• 한국경영과학회지
• /
• 제32권2호
• /
• pp.149-162
• /
• 2007

In the era of the internet and ubiquitous computing, IS users are still facing a variety of threats. Therefore, a need of more tightened information security service increases unprecedentedly. In this sense, this study is aimed at proposing a new research model in which IT assets (i.e., network, system, and information influence) Security and Information Security Service (i.e., confidentiality, integrity, nonrepudiation, authentication) affect information security quality positively, leading to users' satisfaction eventually. To prove the validity of the proposed research model, PLS analysis is applied with valid 177 questionnaires. Results reveal that both IT assets Security and Information Security Service influence informations security qualify positively, and user satisfaction as well. From the results, it can be concluded that Korean government's recent orchestrated efforts to boost the IT assets Security and Information Security Service helped great improve the information security quality and user satisfaction.

• 정보보호학회논문지
• /
• 제19권5호
• /
• pp.131-142
• /
• 2009

정보보호제품 사용자는 보안성과 성능을 포함한 좋은 품질의 정보보호제품을 요구하고 있으나 정보보호제품에 대한 품질평가는 물론 다양한 정보보호제품의 품질을 평가하기 위한 품질 모델과 정보보호제품별 메트릭에 대한 연구가 전무한 실정이다. 본 논문에서는 정보보호제품을 3가지 제품군으로 분류하고, 다양한 정보보호제품이 가질 수 있는 보안성과 성능을 분석하였다. 이를 통하여 정보보호제품의 보안성과 성능이 고려된 품질 모델을 새롭게 정의하였고 정의된 품질모델은 7개의 품질 특성과 24개의 품질 부특성을 가진다. 또한, 정보보호제품의 품질평가에 사용가능한 62개의 공통 메트릭과 45개의 확장 메트릭으로 구성하고 특정 정보보호제품의 품질평가 메트릭을 생성하는 방법을 제안하였다. 제안된 메트릭 생성 방법은 다양한 정보보호제품에 적용할 수 있도록 메트릭의 확장이 가능하며 침입차단시스템, 침입탐지시스템 및 지문인식시스템에 대한 품질평가 메트릭을 생성하고 검증하여 다양한 정보보호제품에 적용가능함을 보였다.

• Journal of Information Technology Applications and Management
• /
• 제16권2호
• /
• pp.23-43
• /
• 2009

For reliability and confidentiality of information security systems, the security engineering methodologies are accepted in many organizations. To improve the effectiveness of security engineering, this paper suggests a security methodology ISEM, which considers both product assurance and production processes, takes advantages in terms of quality and cost. To verify the effectiveness of ISEM, this paper introduces the concepts of quality loss, and compares the development costs and quality losses between ISEM and CC through the development of VPN system.

• 한국정보보호학회:학술대회논문집
• /
• 한국정보보호학회 1995년도 종합학술발표회논문집
• /
• pp.41-47
• /
• 1995

This research suggests a criterion, security quality, which is a unifying principle in computer network security that has the lack of a unifying principle. The security quality includes secrecy, integrity, recording, and availability among the factors that represent the security evaluation of the computer system. So, we defined the security quality, which is a basis for determining the security level, as the grand total of evaluation about each factor.

• 산업경영시스템학회지
• /
• 제33권3호
• /
• pp.1-9
• /
• 2010

To protect information resources, many organizations including private corporate and government employ integrated information security systems which provide the functions of intrusion detection, firewall, and virus vaccine. So, in order to develop a reliable integrated information security system during the development life cycle, the managers in charge of the development of the system must effectively distribute the development resources to the quality factors of an integrated information security system. This study suggests a distribution methodology that minimizes the total cost with satisfying the minimum quality level of an integrated information security system by appropriately assigning development resources to quality factors considered. To achieve this goal, we identify quality factors of an integrated information system and then measure the relative weights among the quality factors using analytic hierarchy process (AHP). The suggested distribution methodology makes it possible to search an optimal solution which minimizes the total cost with satisfying the required quality levels of processes by assigning development resources to quality factors during the development life cycle.

• Journal of Information Technology Applications and Management
• /
• 제11권2호
• /
• pp.45-64
• /
• 2004

Many researchers have proved that information systems auditing is a very effective tool for improving information systems quality. However, information system auditing in Korea still includes many subjective judgements. This study deals with applying a quantitative model to improve information system auditing quality on security domain. First of all, we have looked at previous researches on information systems audit, especially on security audit. Based on this survey, we have come up with solutions to improve the evaluation efficiency on security audit. We have merged the security audit guidelines of NCA and KISA, and developed a quantified evaluation scheme. We have proved the validity of this model by interviews with experts and by case studies.

• Journal of Communications and Networks
• /
• 제11권6호
• /
• pp.634-644
• /
• 2009

A diversity of wireless networks, with rapidly evolving wireless technology, are currently in service. Due to their innate physical layer vulnerability, wireless networks require enhanced security components. WLAN, WiBro, and UMTS have defined proper security components that meet standard security requirements. Extensive research has been conducted to enhance the security of individual wireless platforms, and we now have meaningful results at hand. However, with the advent of ubiquitous service, new horizontal platform service models with vertical crosslayer security are expected to be proposed. Research on synchronized security service and interoperability in a heterogeneous environment must be conducted. In heterogeneous environments, to design the balanced security components, quantitative evaluation model of security policy in wireless networks is required. To design appropriate evaluation method of security policies in heterogeneous wireless networks, we formalize the security properties in wireless networks. As the benefit of security protocols is indicated by the quality of protection (QoP), we improve the QoP model and evaluate hybrid security policy in heterogeneous wireless networks by applying to the QoP model. Deriving relative indicators from the positive impact of security points, and using these indicators to quantify a total reward function, this paper will help to assure the appropriate benchmark for combined security components in wireless networks.

• 한국경영과학회:학술대회논문집
• /
• 한국경영과학회 2006년도 추계학술대회
• /
• pp.467-481
• /
• 2006

In the era of the Internet and ubiquitous computing, IS users are still facing a variety of threats. Therefore, a need of more tightened information security service increases unprecedentedly. In this sense, this study is aimed at proposing a new research model in which IT assets (i.e., network, system, and information influence) and Information Security Service (i.e., confidentiality, integrity, nonrepudiation, authentication) affect information security qualty positively, leading to users' satisfaction eventually To prove the validity of the proposed research model, PLS analysis is applied with valid 177 questionnaires. Results reveal that both IT assets and Information Security Service influence informations security quality positively, and user satisfaction as well. From the results, it can be concluded that Korean government's recent orchestrated efforts to boost the IT assets and Information Security Service helped great improve the information security quality and user satisfaction.

• 정보보호학회논문지
• /
• 제27권5호
• /
• pp.1217-1232
• /
• 2017

웹사이트는 주소, 연락처 등의 개인정보를 포함하고 있어 보안에 대한 주의가 요구된다. 본 연구는 개인정보를 보유하고 있는 웹사이트에서 사용자의 보안인식이 웹사이트 품질요소와 신뢰, 정보품질과 서비스가치 간의 관계에 어떤 조절효과를 미치는지 알아보는 연구이다. 중고등학교 학생 및 학부모 635명을 대상으로 설문을 실시한 결과, 사용성을 제외한 웹사이트 품질요소는 웹사이트 신뢰에 긍정적인 영향을 주었다. 웹사이트 정보품질은 서비스가치에 긍정적인 영향을 미쳤으며 서비스가치는 신뢰에도 영향을 주는 것으로 나타났다. 웹사이트 보안인식은 정보품질과 서비스가치의 관계에서 조절효과가 있는 것으로 밝혀졌다. 본 연구 결과는 사용자들이 보안수준이 낮은 웹사이트를 지속적으로 사용하지 않는다는 것을 의미한다. 본 연구 결과를 바탕으로 웹사이트 이해관계자들을 위한 이론적, 실무적 시사점을 제시하였다.

• 디지털융복합연구
• /
• 제13권10호
• /
• pp.81-98
• /
• 2015

본 연구는 국내 외국인 카지노 이용자를 위한 카지노 정보시스템의 성과요인을 파악하고, 이들 요인들이 조직 신뢰와 직무만족에 영향을 미치는 인과관계를 실증적으로 검증하여, 카지노 정보시스템의 발전방안을 제시하고자 한다. 연구결과 첫째, 정보 품질은 보안 신뢰에 유의수준에서 채택되는 것으로 나타났으나, 직무 만족에는 유의수준에서 채택되지 않는 것으로 나타났다. 둘째, 시스템 품질은 보안신뢰에 유의수준에서 채택되는 것으로 나타났으나, 직무 만족에는 유의수준에서 채택되지 않는 것으로 나타났다. 셋째, 서비스 품질은 보안 신뢰와 직무 만족에 유의수준에서 채택되는 것으로 나타났다. 넷째, 보안신뢰는 직무만족에 유의수준에서 채택되는 것으로 나타났다. 이를 통해 정보 품질, 시스템 품질, 서비스 품질이 보안 신뢰와 직무 만족에 영향을 미치는지 확인이 되었다.