• Convergence Security Journal
• /
• v.11 no.2
• /
• pp.55-64
• /
• 2011

This study is to investigate the relationship of the effect of the private security guard unethical work ethic on job attitude and customer service. We extracted about 450 people examples after the Selection of the private security guard's in active service in Seoul in 2010, and totally 412 people examples were used. This study carried out factorial analysis, reliability analysis, correlation analysis, multiple regression analysis and pass analysis using SPSSWIN 16.0. The followings are conclusions. First, unethical work ethic affects on job attitude partially. Namely, tampering with work and information leaks reduce job attitude. Also, information leaks increase company's turnover rate. Second, unethical work ethic has no effect on customer service. Third, job attitude affects on customer service partially. In other words, the organizational commitment improves the quality of service but decreases the customer-centered service. Fourth, unethical work ethic has an effect on job attitude and customer service indirectly.

• Review of KIISC
• /
• v.21 no.6
• /
• pp.24-41
• /
• 2011

7.7 DDoS공격과 3.4DDoS공격, NH금융전산망마비사건, 네이트 해킹 사건 등은 해킹이 개인적 문제를 지나서, 사회와 국가적인 이슈로 부상되고 있다. 중국은 대학에서 해킹 기법을 가르치고, 인민해방군에 국가일꾼이란 소명의식을 주고 있다. 북한은 지도자의 지시로 노동당과 북한군에서 사이버부대를 직접 교육 운영하고 있다. 미국은 외국으로부터 사이버 공격을 당할 경우 이를 '전쟁 행위'로 간주해 미사일 등으로 대응한다는 방침을 세웠다. 이와 같이 해킹은 국가사이버보안 정책에서 다루어져야 할 필요성이 있다. 본 연구에서는 해커의 변천, 해킹기술과 방법, 해킹 툴, 그리고 해킹 사례를 살펴본다. 또한 해킹 동향 분석에서 해킹기술 동향 분석, 해커(사람) 동향 분석, 해킹 지역(국가) 동향 분석을 통하여 해킹 인력의 조직화, 해킹 기술의 집적화, 해킹 조직의 집중화 연구를 한다. 그리고 국가사이버보안정책에서 해킹에 대한 '국자사이버보안법 시행령' 제정, 국가사이버보안 자문회의, 국가사이버보안 협력회의, 해킹 프로세스 전략, 해킹 전략 추진 방법론, 사이버협력국, 해킹 작전국, 인력 양성국, 해킹 기술국에 관한 저자의 개인 의견을 제안한다.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2014.01a
• /
• pp.379-380
• /
• 2014

최근 IT 기술 발전과 광대역 네트워크의 발달로 휴대성과 편의성뿐 아니라 시간과 장소에 구애를 받지 않고 네트워크에 접속할 수 있는 기술이 발전됨에 따라 유비쿼터스에 대한 다양한 연구가 진행되고 있다. 유비쿼터스는 사용자가 컴퓨터나 네트워크를 의식하지 않고 장소에 상관없이 자유롭게 네트워크에 접속할 수 있는 환경을 말한다. 이러한 유비쿼터스 시스템은 사용자가 원하는 정보와 서비스를 시간과 장소에 상관없이 다양한 서비스를 받을 수 있지만 이러한 네트워크시스템에서 개인프라이버시와 보안의 취약점이 존재하고, 이를 통하여 개인정보유출은 유비쿼터스 시스템의 신뢰도를 저하하고 있다. 본 논문에서는 이러한 유비쿼터스 시스템에 대해서 설명하고 유비쿼터스의 보안 및 RFID의 취약점에 대해서 논의하였다.

• Convergence Security Journal
• /
• v.18 no.3
• /
• pp.11-17
• /
• 2018

As many information and communication technology companies around the world pay attention to the virtual reality as the next generation platform, the virtual reality industry is rapidly growing in various fields. For this reason, virtual reality security is becoming important as the number of users increases. In order to use the virtual reality service safely, security measures must be taken. This paper examines virtual reality trends, analyzes security threats according to vulnerabilities and vulnerabilities of virtual reality, and presents security considerations for threats.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.17 no.4
• /
• pp.209-218
• /
• 2017

In order to efficiently and preemptively respond to financial security threats that are becoming more sophisticated and intelligent, and to enable financial users to receive financial services safely, financial information security professionals are needed. However, as of 2015, the number of financial IT security personnel was 4.9%, which is slightly lower than the previous year, but still low. In this study, it is expected that the number of experts in financial security will increase gradually. In order to verify the minimum performance of financial security professionals and enhance the security consciousness, the subjects of the existing security qualification system, Curriculum and inspection techniques to analyze the necessity of introducing information security specialization specialized in financial sector.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.19 no.6
• /
• pp.113-119
• /
• 2009

In recent years, to provide visitors with the various and dynamic services, many ActiveX Controls are developed and distributed in most of the web sites such as e-Government Internet banking Portal in Korea. However, unsecure ActiveX Controls may be critical security threats on Internet User. Although hacking incidents increase sharply for these vulnerable ActiveX Controls, there are not enough national security actions or policies. Thus, in this paper we propose the technical method to design 'Security model for ActiveX Control Managemnet through Security Authentication' to be able safe and useful security management in three aspects of development distribution using.

• Information Systems Review
• /
• v.22 no.3
• /
• pp.31-58
• /
• 2020

Based on the social control theory, this study intends to find out the influential factors of organizational members' information security policy compliance (ISPC). Survey data from 195 military officers were analyzed to examine the effect of ethical disposition (morality, responsibility, the perceived value of ethical education) and perceived work environment (relationships with supervisors, overwork, and pay satisfaction) on ISPC attitude, ISPC intention, and turnover intention. The results of partial least squares structural equation modeling (PLS-SEM) show that ethical dispositions affect ISPC attitude and that work environments (except for pay satisfaction) affect turnover intention. In addition, ISPC attitude significantly mediates relations between ethical disposition and ISPC intention, between relationships with supervisors and ISPC intention, and between turnover intention and ISPC intention. These findings suggest that ethical disposition factors can predict an individual's security awareness level, and the ISPC attitude is a significant variable in the organizational security context.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2015.04a
• /
• pp.396-398
• /
• 2015

IoT 환경에서 무선랜의 사용률은 매년 증가하고 있고 그에 따른 무선공유기의 보안은 매우 중요함에도 불구하고 다수의 사용자들은 보안수용성이 낮은 것으로 조사되어 이에 대한 연구를 진행 하였다. 본 논문은 한국 사용자들의 무선공유기 활용도를 조사하고, 보안수용성과의 연관성을 분석하여 보안수용성의 향상을 위한 방안을 제시하는데 목적이 있다. 본 논문의 조사에 따르면 대부분의 사용자들은 무선공유기에 대한 보안수용성이 부족하며 간단한 보안방법 조차 실행하지 않았다. 이를 바탕으로 사용자의 보안수용성은 현재 매우 낮다는 것을 알 수 있으며 보안수용성의 향상을 위한 가이드라인을 제시하였다. 본 논문은 사용자들에게 보안의식을 심어주고 보안에 쉽게 접근하게 할 수 있는 보안수용성 향상의 기반으로 유용하게 사용 할 수 있을 것으로 기대된다.

• Journal of Navigation and Port Research
• /
• v.43 no.3
• /
• pp.179-185
• /
• 2019

Currently, despite having active movements related to port logistics security, there is lack of awareness, education, and security systems related to port technology. Before implementing port logistics security, a mutual authentication agreement should be reached through the establishment of an integrated network that can share port logistics security information in real time. In order to achieve port competitiveness and strengthen logistics service, establishment of national strategy for logistics security is necessary. However, there is an urgent need to raise the security consciousness among the port logistics organization members and enhance the information security ability which is a crucial feature of the port logistics organization. Therefore, the objective of this study is to analyze the factors affecting the information security capacity of port logistics organization members. Even though the analysis rejected the hypothesis that security regulations affect security awareness, the security activities and security awareness were significantly correlated. It also has a positive impact on the relationship between security norms and security abilities, and security awareness and security abilities.

• The KIPS Transactions:PartC
• /
• v.11C no.5
• /
• pp.577-584
• /
• 2004

Recently many company has been cracked by crackers information security and everyday new computer virus come out. so e-trade partners should prevent the disasters. A few studies researched e-trade securities broadly but the new trend in information security division especially focused on electronic payment, EDI, Transportation, Contracts, Insurances and that of subjects have been researched through interdisciplinary evolution. Our research e-trade security on three part, First system attack, second is data attack and third is business attack. the attacks have theirs own solution, so e-trade company use this solution timely and powerfully. It is the most important thing to prepare the cracking with securities system. also manager should catch recent hacking technologies. The research results propose that e-trade firms should use information security policies and securities systems that including H/W and S/W. therefore manager's security mind is very important and also using electronic commerce securities device and should be considered exploiting solutions by each special usage according to e-trade company' environments.