• Proceedings of the Korean Statistical Society Conference
• /
• 2002.11a
• /
• pp.321-326
• /
• 2002

상가건물임대차보호법의 시행령을 제정하는데 필요한 근거정보를 수집하기 위한 임차 사업체조사의 표본설계과정과 추정법을 설명하고 주요 조사결과를 제시하였다.

• Review of KIISC
• /
• v.28 no.6
• /
• pp.13-19
• /
• 2018

본 연구는 방위산업기술보호법 제정에 따른 국가혁신체제로의 방위산업기술보호 방안을 살펴본다. 특히, 본 연구는 많은 시간과 노력을 통해 개발한 연구개발의 성과를 어떻게 보호해야 할지 측면에서 분석한다. 국내외 기술보호 법령, 조직 등 분석을 통한 시사점을 도출하고 국가혁신체제 관점에서 3가지 개선방안을 제시한다. 전문인력의 단계적 확충 및 전문지원 기관 설립, 효율적인 실태조사 방안 그리고 국가혁신체제 차원에서의 기술보호인식의 전환을 제시한다. 효율적인 방위산업기술보호체계 구축을 위해서 가장 중요한 것은 방위산업기술을 보유한 대상기관 최고책임자(CEO)의 의지이다. 영세한 기업의 경우는 기술보호를 위한 자원의 할당이 쉽지 않기 때문에 CEO가 기술보호에 대한 투자의 중요함을 인식하는 것이 중요하다. 이를 위해서 정부는 지속적으로 기술보호의 중요성에 대한 홍보를 강화하고, 제도적으로 울타리에 들어올 수 있도록 하고, 중소기업의 경우 기술보호체계 구축 등을 우선적으로 지원해야 한다.

• Convergence Security Journal
• /
• v.23 no.5
• /
• pp.107-116
• /
• 2023

The management of professional manpower with expertise in performing specific tasks can be said to be a very important issue at the national level. Recently, interest in industrial technology protection experts continues to expand, but difficulties are growing due to the lack of policy evidence. Considering these points, this study conducted a fact-finding survey on personnel in charge of industrial technology protection, and through this, quantitative, qualitative, and job path analysis were performed for related job performers. These results are considered to be significant in that they can be used as basic information for fostering industrial technology protection experts in the future.

• The Journal of Society for e-Business Studies
• /
• v.20 no.2
• /
• pp.93-106
• /
• 2015

Providing trading partners with personal information to establish an e-commerce financial transaction is inevitable. Most e-commerce companies keep personal information and transaction data for user's convenience and develop additional services as their applications. However, keeping personal information increases the likelihood of identity theft causing direct or indirect damage while it may simplify repetitive financial transactions. This study introduces risk management methods based on quantitative and qualitative analysis including demand-supply curve model and Gordon & Loeb model to analyze the risks for security management. The empirical analysis with survey results from KISA (Korea Information Security Agency) shows that the root cause of different statistics of personal information leakage incidents according to core business of internet companies is the difference in their Loss Expectancy caused by them. Also we suggest disciplinary compensation and higher standard for personal information protection as a solution to prevent the variation of investment on it between individual companies.

• Review of KIISC
• /
• v.30 no.4
• /
• pp.69-76
• /
• 2020

본 연구에서는 신재생에너지의 큰 비중을 차지하고 있는 풍력발전의 ICT 환경을 조사하고 최신해킹사례를 분석하여, 예상되는 보안위협을 도출하였다. 이 중 가장 영향도가 높은 보안위협요소로 CSRF(Cross-Site Request Forgery) 공격을 선정하고 공격을 방어할 수 있는 인증강화모델을 제안하였다. 우선, 풍력발전 관련한 국제표준화 동향 및 대형제작사 구현실태를 살펴보고 CSRF 공격 예방을 위한 선행연구를 조사하였다. 선행연구의 이점을 접목하고 약점을 강화하여 재인증, CAPTCHA, OTP(One Time Password)와 같은 인증방식을 주요명령수행 구간에 임의로 표출시켜 인증시점의 불확실성(Entropy)을 높여 공격자가 쉽게 예측하지 못하도록 하였다. 명령수행과정의 일관성(고정성)이 매회 변화되므로 고정화된 형태의 CSRF 공격을 예방할 수 있다.

• Journal of Korean Society of Archives and Records Management
• /
• v.19 no.2
• /
• pp.147-172
• /
• 2019

With the provision of the original text information disclosure service, the time spent on determining the disclosure of the original text information decreased, and the number of original text information disclosure significantly increased. In public institutions, the risk of the exposure of personal information also increased. In this study, the status of personal information protection in the original text information disclosure service was investigated. Moreover, the causes of the exposure of personal information were analyzed, and improvements were proposed. The survey presented the following results. First, 13% of the original text information collected contains personal information, which is the nondisclosure information. Second, among the original text information that includes personal information, the original text information, including the personal information of the public official, was the most important. In particular, many records about vacation and medical leaves were found. Third, there were many cases in which information about the individual of the representative was exposed in the agency that deals mainly with the contract work. Fourth, a large volume of personal information was not detected by filtering personal information. Upon analyzing the cause of the exposure of personal information, the following improvements are suggested. First, privacy guidelines should be redesigned. Second, the person in charge of the task of deciding whether or not to disclose original text information should be trained further. Third, the excessive disclosure of information based on the government's quantitative performance should be eased. Fourth, the filtering function of the personal information of the original text information disclosure system should be improved.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2012.01a
• /
• pp.257-260
• /
• 2012

본 연구의 목적은 결혼이주여성의 건강문제와 이들의 의료기관 이용 실태를 연구하여 의료경영정보시스템을 구축하기 위한 선수 연구에 그 목적이 있다. 연구에 이용된 자료는 2010년 1월 1일부터 12월 31일까지 원주의료원에서 진료한 289명의 원주지역 결혼이주여성의 진료기록을 통하여 조사된 것이며, 결혼이주여성의 일반적인 현황과 미충족 의료 수준을 파악하기 위해 통계청 통계포털자료와 2010년 원주시 통계연보를 활용하였다. 결혼이주여성의 의료서비스 이용은 소득수준과 밀접한 관련이 있으며 의료기관 이용 시 언어적 불편, 재정적 어려움, 가족의 지원 부족이 가장 많이 발생했다. 결혼이주여성의 진료지원 비율은 산부인과 진료비율이 가장 높은 24.3%, 내과 23.2%, 치과 7.9%로 나타났으며 결혼이주여성 자녀들의 소아청소년과 진료비율도 18.6%로 높은 진료비율을 나타났다. 본 연구는 결혼이주여성의 의료서비스 향상과 의료경영정보 시스템의 구축에 도움을 줄 것이다. 또한 이주여성의 건강권 보호를 위한 국가적, 지역적 차원의 노력에 도움이 될 것으로 사료된다.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.11 no.11
• /
• pp.1017-1024
• /
• 2016

In this paper, we have figured out status and demand about personal information in local laws and regulations of the four major city out of the municipality 18 institutions of Gangwon Province. To take advantage of the autonomous regulations Information System(ELIS), and research and analysis in the autonomy regulations of local governments to object to the attachment format. To object to the Attachment to the request of the resident registration number notation is a super key. There is a disclosure resistance sense of personal information, and research analysis of the smart phone number and home phone number. We have proposed the urgent development of automatic search engine of PIMS compliance with personal information.

• Journal of Internet Computing and Services
• /
• v.17 no.4
• /
• pp.95-113
• /
• 2016

Personal information processing works, including resident registration number is common to be consigned by IT specialized company due to high level expertise and tremendous cost. The accident related to personal information is increasing and most of accidents are caused by the consignee's leaking information. According to the Inspection of personal information protection and the management level diagnosis of personal information protection, public Institutions need to build the consignee's accident prevention and personal information management system as soon as possible. In this paper, the efficient enhancement ways for the personal information protection is studied. We analyze the law of business consignment and select basic management items related with personal information protection, and propose a analysis scheme for management level of personal information protection and a enhancement scheme for management system of personal information protection. This paper suggests consignee's management system of personal information protection for the enhancement way and the three Strengthening ways in law. To compose the a enhancement scheme for management system of personal information protection, we conduct questionnaire survey to 30 consignees(IT maintenance, notice printing, call center, welfare center) related to typical tasks of public organizations, present reference for this scheme, and execute verification of this scheme by focus group interview of consignor and consignee.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2021.10a
• /
• pp.578-579
• /
• 2021

According to a survey on the infringement of SMEs, the level of technology protection capability is improving every year, but technology leaks and damage continue to occur. This shows that there is a need for a security management and supervision system that can strengthen the security awareness of SME executives and employees and maintain the security level continuously. The Personal Information & Information Security Management System(ISMS-P) authentication systems is the latest related standard, which has the problem of applying the same certification criteria without considering the types of certification target organizations such as ISPs, IDC, hospitals and schools, and SMEs.. In this paper, 73 evaluation items that can be specialized and applied to SMEs were derived by referring to ISMS-P certification and Personal Information Protection Management System (PIMS) certification. The results of the study show that the number of evaluation items decreased by 28.4% compared to the existing ISMS-P certification.