• International Journal of Computer Science & Network Security
• /
• 제21권4호
• /
• pp.84-92
• /
• 2021

Care services are a significant asset in human life. Care in its overall nature focuses on human needs and covers several aspects such as health care, homes, personal care, and education. In fact, care deals with many dimensions: physical, psychological, and social interconnections. Very little information is available on estimating the cost of care services that provided to orphans and abandoned children. Prediction of the cost of the care system delivered by governmental or non-governmental organizations to support orphans and abandoned children is increasingly needed. The purpose of this study is to analyze the care cost for orphanage organizations in Saudi Arabia to forecast the cost as well as explore the most influence factor on the cost. By using business analytic process that applied statistical and machine learning techniques, we proposed a model includes simple linear regression, Naive Bayes classifier, and Random Forest algorithms. The finding of our predictive model shows that Naive Bayes has addressed the highest accuracy equals to 87% in predicting the total care cost. Our model offers predictive approach in the perspective of business analytics.

• 디지털산업정보학회논문지
• /
• 제14권2호
• /
• pp.19-25
• /
• 2018

With the development of IT technology, various services such as artificial intelligence and autonomous vehicles are being introduced, and many changes are taking place in our lives. However, if secure security is not provided, it will cause many risks, so the information security becomes more important. In this paper, we analyzed the research trends of main themes of information security over time. In order to conduct the research, 'Information Security' was searched in the Web of Science database. Using the abstracts of theses published from 1991 to 2016, we derived main research topics through topic modeling and time series regression analysis. The topic modeling results showed that the research topics were Information technology, system access, attack, threat, risk management, network type, security management, security awareness, certification level, information protection organization, security policy, access control, personal information, security investment, computing environment, investment cost, system structure, authentication method, user behavior, encryption. The time series regression results indicated that all the topics were hot topics.

• 정보보호학회논문지
• /
• 제31권6호
• /
• pp.1149-1156
• /
• 2021

Brute force 공격을 가속화 시키는 Grover 알고리즘은 대칭키 암호의 키 복구에 적용 가능하며, NIST에서는 대칭키 암호에 대한 Grover 공격 비용을 양자 후 보안 강도 추정에 활용하고 있다. 본 논문에서는 DES를 양자 회로로 최적화 구현하여 Grover 알고리즘 공격 비용을 추정한다. NIST에서는 128, 192, 256-bit 키를 사용하는 대칭키 암호에 대해 AES의 공격 비용을 기준으로 양자 후 보안 강도를 추정하고 있다. DES에 대해 추정한 공격 비용은 DES가 양자 컴퓨터의 공격으로부터 어느 정도의 내성을 가지고 있는지 분석해볼 수 있다. 현재 64-bit 키를 사용하는 대칭키 암호들에 대한 양자 후 보안 지표가 아직 존재하지 않기 때문에 본 논문에서 추정한 64-bit 키를 사용하는 DES에 대한 Grover 공격 비용이 기준으로 활용될 수 있다. 제안하는 DES의 양자 회로 구현 적합성 및 공격 비용 분석에는 양자 프로그래밍 툴인 ProjectQ가 사용되었다.

• 한국정보통신학회:학술대회논문집
• /
• 한국해양정보통신학회 2011년도 추계학술대회
• /
• pp.253-254
• /
• 2011

Most of existing RFID authentication protocols either suffer from some security weaknesses or require costly operations that are not available on low-cost tags. In this paper, we analyzed the security mechanism of a lightweight authentication protocol.

• 경영정보학연구
• /
• 제4권2호
• /
• pp.293-307
• /
• 2002

정보시스템 아웃소싱이 활성화되면서 아웃소싱 가치와 가격에 대한 관심이 고조되고 있다. 정보시스템 아웃 소싱은 개발 아웃소싱과 운영 아웃소싱으로 나눌 수 있다. 운영 아웃소싱 비용에 대한 연구는 최근에 시작되어 지속적인 추가 연구가 필요하다. 운영 아웃소싱 유형 중 대표적인 유형이 응용시스템 운영 아웃소싱(applicationsystems outsourcing)인데, 서비스 수준에 대한 복잡한 판단이 필요하기 때문에 정교한 비용산정 모형이 요구된다. 기존 연구에서는 여러 업종의 데이터를 수집하여 비용산정 모형을 구축하였기 때문에 업종의 고유한 특성을 반영하지 못하였으며, 따라서 산정 비용의 정확성이 높지 않다고 할 수 있다. 본 연구에서는 정보시스템의 중요성이 매우 높은 산업분야 중의 하나인 증권업종과 의료업종의 응용시스템 아웃소싱 비용 산정 모형을 도출한다. 업종의 특성을 반영하여 서비스 수준을 결정하는 요소를 정의하고, 증권업종의 비용 모델을 먼저 도출하였다. 의료업종과 증권업종이 서로 차별화되는지를 분석하였으며, 의료업종의 별도 비용 모델을 구축하여 업종간의 비용모델 차이가 존재함을 보였다.

• 대한전기학회논문지
• /
• 제43권2호
• /
• pp.197-205
• /
• 1994

Security of a power system refers to its robustness relative to a set of imminent disturbances (contingencies) during operation. The socially optimal solution for the actuall level of generation/consumption has been well-known spot pricing at shot-run marginal cost. The main disadvantage of this approach arises because serious contingencies occur quite infrequently. Thus by establishing contractual obligations for contingency offering before an actual operation time through decision feedback we can obtain socially optimal level of system security. Under probabilistic precontract pricing the operating point is established at equal incremental cost of the expected short-run and collapse cost of each participant. Rates for power generation/consumption and for an offer to use during a contingency, as well as information on the probability distribution of contingency need for each participant, are derived so that individual optimization will lead to the socially optimal solution in which system security is optimized and the aggregate benefit is maxmized.

• 디지털산업정보학회논문지
• /
• 제15권2호
• /
• pp.53-61
• /
• 2019

In this paper, we propose 'a self - conformance system of convergence security provider' to provide basic data for security and reliability of convergence industrial technology, system and service. It is difficult to evaluate convergence security systems, limited to information and communication service providers, unable to check convergence security items, burden of submission documents, difficulty in measuring convergence security service level and we will summarize product and service-based requirements that can be integrated and systematically measure the level of convergence security and define renewed life cycle-based convergence security information and content security and assurance requirements. On the basis of this, each convergence security company declares conformity with the standard itself without the certification of the certification body, and introduces the provider conformity certification system which can manufacture and sell. This will enable the company to strengthen its competitiveness through timely launch and implementation of products and services and cost reduction.

• 한국정보통신학회:학술대회논문집
• /
• 한국정보통신학회 2013년도 춘계학술대회
• /
• pp.256-259
• /
• 2013

Data and network security for e-Healthcare Systems are a primary concern due to the easiest deployment area accessibility of the sensor devices. Furthermore, they are often interacting closely in cooperation with the physical environment and the surrounding people, where such exposure increases security vulnerabilities in cases of improperly managed security of the information sharing among different healthcare organizations. Hence, healthcare-specific security standards such as authentication, data integrity, system security and internet security are used to ensure security and privacy of patients' information. This paper discusses security threats on e-Healthcare Systems where an attacker can access both data and network using masquerade attack. Moreover, an efficient and cost effective approach for countermeasures is discussed for the delivery of secure services.

• 지식경영연구
• /
• 제20권3호
• /
• pp.91-106
• /
• 2019

In the era of the 4th Industrial Revolution, the importance of information protection is increasing day by day with the advent of the 'hyper-connection society', and related government financial investment is also increasing. The source of the government's fiscal investment projects is taxpayers' money. Therefore, the government needs to evaluate the effectiveness and feasibility of the project by comparing the public benefits created by the financial investment projects with the costs required for it. At present, preliminary feasibility study system which evaluates the feasibility of government financial investment projects in Korea has been implemented since 1994, but most of them have been actively carried out only in some fields such as large SOC projects. In this study, we discuss the feasibility evaluation of public projects for the purpose of information security. we introduce the case study of the personal information protection program of Korean public institutions and propose a cost-effectiveness analysis method that can be applied to the feasibility study of the information protection field. Finally, we presented the feasibility study and criteria applicable in the field of information security.

• 한국콘텐츠학회논문지
• /
• 제14권10호
• /
• pp.270-278
• /
• 2014

빅데이터 시대를 맞아 정보보호위협이 급증하고 있어 데이터의 안정성 확보와 보안 관리가 더욱 중요해지고 있다. 데이터 백업은 데이터의 손상과 유실을 방지하기 위한 궁극적인 방법이므로 정보보호위협을 고려한 데이터백업 운영방안에 대한 연구가 필요하다. 본 논문에서는 정보보호위협으로 인한 정보자산의 손실 비용과 데이터 백업에 소요되는 비용을 고려한 경제성분석 모형을 개발한다. 주기적인 차분백업과 한번의 일괄백업으로 구성된 백업정책을 운영하는 정보시스템에서 정보보호위협의 발생 및 이에 따른 경제적 피해를 확률모형으로 모델링하고 경제성분석에 필요한 비용관련 성능지표를 유도한다. 백업비용, 데이터 복구비용, 유실비용을 고려한 비용구조 하에서 시스템 평균 비용을 분석하고 수치 예를 제시한다.