• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.12 no.10
• /
• pp.4995-5014
• /
• 2018

As the area covered by the CPS grows wider, agencies such as public institutions and critical infrastructure are collectively measuring and evaluating information security capabilities. Currently, these methods of measuring information security are a concrete method of recommendation in related standards. However, the security controls used in these methods are lacking in connectivity, causing silo effect. In order to solve this problem, there has been an attempt to study the information security management system in terms of maturity. However, to the best of our knowledge, no research has considered the specific definitions of each level that measures organizational security maturity or specific methods and criteria for constructing such levels. This study developed an information security maturity model that can measure and manage the information security capability of critical infrastructure based on information provided by an expert critical infrastructure information protection group. The proposed model is simulated using the thermal power sector in critical infrastructure of the Republic of Korea to confirm the possibility of its application to the field and derive core security processes and goals that constitute infrastructure security maturity. The findings will be useful for future research or practical application of infrastructure ISMSs.

• Asia pacific journal of information systems
• /
• v.8 no.3
• /
• pp.75-100
• /
• 1998

The paper empirically examines relationships among information infrastructure, competitive advantage of information technology, and corporate performance of small and medium manufacturing firms. Effects of competitive advantage of information technology on the linkage between information infrastructure and corporate performance are investigated. The fact that SME's (Small and Mediem-sized Enterprises) are having difficulties in building their own information infrastructure due to the limitation of capital investment, technology, and manpower is the main motive for the study. Research results confirm that information technology provides several traits of strategic advantages such as efficiency, threat, functionality, preemptiveness, and synergy and significantly contributes to corporate performance. But linkage between information infrastructure and competitive advantage of information technology is proved to be weak and this result suggests that systematic and effective information strategy or planning is required to deliver expected advantages of information technology from information infrastructure investments. Also control effect of competitive advantage of information technology on information infrastructure-corporate performance linkage is not strongly recognized.

• Journal of Information Management
• /
• v.35 no.3
• /
• pp.1-28
• /
• 2004

The purpose of this paper is to suggest guidelines for building up an integrated information network(IIN) model that enable to enhance production, flow and use of knowledge and information. The IIN consists of five areas of key infrastructure, such as, education, R&D, labor market, school-industry cooperation, and lifelong education information infrastructure. Based on the analysis of current situations and problems of each information infrastructure, this paper raises variety of issues and solution for the IIN model. Directions for building up the IIN includes both information base infrastructure and information support infrastructure.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.31 no.4
• /
• pp.853-862
• /
• 2021

Today, disturbance and paralysis of information and communication infrastructure by electronic infringement of national infrastructure is emerging as a threat. Accordingly, the government regularly implements the vulnerability analysis and evaluation system of major information and communication infrastructure to protect the information system and control system of major infrastructure, and invests increased human and material resources every year to efficiently operate it. However, despite the government's efforts, as infringement accidents and attempts targeting national infrastructure continue to occur, the government's resource input to prepare the information protection foundation has little effect on the information protection activity result calculation, making the evaluation system not efficient. The question arises that it is not. Therefore, in this study, we use the DEA model to review the efficient operation of the vulnerability analysis and evaluation system for major information and communications infrastructure, and suggest improvement measures to enhance the level of information protection based on the analyzed results.

• International Commerce and Information Review
• /
• v.1 no.2
• /
• pp.167-181
• /
• 1999

In this research the levels of information infrastructure of selected forwarders were measured and analyzed a relationship with business performance. The selected forwarder was consisted of local forwarder group and foreign invested forwarder group. In this analysis the level of information infrastructure of foreign invested forwarder group was higher than local forwarder group, and accordingly their performance was found a difference. i. e. A positive significant relationship was found between the level of information infrastructure and forwarders' business performance by means of correlation analysis.

• Proceedings of the Korean Information Science Society Conference
• /
• 2011.06b
• /
• pp.25-28
• /
• 2011

최근 사이언스 컴퓨팅 분야에서 대용량 데이터가 발생하고 있고 컴퓨팅 자원들의 수요도 급증하고 있다. 이로 인해 클라우드 컴퓨팅 기술의 필요성이 중요시되고 있고 전 세계적으로 급속히 발전하고 있다. 천문 연구 분야에서 관측기기의 발전으로 대용량의 천문 데이터가 생산되고 있다. 이를 처리하기 위하여 다양한 클라우드 컴퓨팅 기술을 이용한 데이터 분석 환경이 요구되고 있다. 이러한 환경을 구축하기 위해서는 가상 인프라 자원을 효율적으로 관리할 수 있어야 한다. 현재 가상 인프라 자원을 관리하기 위해 오픈 소스를 개발하는 프로젝트들이 활발히 진행되고 있다. 본 논문에서는 오픈 소스인 Eucalyptus와 OpenNebula의 기능적인 측면을 크게 10가지로 분류하여 장단점을 비교 분석하였고 OpenNebula의 세 가지 특징인 중앙 집중화된 구조, live migration과 suspend/resume 기능, 커스터마이징 기능이 대용량 천문 응용 수행을 위한 환경을 구축하는데 반드시 필요하기 때문에 OpenNebula를 채택하였다. OpenNebula를 사용해 구축한 사이언스 클라우드 테스트베드는 NFS 서버의 별도 구성을 통한 성능 개선, 하이브리드 클라우드 컴퓨팅 환경 구축, B클래스 사설 네트워크 구성, GUI 기반 사이언스 클라우드 테스트베드 관리 및 모니터링 기능의 4가지 특징을 가지고 있다. 앞으로도 천문 연구자들에게 안정적인 서비스를 제공하기 위하여 관련 연구를 계속할 것이다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2005.11a
• /
• pp.961-964
• /
• 2005

디지털홈 서비스는 기존 PC에서 제공하던 서비스와 차별화된 서비스를 실용화 하지 못하고 있는 이유 중에 하나는 오프라인에서 제공하던 의료, 법률, 교육 등의 서비스를 가정에 맞게 직접 제공하고 있지 못하기 때문이다. 이를 위하여 본 논문에서는 온라인에서 의사, 변호사와 안전하게 거래할 수 있도록 국가자격 인증기반을 구축하고자 이에 필수적인 검증 가능한 온라인 자격증 발급을 위하여 기존 공인인증서에 자격필드를 추가하거나, 기존 공인인증서를 그대로 사용하거나, 별도의 자격인증서를 발급하는 등 세 가지 발급모델을 제시한다. 또한 이러한 세 가지 발급모델의 장단점을 비교 분석하여 향후 자격인증기반 구축할 때 선택할 수 있는 기준을 제시한다. 마지막으로 기 제시된 세 가지 발급 모델 중에 자격필드가 추가된 공인인증서를 이용하여 의료서비스(E-Health)를 받는 서비스 모델 시나리오를 제안하고자 한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.2
• /
• pp.347-363
• /
• 2024

As the number of cyberattacks against the National Critical Information Infrastructure (NCII) is steadily increasing, many countries are strengthening the protection of National Critical Information Infrastructure (NCII) through the enactment and revision of related policies and legal systems. Therefore, this paper selects countries such as the United States, the United Kingdom, Japan, Germany, and Australia, which have established National Critical Information Infrastructure (NCII) protection systems, and compares and analyzes the promotion system of each country's National Critical Information Infrastructure (NCII) protection policy. This paper compares the National Critical Information Infrastructure (NCII) protection system of each country with the cybersecurity system and analyzes the promotion structure. Based on the policy model theory, which is a modification of Allison's theory and Nakamura & Smallwood's theory, this paper analyzes the model of each country's promotion system from the perspective of policy-making and policy-execution. The United States, Japan, Germany, and Australia's policy-promotion model is a system-strengthening model in which both policy-making and policy-execution are organized around the protection of the National Critical Information Infrastructure (NCII), while the United Kingdom and South Korea's policy-promotion model is an execution-oriented model that focuses more on policy-execution.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.20 no.1
• /
• pp.103-109
• /
• 2016

The information security industry is technology-intensive, high value-added industries. South Korea's response has excellent ICT skills and experience and skills in a variety of cyber attacks, has become a benchmark in the world. However, the small size of the domestic information security company, supporting infrastructure is lacking. Domestic information security industry is the primary condition to activate the export. For the export of high value-added enterprise information security products and services, it is necessary the establishment of the domestic IT information security infrastructure of the industrial promotion is based overseas. Come to analyze the domestic information security industry, capital of this small, market reclamation of overseas expansion, information, manpower shortage was a problem. This fact, combined losses caused by cost-free period AS. Therefore, the study on information security in the infrastructure industry overseas bases is necessary. How to select and analyze the causes of infrastructure in selected overseas offices. By utilizing the infrastructure of overseas bases, can raise the added value of the products and services of the Information Security company, we can enable the export of small and medium Information Security company from overseas offices.

• International conference on construction engineering and project management
• /
• 2015.10a
• /
• pp.691-692
• /
• 2015

Several scholars in South Korea have predicted that maintenance costs of social infrastructure will sharply increase from the mid-2020s, and cause budgetary deficits among facilities management agencies. Interest in infrastructure asset management (IAM) is rising as a solution to such problem. In this study, an information system for asset valuation that reflects the salvage value and deferred cost of social infrastructure based on WBS (work breakdown structure) was developed in consideration of IAM. To reuse the construction cost information such as the acquisition cost, the interconnection between CBS (cost breakdown structure) and WBS was considered. Furthermore, asset valuation information was developed with XML schema to facilitate the exchange and reuse of the information among project participants.