• Title/Summary/Keyword: 정보보호산업

Search Result 1,278, Processing Time 0.029 seconds

An Analysis on Training Curriculum for Educating Information Security Experts (정보보안 전문인력 양성을 위한 교육과정 분석)

  • Park, Jae-Yong
    • Management & Information Systems Review
    • /
    • v.31 no.1
    • /
    • pp.149-165
    • /
    • 2012
  • Nowadays due to the development of IT, hacking has become a major issue and importance of information system security is rapidly increasing. This research focuses on problems of training system security experts within Korea by analysing university's management information system curriculum and proposes an alternative way to solve this problem. The result of this research is the following. First, reformation of university's curriculum for successfully training system security experts is crucial. Second, theories that was learned in university courses need to be coherent to the actual work that the system security experts do in the field. Lastly, advanced IT countries like the US and Japan have already made standards on training system auditors and reinforced it with laws. Therefore Korea should establish a formal standard system like the other IT industry advanced countries.

  • PDF

A study on The Private Investigator usage for Enterprise Security Activity: Focusing on countermeasure to the Industrial Spy (민간조사원(탐정)을 활용한 기업보안활동의 강화방안: 산업 스파이에 대한 대응방안을 중심으로)

  • Sin, Sung-Gyun;Park, Sang-Jin
    • Korean Security Journal
    • /
    • no.20
    • /
    • pp.199-228
    • /
    • 2009
  • National security of post cold-war since 1990's shift that conception of the national security transfer traditional military strength to economic strength. Accordingly, the national interest about how to protect the of the high-technology industry enterprises has become contentious social issue. The U.S. and advanced countries promote the policy to protect The United State's Economic Espionage Act(EEA). The Korea reaching to high level a field at IT, Shipbuilding, Steel, Automobile Industry and huge capital investment to high-technology & development. But, systematic industry security activity not an unfold. So private investigator collect the evidence and information of business case for prevent danger is efficient. The private investigator system, deal with the matter efficiently, will good system to prevent economic loss of business, state and nation through make a good use in business crime that machinery of law difficult to intervene. This article countermeasure about industry spy through make a good use of private investigator.

  • PDF

Advanced protocol against MITM attacks in Industrial Control System (산업제어시스템에서의 MITM 공격을 방어하기 위해 개선된 프로토콜)

  • Ko, Moo-seong;Oh, Sang-kyo;Lee, Kyung-ho
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.25 no.6
    • /
    • pp.1455-1463
    • /
    • 2015
  • If the industrial control system is infected by malicious worm such as Stuxnet, national disaster could be caused inevitably. Therefore, most of the industrial control system defence is focused on intrusion detection in network to protect against these threats. Conventional method is effective to monitor network traffic and detect anomalous patterns, but normal traffic pattern attacks using MITM technique are difficult to be detected. This study analyzes the PROFINET/DCP protocol and weaknesses with the data collected in real industrial control system. And add the authentication data field to secure the protocol, find out the applicability. Improved protocol may prevent the national disaster and defend against MITM attacks.

Research a Study on Awareness and Practice of Personal Information Protection in Students (대학생들의 개인정보 보호인식과 실천에 대한 인지도 조사연구)

  • Lee, Hye-Seung;Kim, Hwan-Hui
    • Journal of Korea Entertainment Industry Association
    • /
    • v.13 no.6
    • /
    • pp.53-67
    • /
    • 2019
  • This study is expected to be of significance in that it attempted to examine the personal information protection awareness of college students and the state of their personal information protection as prospective information processors and private information owners to boost their will to put private information protection in practice. As a result of making an analysis, the most common average time that the students spent in doing every online activity on weekdays was fewer than two or three hours, and the most dominant activities that they did over the Internet were for entertainment or hobbies. As for awareness of the nature of the Internet, they looked upon it as a quite open public space. Regarding the state of private information protection, they thought that changing passwords on a regular basis would be beneficial to personal information protection, and many thought that it's needed to withdraw from or shut down web sites that weren't used for a long time. In terms of actual practice, however, they didn't change their e-mail passwords regularly on the grounds that it's a hassle, and even the students who had experience of personal information leakage didn't report it or didn't ask for counsel on the grounds that they didn't want to be bothered as well. The majority of the students weren't cognizant of how to report or seek counsel. In the future, personal information protection should be educated on a continual basis as part of curriculum to raise awareness of it among students and boost their will to practice it with a sense of responsibility in an effort to prevent the occurrence of collateral damages triggered by personal information leakage.

A Study of Self-Checklist for Personal Information Protection of FinTech Service: For the Simple Payment Service (핀테크 서비스의 개인정보보호 자가평가항목 개발에 관한 연구: 간편결제 서비스 중심)

  • Kang, Min Soo;Back, Seung Jo;Lim, Jong In
    • The Journal of Society for e-Business Studies
    • /
    • v.20 no.4
    • /
    • pp.77-102
    • /
    • 2015
  • FinTech service industry has been growing rapidly around the world. It has driven innovation in financial and payment service industry with different channels such as mobile based on Information and Communications Technology (ICT). However, FinTech service is vulnerable to different security threats due to use the valuable data such as personal information and financial information. It is undeniable that collection and use of those information may increase the possibility of identity theft or privacy breach. In this paper will develop a self-checklist for the Simple Payment service users (Privacy Pragmatists) who want to make a rational decision to protect their personal information. The checklist is going to let the users assess the personal information protection by performing the assessment themself when they use the service. The body of this paper is going to analyze the items of the checklist and through the analysis, will suggest a security policy for personal information protection of FinTech service.

A Mid/Short Term Prospect of the I&T Industry (정보통신산업의 성장요인 및 중·단기 성장전망 분석)

  • Lee, J.W.
    • Electronics and Telecommunications Trends
    • /
    • v.16 no.5 s.71
    • /
    • pp.125-135
    • /
    • 2001
  • 본 고는 정보통신산업의 성장.발전에 중.단기적으로 영향을 미치고 있는 영향요인들을 살펴본 후, 2001년부터 2005년까지의 정보통신산업 성장전망을 분석해 보기 위하여 작성되었다. 특히, 본 고는 최근 들어 정보통신산업의 새로운 성장엔진으로 부각되고 있는 인터넷, 이동통신, 디지털방송, 정보보호, 정보가전 등 신기술산업들의 성장세를 바탕으로 현재의 IT 경기 침체가 2002년을 고비로 회복세로 전환될 것이라는 다소 낙관적인 전제 하에 향후의 정보통신산업 발전가능성을 모색해 보았다. 향후의 정보통신산업 발전전망을 정확히 예측한다는 것은 어려운 일이지만, 현재의 상황을 정확히 파악함으로써 적시에 적절한 대책을 마련하여 추진하는 것은 국가 경쟁력 향상을 위해 매우 긴요한 일이 될 것이다. 마지막으로 본 고에서는 최근 발생한 미국 테러사태의 충격이 장기화하지 않을 것이라는 전제에도 불구하고 2001년도 정보통신산업의 생산시장 증가율이 1% 수준 이하에 그칠 것이라는 점을 지적하였다.

The prevent ion of extracting E-mai1 address for personal informal ion protection (개인정보보호를 위한 전자메일 주소 추출 방지 기법)

  • 김한섭;배수정;연현정;황윤철;이상호
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2002.10c
    • /
    • pp.451-453
    • /
    • 2002
  • 정보화 시대를 맞이하여 정보 인프라의 확충과 이를 기반으로 한 다양한 비즈니스 모델이 출현하면서, 인터넷 비지니스는 우리 산업의 중심으로 확산되고 있다. 이에 따라 개인과 개인, 기업과 기업, 기업과 개인간에 새로운 커뮤니케이션 수단으로 부상한 전자메일은 이제 우리 사회를 윤택하게 만드는 필수도구로 자리잡았다. 더군다나 전자메일은 그 파급효과나 비용절감의 측면에서 수많은 인터넷기업의 마케팅 수단으로써 범용적으로 활용되고 있다. 그러나 최근들어 불법 스팸메일과 유해성 메일이 급증하면서 전자메일 환경이 급속도로 악화되고 있어 그 위험수위가 극에 달해 있다. 이러한 불법 스팸메일은 전자메일 마케팅에 대한 신뢰도를 하락시켜 기업 활동을 위축시키고 있으며 유해성 메일에 무방비로 노출되어 있는 청소년 보호와 인터넷상의 개인정보보호 차원에서도 반드시 척결되어야할 “공공의 적”이라는 인식이 확산되고 있다. 하지만 최근 인터넷상의 공개된 전자메일 주소를 수집, 가공하여 스팸메일을 대량으로 발송할 수 있는 자동화된 프로그램의 개발로 인하여 스팸메일을 더욱 증가하고 있는 추세이다. 이 논문에서는 이러한 문제정점을 인식하고 자동화되어있는 전자메일 추출 프로그램으로부터 전자메일 주소를 보호할 수 있는 방안을 제시한다.

  • PDF