• Convergence Security Journal
• /
• v.19 no.1
• /
• pp.111-120
• /
• 2019

As cyber-attacks become more intelligent and sophisticated, the importance of Security Operations Center(SOC) has increased and the number of SOC has been increasing. In order to cope with cyber threats, institutions and organizations use a variety of cyber security standards to create business procedures. However, SOC often need to be improved in accordance with the SOC environment because they collaborate with managed security service specialists rather than their own personnel. The NIST cyber security framework, information security management system, and managed security service companies were compared and analyzed. As a result, it was found that the NIST CSF is a framework that is easy to apply to managed security service, The content was judged to be insufficient. Therefore, in this study, NIST CSF was used as a reference model to derive the management items required for SOC environment, and the necessity, importance and ease of each item were confirmed through an Delphi technique and an improved cyber security framework was proposed.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.20 no.1
• /
• pp.268-277
• /
• 2019

Flight test systems should monitor various conditions in real time during flight tests and take safety measures in an emergency. The importance of ensuring test safety increases in more complicated and wider test environments. Also, due to the transition of wartime operational authority, many guided missile systems must be developed simultaneously. Early deployment and budget reduction by shortening the development and T&E periods are also necessary. Consequently, the risk of flight tests under the circumstance of inefficient test resources is increasing. To address this deficiency, a flight test system model using SysML was proposed in this study. The method of designing and verifying the test system is based on the agile shift left testing methodology of advanced T&E labs and utilizing a system reference model in the aerospace field. Through modeling and simulation analysis, early identification and correction of faults resulting from inconsistent test requirements can mitigate the risk of delays during the T&E phase of flight tests. Also, because the flight test system model was constructed using SysML, it can be applied to test various guided missile systems.

• KIPS Transactions on Computer and Communication Systems
• /
• v.8 no.2
• /
• pp.41-56
• /
• 2019

Cloud manufacturing is a new concept of manufacturing process that works like a single factory with connected multiple factories. The cloud manufacturing system is a kind of large-scale CPS that produces products through the collaboration of distributed manufacturing facilities based on technologies such as cloud computing, IoT, and virtualization. It utilizes diverse and distributed facilities based on centralized information systems, which allows flexible composition user-centric and service-oriented large-scale systems. However, the cloud manufacturing system is composed of a large number of highly heterogeneous subsystems. It has difficulties in interconnection, data exchange, information processing, and system verification for system construction. In this paper, we derive the user requirements of various aspects of the cloud manufacturing system, such as functional, human, trustworthiness, timing, data and composition, based on the CPS Framework, which is the analysis methodology for CPS. Next, by analyzing the user requirements we define the system requirements including scalability, composability, interactivity, dependability, timing, interoperability and intelligence. We map the defined CPS system requirements to the requirements of oneM2M, which is the platform standard for IoT, so that the support of the system requirements at the level of the IoT platform is verified through Mobius, which is the implementation of oneM2M standard. Analyzing the verification result, finally, we propose a large-scale cloud manufacturing platform based on oneM2M that can meet the cloud manufacturing requirements to support the overall features of the Cloud Manufacturing CPS with dependability.

• Journal of the Korean Society of Marine Environment & Safety
• /
• v.22 no.2
• /
• pp.228-232
• /
• 2016

As the quantity of HNS sea trasport and the number of HNS accidents at sea are increasing recently, the importance of HNS management is emphasized so that we try to develop marine accident case standard code for making HNS accidents at sea databased systemically in this study. First and foremost, we draw the related requisites of essential accident reports along with internal and external decrees and established statistics of classified items for conducting study, and we referred to analogous standard codes obtained from developed countries in order to research code design. Code design is set like 'Accident occurrence ${\rightarrow}$ The initial accident information ${\rightarrow}$ Accident response ${\rightarrow}$ Accident investigation' in accordance with the general flow of marine HNS accidents of in which the accident information is input and queried. We classified initial accident information into the items of five categories and constructed "Preliminary Information Code(P.I.C.)". In addition we constructed accident response in two categories and accident investigation in three categories that get possible after the accident occurrence as called "Full Information(F.I.C.)", including the P.I.C. It is represented in 3 kinds of steps on each topic by departmentalizing the classified majority as classified middle class and classified minority. As a result of coding marine HNS accident and of the code to a typical example of marine HNS accident, HNS accident was ascertained to be represented sufficiently well. We expect that it is feasible to predict possible trouble or accident henceforward by applying code, and also consider that it is valuable to the preparedness, response and restoration in relation to HNS accidents at sea by managing systemically the data of marine HNS accidents which will occur in the future.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.11 no.9
• /
• pp.3330-3335
• /
• 2010

Due to the acceleration of medical information age, the semantic interoperability of clinical information is rising up as a major issue. The laboratory results are known as the best significant area among clinical information to be required for exchanging and sharing. The aim of this research is to develop the clinical contents model for exchange laboratory results. This research was conducted from March 2008 to September 2008. Firstly, the method is to get the attributes and codes from LOINC which is one of the standard medical terminology system related to laboratory and the Reference Information Model(RIM) of Health Level 7(HL7). Secondly, the attributes from each work process around orders and reports of laboratory was analyzed. We evaluated the attributes whether they could be represented into the attributes contained in HL7's RIM. Thirdly, the prototype for hemoglobin case using the structure of clinical contents model and defined attribute. Fourthly, the face validity was done by one laboratory physician with four clinicians. The assessment contents were for the suitability involved in representation and exchange with proposed model. The results shows that the model corresponds with the aim of the research. Eventually the proposed model for the exchange of laboratory results could contributes to information interchange according to laboratory area for the future.

• Journal of Digital Convergence
• /
• v.14 no.10
• /
• pp.253-259
• /
• 2016

Recently, not only domestic businesses but also overseas businesses are expanding development and investment in automated warehouses as domestic and foreign logistics environments undergo drastic change. In such an environment, automated warehouse systems are being rapidly changed, and automated warehouse systems equipped with diversified functions are being developed accordingly. But the assessment systems of developed automated warehouse system is at a standstill. In the present article, characteristics of the automated warehouse systems in diversified development and trends of technology were analyzed, based on which evaluation items of functional suitability and reliability were derived by referring to ISO/IEC 25000 as the international quality assessment standard to secure reliability of the automated warehouse system, and an evaluation model was developed through the derived evaluation items. Through the present article, evaluation standards of functional suitability and reliability to enhance quality levels of automated warehouse systems are considered to be secured.

• Journal of The Korean Association of Information Education
• /
• v.20 no.6
• /
• pp.575-584
• /
• 2016

We compared domestic computer science curriculum with foreign curriculums in order to develop content for algorithm and programming education in elementary and secondary schools. The results show that the levels and ranges of information included in the practical arts and information subjects of the 2015 Revised Curriculum are insufficient when compared with those of England, India, and America. In this paper, we surveyed experts about the importance of content and the age-appropriate time to begin teaching algorithm and programming in schools. The surveys were conducted using questionnaires used in KAIE's software standard model. Except for algorithm evaluation, the experts largely believe all content areas of algorithm education are important. However, they had differing opinions about the best time to begin teaching this subject matter.

• The Journal of Society for e-Business Studies
• /
• v.14 no.4
• /
• pp.287-297
• /
• 2009

Though the interest for the construction of ubiquitous city (u-City) has been increased in many researches, many of those efforts are still done somewhat separated ways such as from the perspective of architectural design of urban city or from the perspective of underlying ICT (Information and Communication Technology) implementation. Since there are various services and technical components involved in u-City implementation, those separated approaches can cause much troubles while implementing u-City. In addition to this, because u-City components are continually changing and expanding, to cope with this evolution, many researches about the infrastructure of u-City should be done in a systematic way while integrally considering various perspectives of u-City. In this research, by combining WBEM/CIM standards to GMA (Grid Monitoring Architecture), we could provide WBEM/CIM design that is usable for u-City implementation. In contrast to the conventional research that is still abstract, our study presents concrete and implementable u-City infrastructure model. We hope our result will be a valuable reference for the other u-City infrastructure-related researches.

• Information Systems Review
• /
• v.4 no.2
• /
• pp.1-17
• /
• 2002

Proliferation of IT applications and developments lead to many useful yet diverse information systems being used in an organization. Users of information system have been satisfied with useful functions and prompt outputs, however they have become realized the problem of incompatibility of diverse systems and asked for more compatible systems in which more data and software can be shared among users. Information technology architecture (ITA) is suggested as one way of avoiding such problem by many researchers. This paper ananlyzes and introduces the ITA approach used primarily in US governments and in many other organizations. In Korea, many researchers view ITA as a technical concept that deal with interperability and standards. However, ITA is more managerial oriented concept than technical, because it allows us to achieve managerial objective, for example alignment of IT to strategic objectives, with ease and more confidence. This paper proposes the necessity of ITA in IT management and clarifies the relationships of managerial focus with technical focus of ITA.

• Journal of the Korean BIBLIA Society for library and Information Science
• /
• v.29 no.1
• /
• pp.47-72
• /
• 2018

The quality of records determines the value of records as assets in the digital age. It depends on how consistently record requirements can be applied during the records production and utilization processes using mostly IT systems. Therefore, the importance of effective records management (RM) governance applied for all organizational areas cannot be emphasized enough. The purpose of this paper is to propose a new framework of RM governance in order to produce and manage more valuable records, and the way to implement it in an organizational context. For the purpose, this paper discusses the necessity of a governance framework to formulate and operate consistent policies and procedures for overall processes of production, distribution, utilization and protection of records based on the values of evidence and information. Next, it proposes an integrated model by linking the management framework of the Information Governance Reference Model (IGRM) and the Management System for Records standards (ISO 30300 series; MSR) for the effective RM governance to be implemented in an organizational context.