불량행동에 대한 개선방안 항목들로 첫째, 방호직공무원 교육의 체계화, 둘째, 민원인을 응대할 수 있는 기관의 내규 및 규칙, 셋째, 민원인에게 겪는 스트레스를 해소할 수 있는 환경을 제시하였다.

• Review of KIISC
• /
• v.27 no.2
• /
• pp.57-68
• /
• 2017

원자력시설에 대한 사이버보안 위협이 증가됨에 따라 "원자력시설 등의 방호 및 방사능 방재 대책법"에 의거 원자력통제기술원은 사이버보안 이행에 관한 세부 기준을 제시하는 KINAC/RS-015 "원자력시설 등의 컴퓨터 및 정보시스템 보안기술기준"을 마련하고 원자력 사업자로 하여금 사이버보안계획(CSP)을 이행토록 하였다. 따라서 원자력사업자는 사이버공격으로부터 필수디지털자산(CDA)을 보호하기 위해 운영적 관리적 기술적 사이버 보안조치를 적용 및 이행하여야 한다. 본 논문에서는 원자력시설의 최상위 설계요건인 안전성 및 신뢰성 확보를 위해 사이버보안 기술을 적용하는데 많은 어려움이 따르는 기술적 보안조치인 접근통제, 감사 및 책임, 시스템 및 통신의 보호, 식별 및 인증, 시스템 보안강화에 대한 이행방안을 살펴보고자 한다.

• Korean Security Journal
• /
• no.61
• /
• pp.9-38
• /
• 2019

As the scales & density of the Korean national infrastructures have been increased, they will be identified as rich and attractive potential targets for intensified North Korea's attack in the rear region and terrorism attack. In addition, due to changes in security environment such as drone threats and lack of security forces under the 52-hour workweek law, I think that it is the proper time point to reevaluate the effectiveness and appropriateness of the current physical protection system and its shift to a new system. In this study, the direction and improvement of the perimeter physical protection systems of the national infrastructures are to be studied from the viewpoints of its concepts of operations and design methodology, focusing on the nuclear power plant. The reason why we focus on nuclear power plants is because they cause wide-range and long-term damages caused by radioactive materials disperal and pollution, along with short-term damage caused by the interruption of electricity generation in the event of damage to nuclear power plants. With the aim of extracting improvement directions, as we will comprehensively review domestic research trends and domestic·overseas related laws, and consider Korea's specificity, we try to reframe the concept of operation - systematization, mobilization and flexibility -, and establish criteria on system change. In order to improve the technical performance of the new perimeter physical protection system, we study on high-fidelity·multi-methodology based integrated design methodology, breaking from individual silo-type design methods, and I suggest improvement of government procurement, its expansion to export business and other national infrastructure.