• Review of KIISC
• /
• v.22 no.7
• /
• pp.37-45
• /
• 2012

클라우드 시장에서는 클라우드 서비스 비즈니스 모델의 우위 선점을 위한 글로벌 경쟁이 치열하게 진행되고 있으며, 이와 마찬가지로 국가간 클라우드 관련 정책 또한 빠르게 개발되고 있다. 이러한 클라우드 관련 정책의 일환에 있는 클라우드 서비스 인증제에 대해 살펴보고 발전 방향에 대해 제언하고자 한다.

• Asia-pacific Journal of Multimedia Services Convergent with Art, Humanities, and Sociology
• /
• v.6 no.8
• /
• pp.499-509
• /
• 2016

The MSIP has implemented "Act on The Development of Cloud Computing and Protection of Its Users" from September 2015 and invigorated the cloud service industry. The act mainly includes the improvement cloud computing reliability and user protection for the development foundation and use activation. In order to expand the cloud market, it is important to increase the reliability of individual users. However, practical discussions and approach for cloud services adoption are still limited. In fact, there is no agreement standard for domestic cloud services. As a user agreement is not standardized, users feel difficulty compare to each agreement of cloud service provider and may be damaged because of unfair terms. Thus, it is necessary to examine the unfairness of cloud service agreement for user protection. This study analyzes domestic and foreign cloud service agreements including Practical Guide to Cloud Service Agreement of Cloud Standards Customer Council and suggests the direction of the standard agreement of cloud services.

• TTA Journal
• /
• s.164
• /
• pp.8-15
• /
• 2016

전 세계적으로 ICT 활용 패러다임이 정보시스템을 자체 구축하는 방식에서 서비스 이용량에 비례하여 비용을 지불하는 클라우드 컴퓨팅으로 전환 중이며, 2010년부터 미국 등 주요국가에서는 클라우드 우선 정책을 기반으로 정부 기업에서 클라우드의 이용이 급속히 확산 중이다. 우리나라에서도 2015년 3월 세계 최초로 클라우드 발전법을 제정하고, 11월 'K-ICT 클라우드 컴퓨팅 활성화 계획'을 수립하여 클라우드 선도국가로의 도약을 위해 다양한 노력을 기울이고 있다. 클라우드 서비스가 확산될수록 공적 표준화 기구를 중심으로 클라우드 서비스를 제공하기 위해 필요한 요소 기술에 대한 표준화 작업이 활발해짐에 따라, 국내 클라우드 컴퓨팅 관련 기술의 국제 표준화 추진 및 협력 방안 마련을 위한 전략의 개발이 요구되고 있는 시점이다. 본고에서는 클라우드컴퓨팅표준화포럼을 탐방하여 국내 표준 제정 현황을 살펴보고, 국내외 클라우드 기술 및 산업, 정책 동향을 짚어보고자 한다. 또한, 현재 국제 공적표준화 기구의 이슈를 점검하여 클라우드 컴퓨팅 참조구조를 기반으로 하는 표준 기술에 대해 소개하고, 클라우드 보안 및 상호운용성에 대한 표준 동향을 소개하여 클라우드 분야의 핵심 기술을 이해하는데 도움을 주고자 한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.25 no.5
• /
• pp.1245-1255
• /
• 2015

As cloud computing services become popular, the concern on the data security of cloud services increases and the efforts for the data security become essential. In this paper, we describe the pros and cons of cloud computing including the definition of cloud. Then, we discuss the regulations about the protection of user data defined in cloud promotion act. Previous studies related to the privacy protection and the entrustment of personal information in cloud computing are reviewed. We examine how to store the personal information depending on the cloud service model. As a result, we argue that the entrustment of personal information should vary according to the cloud service model and we propose how to protect the personal information on IaaS and SaaS cloud service models.

• Journal of Platform Technology
• /
• v.9 no.2
• /
• pp.10-25
• /
• 2021

Although many studies have been conducted on risk analysis and evaluation in the on-premises environment in information security, studies on effective methodologies of risk analysis and evaluation for cloud computing systems are lacking. In 2015, the Cloud Computing Development Act was enacted, which served as an opportunity to promote the introduction of cloud computing. However, due to the increase in security incidents in the cloud computing system, activation is insufficient. In addition, the cloud computing system is not being actively introduced because of the difficulty in understanding the cloud computing system technology of the person in charge who intends to introduce the cloud computing system. In this regard, this study presented an effective risk analysis and evaluation method by examining the characteristics, concepts, and models of cloud computing systems and analyzing how these characteristics affect risk analysis and evaluation.

• Journal of Internet Computing and Services
• /
• v.21 no.1
• /
• pp.159-167
• /
• 2020

The Korean government has pursued various policies to revitalize the cloud industry since 2009. In particular, the government enacted the 'Cloud Computing and Privacy Security Act' for the first time in the world in 2015, creating institutions and support programs to boost the cloud industry. As a result, the volume of the cloud industry has increased significantly, and the number of companies and professionals have increased. In this paper, the researches analyzed the situation of Korean cloud market, usage of cloud computing in enterprises, effects and problems of cloud-enabled companies based on the industrial survey conducted from 2016 to 2019, In this study, the results showed concerns of security, uncertainty about cost savings, and IT capabilities of enterprises as problems in revitalizing the cloud industry. The researches also propose strategies, perception changes, and development processes for companies to resolve the problems.

• The Journal of the Convergence on Culture Technology
• /
• v.5 no.1
• /
• pp.219-225
• /
• 2019

Today, in the era of the 4th Industrial Revolution, the cloud computing sector has advantages for cost reduction and efficiency of work, but problems related to privacy may arise. Therefore, the law on the development of cloud computing and user protection should be improved to enable providers of cloud computing services to proactively identify whether or not they contain their personal information, or to take steps to protect their privacy. And this same law is desirable to improve the implementation of a national mandatory certification system for privacy protection systems for cloud computing businesses. This same law is also desirable that cloud computing service providers create direct accountability for privacy breaches and appropriate scope for those responsibilities.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.17 no.2
• /
• pp.299-308
• /
• 2022

Recent, energy transition policies are driving to increase in the number of small photovoltaic(PV) generators. It is difficult for system operators to accurately anticipate the amount of power generated from such small scale PV generation, and this may disrupt dispatch schedules and result in an increase in cost. The need for a Virtual Power Plant(VPP) is emerging as a way of resolving these problems, as it would integrate small-scale PV plants and eliminate uncertainty about the amount of power generated, control voltage, and provide power reserves. In this paper, the cost evaluation methods are described for determination of VPP cloud charges both Net Present Value(NPV) method and Profitability Index(PI) method, the calculated outcomes of the two types of cost evaluation methods are presented in detail. It seems we secure profitability as we get 1.22 of profitability index from calculation results, it may be attractive for the aggregator as NPV is enough for satisfying profitability.

• Convergence Security Journal
• /
• v.22 no.3
• /
• pp.69-77
• /
• 2022

Globally, the medical field is growing very fast with technology development and convergence with ICT technology, and Precision Medicine using personal health information, genetic information, and clinical information is growing into a next-generation medical industry. Since Precision Medicine deals with individual health and life, the issues of personal information protection and health and medical information protection are emerging.Accordingly, this paper presents security improvements by domestic and foreign standards, laws, and systems in the cloud and medical field, and proposes a plan to protect healthcare and medicine information protection for safe Precision Medicine.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2013.05a
• /
• pp.677-680
• /
• 2013

The risk of leakage of personal information is growing with new services such as social networking and cloud services by the rapid development of information. In particular, the field of medical IT technology is required to solve problems arising from the aging society and sustainable economic development, and in accordance with the requirements to improve the quality of life, a new market for medical devices and healthcare services can be expected. However, most of the medical information system was computerized with the introduction of IT technology, and when they exchange and transfer of medical information between institutions, medical information leakage occurs and security risk is growing. In this paper we review and analyse the security of personal health information related to the major legal systems and technical and administrative protection.