• 융합보안논문지
• /
• 제4권2호
• /
• pp.71-75
• /
• 2004

The Common Criteria (CC) philosophy is to provide assurance based upon an evaluation of the IT product or system that is to be trusted. Evaluation has been the traditional means of providing assurance. It is essential that not only the customer' srequirements for software functionality should be satisfied but also the security requirements imposed on the software development should be effectively analyzed and implemented in contributing to the security objectives of customer's requirements. Unless suitable requirements are established at the start of the software development process, the re suiting end product, however well engineered, may not meet the objectives of its anticipated consumers. By the security evaluation, customer can sure about the quality of the products or sys tems they will buy and operate. In this paper, we propose a selection guide for If products by show ing relationship between security engineering and security evaluation and make help user and customer select appropriate products or system.

• 시큐리티연구
• /
• 제1호
• /
• pp.17-50
• /
• 1997

I study on the security organization for the chief of state in North and South Korea. The paper, purporting to analyze security system in comparative prospectives, comprise four chapters. Chapter I Which sets out purpose, scope and method, is followed by Chapter II , dealing largely with the power structure on The Socialist Constitution of Democratic People's Republic of Korea, the protection organization and security activities for the chief of state in North Korea. Chapter III concerns the security environment - terrorist groups, firearms, explosives, suspects, movements of hostile countries and orthers - and the protection organization on The Presidential Security Service for the president in South Korea, culminating in projection of certain problem area. It is followed by concluding observation made in Chapter IV. To be operated security systems effectively, these need to be regulated according to a protective scale, function, authority of a existing.

• 통상정보연구
• /
• 제12권1호
• /
• pp.375-400
• /
• 2010

The recent financial crisis is not yet solved. Although economic conditions are improving, the real-economy is still frozen, and considering Korea's reality of relying heavily on external trade, hardships in the global economy fall entirely upon us. In particular, since developed nations like United States and the EU have intensified logistics security since the terror attacks on September 11, 2001 and can use it as a tool for protective trade, Korea with a high dependency rate on foreign trade needs to actively cope with changes to the trade paradigm in logistics security. This paper uses DAGMAR(Defining Goals for Measured Advertising Results), a model developed by the Association of National Advertisers(ANA) to measure the results of a communication campaign as its basic model, after partially modifying it to fit the paper's objective of conducting a more systematic analysis of awareness levels in Korean export enterprise regarding logistics security.

• 한국콘텐츠학회:학술대회논문집
• /
• 한국콘텐츠학회 2009년도 춘계 종합학술대회 논문집
• /
• pp.510-514
• /
• 2009

이 프로그램은 Visual C++로 개발되었으며, 윈도우 운영체제내에서 파일 및 디렉토리 보안 기능을 가지고 있다. 파일 및 디렉토리 보안은 암호화/복호화 작업으로 이루어지며 파일 보안은 키 값과 라운드수를 알아야 하고, 디렉토리 보안은 비밀번호를 알아야만 복호화 할 수 있도록 설계되었다. 또한 ECB, CBC 연산방식과 3DES, SEED 알고리즘방식을 지원하며, 암호화 시 .de0 이라는 실행할 수 없는 확장자의 파일로 만들어지면서 이중보안을 할 수 있도록 개발되었다.

• Asia pacific journal of information systems
• /
• 제24권4호
• /
• pp.531-557
• /
• 2014

Although the area of information security planning and management has gained an increased attention, not much discussion was available on the role and the impact of the board members towards a firm's security management and governance decisions. In this research, we draw on corporate governance and the organizational demography literature to conduct an exploratory empirical study on the association between the board structure of a firm and the possibility of information security breaches. Our results show that the board size, the average age/tenure and the heterogeneity of age could reduce the possibility of security breaches while the proportion of independent directors and the heterogeneity of tenure could increase it. Our findings shed lights on the important role played by the board when managing information security risks in organizations.

• 한국콘텐츠학회논문지
• /
• 제17권4호
• /
• pp.596-605
• /
• 2017

최근 정보보안을 전공하는 대학생과 보안 업무를 담당하는 내부자가 사이버범죄의 유혹에 넘어가 범죄에 가담하는 사건이 잇따라 발생함에 따라 컴퓨터 및 보안전문가들의 직업윤리의식 부재가 심각하다는 지적이 나오고 있다. 본 논문에서는 정보보안을 전공하는 대학생들을 대상으로 보안윤리에 대한 인식과 교육 실태를 조사하여 분석하고, 인성과 자질을 갖춘 인재양성을 위한 보안윤리 교육 방안을 고찰하였다. 정보화 사회 기반이 확대될수록 직업윤리가 더욱 중요해지고 있는 시점에서 정보보안을 전공하는 대학생들의 보안윤리에 대한 인식과 교육, 그리고 정보보안 전문가의 일탈행위에 대한 인식 등 윤리성과 직업의식이 미흡한 것으로 확인되었다. 이러한 문제를 해결하기 위한 방안으로 제안한 정보보안 전공 대학생들의 보안윤리를 제고하는 교육 방안을 통해 소명의식을 갖춘 보안전문가의 양성이 가능할 것으로 기대된다. 논문에서 제안한 보안윤리 교육체계에 따라 교육을 받은 그룹에서 보안윤리 의식이 현저하게 개선된 것으로 분석되었다.

• 한국사이버테러정보전학회:학술대회논문집
• /
• 한국사이버테러정보전학회 2004년도 제1회 춘계학술발표대회
• /
• pp.141-144
• /
• 2004

The Common Criteria (CC) philosophy is to provide assurance based upon an evaluation of the IT product or system that is to be trusted. Evaluation has been the traditional means of providing assurance. It is essential that not only the customer' srequirements for software functionality should be satisfied but also the security requirements imposed on the software development should be effectively analyzed and implemented in contributing to the security objectives of customer's requirements. Unless suitable requirements are established at the start of the software development process, the resulting end product, however well engineered, may not meet the objectives of its anticipated consumers. By the security evaluation, customer can sure about the quality of the products or systems they will buy and operate. In this paper, we propose a selection guide for If products by showing relationship between security engineering and security evaluation and make help user and customer select appropriate products or system.

• 융합보안논문지
• /
• 제16권1호
• /
• pp.39-48
• /
• 2016

경비업법이 제정된지 40년이 되었다. 그동안 시큐리티정책에 많은 변화가 있었으며 시큐리티 환경도 급변하였다. 경찰과 더불어 생활안전의 한 축을 담당하는 민간경비를 활성화시키고 지원하는 방향에서 전면적인 개정을 할 때가 되었다. 첫째, 시큐리티 환경를 변화를 반영하여 경비업법의 법명과 용어를 재정립할 필요가 있다. 즉, 시큐리티 컨설팅, 플랜너, 민간조사, 융합보안 등을 수용할 수 있도록 적절한 경비업무 범위 등을 확대할 필요가 있다. 둘째, 경비업법령의 오류를 시정하여 개정할 필요가 있다. 셋째, 경비업법령 중에서 불합리한 내용을 지닌 조항을 적절하게 개정할 필요가 있다. 넷째, 경비지도사의 선발, 교육, 선임 중에서 불합리한 문제를 시정하는 방향으로 개정할 필요가 있다.

• 시큐리티연구
• /
• 제1호
• /
• pp.51-71
• /
• 1997

The private security has forty years history and it seems not to have points in exteriors. But it has many points in interior. If these points improved, our private security can develop. I discuss the development of the private security in Chapter 2 and the points in Chapter 3, and conclude in the last Chapter. If we follow the precepts, and develop a good points and improve a week points, the future of our private security will be better.

• 시큐리티연구
• /
• 제8호
• /
• pp.197-218
• /
• 2004

This study has been conducted to provide data that contribute to increasing efficiency of 'Private Security', which is cooperated by customer, security companies and the police which carried out 'Public Law Enforcement' and controls security companies. To reach this purpose, we investigated the status of the 'Security Alarm Systems' operated by security service companied in Korea, analyzed arising problems, considered the polices for improving the operational quality. 'Electronic Security Systems' will increase working efficiency in performing 'Private Security'. There can be no two opinions on this matter. Therefore, it can be supposed that the improvement of operational quality of 'Electronic Security System' is an important factor to accomplish security services. 'Security Alarm System' is one of the 'Electronic Security System'. The critical problems in operating 'Security Alarm system' are unnecessary response by false alarm and nuisance alarm. To reduce the problems, it is suggested that security specialist officially licensed should improve security planning, installation and maintenance, and the 'Alarm Verification System' should be introduced with appropriate facilities.