• Journal of Information Technology Applications and Management
• /
• 제15권1호
• /
• pp.139-152
• /
• 2008

Recently organizations identify information security as one of essential means for gaining competitive advantage. However, they do not actively increase investment in this area because they consider spending for information security as a cost rather than an investment. This is because organizations don't have a clear understanding of information security objectives which can be achieved through investment, and they don't have criteria for alternatives which can be considered in information security investment decision-making. In this paper we propose to model the decision-making process of information security investment by the AHP (Analytic Hierarchy Process). The results will show that availability is the most important criterion for the decision of information security alternatives, and intrusion detection is the most important information security alternative. We hope that the results of this paper provide a guideline for clear decision-making in information security investment.

• Journal of Information Technology Applications and Management
• /
• 제23권1호
• /
• pp.79-96
• /
• 2016

As numerous security breaches on a variety of information assets such as personal information, corporate secrets, computer servers, and networks have occurred, information security has emerged as a critical social issue. However, researches on economically rational information security decision-making have been few. Such researches are especially rare in South Korea where information security is considered to be a discipline of engineers. This study aims to identify the preferred themes and methodologies of information security economics research in the field of information systems by reviewing papers published in Management Information Systems Quarterly (MISQ), Information Systems Research (ISR), European Journal of Information Systems (EJIS), Management Science (MS), and Information and Management (I&M). We hope that the results of the study will be helpful in rational managerial or policy decision-making for practitioners and suggest future research topics for researchers.

• International Journal of Computer Science & Network Security
• /
• 제23권1호
• /
• pp.25-32
• /
• 2023

Decision-making refers to identifying the best alternative among a set of alternatives. When a set of criteria are involved, the decision-making is called multi-criteria decision-making (MCDM). In some cases, the involved criteria may be prioritized by the human decision-maker, which determines the importance degree for each criterion; hence, the decision-making becomes prioritized multi-criteria decision-making. The essence of prioritized MCDM is raking the different alternatives concerning the criteria and selecting best one(s) from the ranked list. This paper introduces a generic multi-level algorithm for ranking multiple alternatives in prioritized MCDM problems. The proposed algorithm is implemented by a decision support system for selecting the most critical short-road requests presented to the transportation ministry in the Kingdom of Saudi Arabia. The ranking results show that the proposed ranking algorithm achieves a good balance between the importance degrees determined by the human decision maker and the score value of the alternatives concerning the different criteria.

• 정보보호학회논문지
• /
• 제25권6호
• /
• pp.1561-1570
• /
• 2015

정보보호 침해사고로 인한 피해를 예방하거나 감소시키기 위해 많은 관심과 투자가 검토되고 있지만, 투자, 관리등의 정보보호 의사결정을 경제적으로 합리적으로 하기 위한 연구에 대해서는 국내에 본격적으로 소개되지 않았다. 정보보호의 경제적 의사결정에 대한 연구자들은 보안경제성워크샵(Workshop on the Economics of Information Security, WEIS)을 중심으로 활동하고 있으며, 본 연구는 WEIS에 2002년부터 2014년까지 발표된 논문들의 연구주제와 연구방법을 분석하였다. 연구결과는 국내의 관련 연구 활성화에 도움이 될 수 있고, 기업과 정부의 경제적 정보보호 의사결정에 참고가 될 수 있을 것이다.

• 한국재난정보학회 논문집
• /
• 제12권2호
• /
• pp.176-180
• /
• 2016

The full extent of damage depend greatly on the quick and rational decision making by the incident commander soon after the disaster. The decision that everybody should wait by the captain, not to enter into the ship by the first dispatched incident commander, broadcasting failure have brought about a huge loss of life at Sewol cruise ship incident. Thus this study reviews the training and education system supporting the rational crisis decision making performed by the incident commander to cut off the expansion of disaster which is caused by the failure of the incident situation awareness and the decision making described above.

• 한국정보시스템학회지:정보시스템연구
• /
• 제19권3호
• /
• pp.59-73
• /
• 2010

Along with advance of information technology, value of information is growing much more than ever. And nearly all organizations pay great attentions to information security to protect their own important informations against every kind of hazardous accidents. Therefore, organizations want to select best information security system among many possible alternatives. For this purpose, several fuzzy AHP decision making approaches can be utilized. In this study, we consider a number of qualitative and quantitative factors to evaluate security systems and then apply three fuzzy AHP approaches for simple case to compare the results from three approaches. We find that final decision depends on both fuzzy AHP methods and degree of fuzziness.

• 산업경영시스템학회지
• /
• 제33권4호
• /
• pp.145-152
• /
• 2010

Under limited resources such as budgets and experts, it is necessary to make decisions for promotion strategy of standardization work items in Information and Communication Technologies (ICTs). This paper focuses on a method of setting standardization promotion strategies for each item of personal information security standardization. As a decision making tool, the Importance Performance Anaysis (IPA) is applied and analyzed to the decision processes. The results are showed and illustrated for useful inputs to practical policy making in the field of standardization activities.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제15권10호
• /
• pp.3588-3607
• /
• 2021

Covid-19 pandemic required all the world to use internet more actively. As a result, individuals and businesses are more open to digital threats. In order to provide security within the network, firewalls should be used. Firewalls act as a gateway between the corporate and the external networks. Therefore, it is more important than ever to choose the right firewall for each network. In this study, a new linear decision making model is proposed in order to find out the most suitable firewall and the estimates are completed according to this new model. Also, this model is compared with multi-objective optimization on the basis of ratio analysis (MOORA) method. This study distinguishes from other studies by proposing a new solution which ranks the firewall alternatives using linear and MOORA approaches. These approaches are used in many fields before but not in information technologies. Thus, this study can be considered quite innovative in terms of the problem it handles and the approaches used. It offers up-to-date and practical suggestions related to a decision making problem that has not been previously studied in the literature.

• 융합보안논문지
• /
• 제7권4호
• /
• pp.83-91
• /
• 2007

본 연구는 네트워크 중심전(NCW)을 원활하게 구현하기 위해 구축된 정보보호체계의 수준을 평가하고 미흡한 부분을 도출함으로서 미래전에 대비하는 예방적 지침을 마련하고자 수행하였다. 본 연구에서는 국방 정보체계 분야에 다년간 근무했던 전문가들로 워킹그룹을 편성하여 그룹의 사결정기법을 활용한 연구방법을 통해 NCW하에서의 정보보호체계 수준을 평가하는 지표를 개발하였다. 본 연구에서 개발 제시한 평가지표를 활용하여 시스템 수준을 평가하고 미흡한 점을 보완한다면 보다 완벽한 정보보호 대책을 마련할 수 있을 것이다.

• 정보보호학회논문지
• /
• 제27권3호
• /
• pp.637-651
• /
• 2017

금융회사가 개인정보를 수집하기 위해서는 법률에 정해진 내용을 소비자에게 명시적으로 알리고 사전 동의를 받도록 되어 있다. 그 결과 금융상품이 복잡해지고 다양해짐에 따라 '개인정보제공 동의서' 내용도 복잡해지고 분량이 많아지게 되었다. 특히 인터넷과 모바일의 경우 화면 크기의 제약으로 글씨가 더 작아지면서 더욱 이해하기가 힘들어졌다. 이것은 개인정보를 수집하는 거의 모든 기업이 비슷한 상황이어서, 서비스를 이용하는 소비자 입장에서는 동의 내용을 이해못한 채 습관적으로 동의하는 모순이 생기고 있다. 본 연구에서는 금융회사 인터넷 홈페이지를 통한 합리적인 개인정보 수집 및 이용 동의 정책 수립 모델을 제시하기 위해 국내외 법제도를 고찰하여 문제점을 도출하고 개선 방안을 제시한다. 또 연구를 통해 선정된 평가요인을 AHP(Analytic Hierarchy Process)방법을 이용하여 의사결정 모델과 공식을 제시하고 검증한다.