• Proceedings of the Korean Society of Computer Information Conference
• /
• 2012.07a
• /
• pp.397-398
• /
• 2012

본 논문에서는 클라우드 컴퓨팅(Cloud Computing) 기반 모바일 오피스 환경에서의 보안 위협에 대한 대응방안에 대해 소개한다. 클라우드 컴퓨팅 기반 모바일 오피스 환경은 회사 밖에서도 회사 내부망에 접속하여 회사 업무뿐만 아니라 문서작업과 같이 프로그램이 필요한 업무를 스마트폰에 있는 접속클라이언트를 이용하여 이용할 수 있도록 한 클라우드 컴퓨팅과 모바일 오피스의 융합 서비스이다. 본 논문에서는 보안 위협에 대한 대응 방안을 제안함으로써 안전한 클라우드 컴퓨팅 기반 모바일 오피스 환경을 제공할 수 있도록 한다.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.15 no.6
• /
• pp.283-290
• /
• 2015

As society has evolved to the knowledge and information society, the importance of internal information of the company has increased gradually. Especially in financial institutions which must maintain the trust of customers, the disclosure of inside information is a big problem beyond the a company's business information disclosure level to break down sales-based businesses because it contains personal or financial transaction information. Recently, since massive outflow of internal information are occurring in several enterprises, many companies including financial companies have been working a lot in order to prevent the leakage of customer information. This paper describes the internal information leakage incidents occurred in the finance companies, the PC security vulnerabilities exists despite the main security system and internal information leakage prevention and suggests countermeasures against increasing cyber infringement threats.

• The Journal of the Convergence on Culture Technology
• /
• v.3 no.4
• /
• pp.199-205
• /
• 2017

As cloud computing can utilize the proper allocation of system resources, it can be expected to have great benefits in terms of maintaining availability and reducing costs when a cloud is applied to a financial company's computer system. Although some provisions of the Financial Supervisory Regulation were revised in October 2016, this is limited to non-critical information processing systems, limits are remain whitch the application of cloud computing to the whole computer system of financial companies including electronic financial systems. In this paper, cloud security requirements are studied for the application of financial company's computational infrastructure system.

• Convergence Security Journal
• /
• v.21 no.1
• /
• pp.101-106
• /
• 2021

To protect financial information, financial companies establish strategies and plans for information security, operate information security management systems, establish and operate information security systems, check vulnerabilities, and secure information. This paper aims to present an information security portal system for financial companies that can gain visibility into various information security activities being undertaken by financial companies and can be integrated and managed. The information security portal system systemizes the activities of the information security department, providing an integrated environment for information security activities to participate from CEOs to executives and employees, not just from the information security department. Through this, it can also be used as information security governance that can be used by top executives to reflect information security in corporate management.

• Review of KIISC
• /
• v.18 no.3
• /
• pp.109-117
• /
• 2008

기업의 Network 보안은 회사의 관문 방화벽에만 의존하고 있어 보안정책의 집중으로 효율성이 저하되고 이를 우회할 경우 심각한 위험에 노출될 수 있다. 본 연구는 신속성, 보안강화 측면에서 Network보안 관리 모델을 제시하여 기업의 보안 수준을 강화하는 것을 목적으로 하고 있다. 따라서 기업 비즈니스 환경 변화를 배경으로 관련 연구 결과 및 Trend에서 제시하는 이론(802.1x 사용자 인증, Virtual Backbone 등)을 조사하고 이를 바탕으로 보안 강화 측면에서의 기업의 Network 구조와 보안정책 관리모델을 제시하여 이를 실제 기업 Network에 적용하여 얻어진 효과를 검증한다.

• Proceedings of the Korean Institute of Navigation and Port Research Conference
• /
• 2019.05a
• /
• pp.29-32
• /
• 2019

The development of Information and Communication Technology facilitates exchange of information and communication between system in ships or between ships and land facilities, thereby improving the efficiency of their work. However, these changes in the working environment of companies and ships increased the likelihood of cyber security incidents occurance like unauthorized access to company and ship systems or infection of malicious code, which results in significant safety, environmental and business damage to company and ships. Therefore, a cyber-risk-based approach was required to identify and respond to an increasing cyber threats. In this paper, the analysis of maritime cyber security status and guidelines for establishment of maritime cyber security system are provided.

• Journal of the Society of Disaster Information
• /
• v.10 no.4
• /
• pp.536-547
• /
• 2014

With the changing safety services and social order systems accompanied by the economic development and changing public security environment since the Chinese economic reform, the security service industry in China is growing daily and related problems are increasing. For the Chinese security service market to be activated, the monopoly of security services by the public security agencies must be removed. In addition, the research and development, expansion, and applications of safety and crime prevention technologies regarding the safety and protection of exhibition, sales, culture, sports, commerce activities, combinations of safety technologies and crime prevention processes, the provision of relevant technical operations, and the expansion of security service areas are required. Furthermore, the administration rights, property rights, and business management rights of security companies must be separated, the security headquarters must be integrated and coordinated for optimization of various resources solely by market needs, and their rights and affiliation relations must be clear. Besides, the competitiveness of security companies in the security service market must be enhanced by unifying the business management, and optimizing and sharing their resources. The security service ordinances of China that have been implemented now must be applied realistically, methods to activate the true market economy for security services must be researched, and various ordinances related to security services must be realigned in line with the characteristics of security services. Finally, for the mutual cooperation system between public and private security services, the public security agencies must acknowledge the importance of private security services and the status of security service providers in crime prevention and social order maintenance. They must establish partnership relations with each other beyond the unilateral direction and management system for security services and drive with positive attitudes the security service industry which is still in its infancy.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.32 no.2
• /
• pp.341-353
• /
• 2022

Conglomerates are strengthening cooperative relations by sharing information and dispatching manpower with each other to improve the overall competitiveness and technology of the group, including affiliates, and to enhance synergy. As a result, we are making every effort to increase the level of information protection of the entire group, but information leakage accidents that bypass affiliates and partner companies continue to occur. In addition, the results of the evaluation of the security management system of affiliates conducted by the parent company and the effectiveness of the actual security level have been raised. In addition, each company has limited resources that can be put into security management, so it is time for an more efficient security management system than ever before. In this study, the efficiency of operating the security management system of affiliates of steel companies is reviewed using the DEA-SBM model, and based on the analysis results, improvement measures to improve the level of security management are suggested.

• 월간 기계설비
• /
• s.250
• /
• pp.82-83
• /
• 2011

국내 굴지의 금융 기관들이 해킹에 따른 전산 사고 등으로 홍역을 치르고 있다. 특히 고객 정보가 유출되거나 멸실된 경우는 상당액의 금전적 보상도 따를 것으로 보아 회사의 손해도 만만치 않을 것이다. 더 큰 문제는 고객들의 불신에 따른 기업 이미지 손상이다. 이것은 돈으로 환산할 수 없는 가치로 오랜 기간 악 영향을 끼칠 수밖에 없다. 우리 협회 회원사의 경우 개인 고객의 정보를 직접 취급하는 일이 거의 없어 걱정이 덜되지만 대부분의 기업 정보가 전산으로 처리되고 있는 만큼 그 보안 상태를 점검해 볼 필요가 있다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.04a
• /
• pp.942-945
• /
• 2012

스마트 그리스 환경이 구축되어 고객과 전력회사 간 양방향 서비스가 가능하게 되면 전력회사는 고객에게 IHD나 ESP를 통해 여러 전력 서비스를 제공할 수 있게 된다. 더불어 다양한 third party 서비스 업체들도 고객의 정보를 이용한 부가 가치 사업을 개발하여 서비스하게 될 텐데 이 경우 AMI 망을 통한 안전한 정보 공유를 위해 전력망에 대한 보안 정책이 필요하게 된다. 본 논문에서는 국내 실정에 맞는 AMI 기술 개발 및 안전한 운영을 위해 AMI 보안에 관하여 기본적인 요구사항을 분석하고 보안 기능을 설계한다.