• Title/Summary/Keyword: Policy Enforcement

Search Result 399, Processing Time 0.025 seconds

A Policy-based Secure Framework for Constructing Secure Networking (안전한 네트워크 구성을 위한 정책기반 보안 프레임워크)

  • 박상길;장종수;손승원;노봉남
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.27 no.8C
    • /
    • pp.748-757
    • /
    • 2002
  • Cyber-terror trials are increased in nowadays and these attacks are commonly using security vulnerability and information gathering method by variable services grew by the continuous development of Internet Technology. IDS's application environment is affected by this increasing Cyber Terror. General Network based IDS detects intrusion by signature based Intrusion Detection module about inflowing packet through network devices. Up to now security in network is commonly secure host, an regional issue adopted in special security system but these system is vulnerable intrusion about the attack in globally connected Internet systems. Security mechanism should be produced to expand the security in whole networks. In this paper, we analyzer the DARPA's program and study Infusion Detection related Technology. We design policy security framework for policy enforcing in whole network and look at the modules's function. Enforcement of security policy is acted by Intrusion Detection system on gateway system which is located in network packet's inflow point. Additional security policy is operated on-line. We can design and execute central security policy in managed domain in this method.

Study of the Introduction of a Nanomaterials Regulatory Policy for Product Safety (제품안전관리를 위한 나노물질 규제정책 도입평가 연구)

  • Suh, Jungdae
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.15 no.8
    • /
    • pp.4987-4998
    • /
    • 2014
  • Recently, the use of nanotechnology in products is constantly expanding, and the problems on human health hazard has emerged as a major issue. A nanomaterials regulatory policy on the products is urgently required. This study analyzed the introduction of regulatory policies of nanomaterials contained in industrial products. In this study, the AHP (Analytic Hierarchy Process) method was applied and three regulatory policies were evaluated to analyze the validity of the introduction of a nanomaterials regulatory policy. To select the optimal regulatory policy, the policy evaluation criteria were set as enforcement (effectiveness), economics, acceptability, and protection. For the regulatory policies, self-regulation, product labelling, and enforced registration were introduced and evaluated as the regulatory policies, and product labelling was selected as the optimal regulatory policy.

An Access Control Method considering Semantic Context for Privacy-preserving (개인정보 보호를 위한 의미적 상황을 반영하는 접근제어 방식)

  • Kang, Woo-Jun
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.15 no.1
    • /
    • pp.1-14
    • /
    • 2015
  • To conform to new emerging computing paradigm, various researches and challenges are being done. New information technologies make easy to access and acquire information in various ways. In other side, however, it also makes illegal access more powerful and various threat to system security. In this paper, we suggest a new extended access control method that make it possible to conform to security policies enforcement even with discrepancy between policy based constraints rules and query based constraints rules, based on their semantic information. New method is to derive security policy rules using context tree structure and to control the exceed granting of privileges through the degree of the semantic discrepancy. In addition, we illustrate prototype system architecture and make performance comparison with existing access control methods.

Performance Improvements through Policy Reorganization in SELinux (SELinux의 정책 재구성을 통한 성능 개선)

  • Ko, Jae-Yong;Choi, Jeong-In;Cho, Kyung-Yeon;Lee, Cheol-Hoon
    • The Journal of the Korea Contents Association
    • /
    • v.17 no.4
    • /
    • pp.307-319
    • /
    • 2017
  • SELinux is known as a secure operating system that is easily accessible to users due to the popularization of Linux, and is applied to various security operating system references deployed on systems such as embedded systems and servers. However, if SELinux is applied without considering the performance overhead of activating the SELinux kernel module, the performance of the entire system may be degraded. In this paper, we describe the factors directly affecting the performance inside the SELinux kernel and show that it is possible to improve performance by simply reorganizing the policy without changing the SELinux kernel. This can be used as a reference when security administrators or developers apply SELinux.

Analysis of Power Supply Cost According to Nuclear and Renewable Energy Policies (원전 및 신재생에너지 정책에 따른 전력공급비용 분석)

  • Woo, Pil Sung;Kim, Kang-won;Hwang, Soon-hyun;Kim, Balho H.
    • The Transactions of The Korean Institute of Electrical Engineers
    • /
    • v.67 no.1
    • /
    • pp.16-21
    • /
    • 2018
  • As a result of the Fukushima disaster and climate change due to excessive greenhouse gases, international energy affairs are currently focused on establishing safe and environment-friendly policies. To achieve this, Republic of Korea has established a plan for environment-friendly energy supplies. It is expected that policy enforcement will be accompanied by an increase in energy supply costs. An analysis of energy supply costs is necessary before the establishment of any national energy policy. This paper analyzes and compares the energy supply costs accompanying environmental and nuclear energy policies, based on the Korean National Energy Master Plan and the Basic Plan for Long-Term Electricity Supply and Demand, in order to understand the implications of these national energy policies.

Trusted Information Sharing Model in Collaborative Systems (협업 환경 내 신뢰할수 있는 정보 공유 모델)

  • Hong, Seng-Phil;Kim, Jae-Hyoun
    • Journal of Internet Computing and Services
    • /
    • v.8 no.1
    • /
    • pp.99-113
    • /
    • 2007
  • In the rapidly changing e-business environment, organizations need to share information, process business transactions, and enhance collaborations with relevant entities by taking advantage of the various technologies. However, there are always the security issues that need to be handled in order for the e-business operations to be run efficiently. In this research, we suggest the new security authorization model for safety flexible supporting the needs of e-business (e-marketplace) in an organization. This proposed model provides the scalable of access control policy among multi-domains, and preservation of flexible authorization management in distributed system environments. For servers to take the access control policy and enforcement decisions, we also describe the feasible authorization architecture is concerned with how they might seek advice and guideline from formal access control model.

  • PDF

Setting a Direction for United States Water Policy

  • Reid, Kenneth D.;Engberg, Richard A.
    • Proceedings of the Korea Water Resources Association Conference
    • /
    • 2010.05a
    • /
    • pp.121-121
    • /
    • 2010
  • The water resources of the United States are increasingly at risk and the nation's water policy is in serious difficulty. Water resources protection laws primarily passed since 1950 often contradict water resources development laws passed before 1950. These contradictions complicate efficient and effective responses to the nation's water resources challenges including climate change, our aging infrastructures, changing population dynamics, drought, floods, wetlands and aquatic species loss, ecosystem restoration and many others. In addition, water law and policy determination, management and enforcement are so broadly distributed between, local, state and federal responsibilities that effective responses again are difficult. For example, at the national level alone, more than a dozen federal agencies have water resources responsibilities including resource development, resource assessment, and resource protection. They are presided over by six cabinet (Ministerial) departments, at least 13 congressional (parliamentarian) committees and 23 subcommittees, and are funded by five appropriations subcommittees. Lastly, good science and the public accountability associated with it are often overshadowed by political considerations at local, state and federal levels. The United States approach to solving water resources challenges is ad hoc - we address problems as they appear or as they merit political support rather than using good science to address our long term water resources needs.

  • PDF

Prevention Policies for Money Laundering through Capital Market Instruments: The Case of Indonesia

  • BINTORO, Sutarno;SJAMSUDDIN, Sjamsiar;PRATIWI, Ratih Nur;HERMAWAN, Hermawan
    • The Journal of Asian Finance, Economics and Business
    • /
    • v.8 no.2
    • /
    • pp.1269-1275
    • /
    • 2021
  • The phenomenon of money laundering through capital market instruments and various investment instruments in it is a challenge for law enforcement officials, particularly the Corruption Eradication Commission (KPK) in investigating money laundering crimes originating from corruption. This study aims to analyze comprehensively about: (1) implementation of policies on prevention and eradication of money laundering at the KPK in the context of handling money laundering on the capital market; and (2) an effective model for implementing policies to prevent and eradicate money laundering in the KPK in the context of handling money laundering on the capital market. By using a qualitative approach and Interactive Model analysis from Miles and Huberman, it was concluded that the results of the implementation of the policy of preventing and eradicating money laundering at the Corruption Eradication Commission in the context of handling money laundering crimes in the capital market had a positive impact on society, individuals and groups. The theoretical implications of the results of this study are related to the content of policy that is still relevant but for the context of implementation it needs to be refined or reconstructed by adding three elements, namely: communication, monitoring, and evaluation and security.

The Evolution of Korea's Basic Acts on Science and Technology and their Characteristics

  • Lee, Changyul;Lee, Elly Hyanghee;Kim, Seongsoo
    • Asian Journal of Innovation and Policy
    • /
    • v.10 no.3
    • /
    • pp.355-379
    • /
    • 2021
  • This study examined the evolution of S&T Basic Acts in Korea from the Science and Technology Promotion Act (1967) through the Special Act on STI (1997) to the Framework Act on Science and Technology (2001) in the following aspects: 1) comprehensive plans, 2) coordination mechanisms for S&T policies, 3) enforcement of R&D programs and performance diffusion, 4) promotion of human resources, 5) and S&T investment and budgeting. Before the Framework Act on S&T was enacted in 2001, critical issues were found in establishing S&T master plans, promotion of R&D programs, comprehensive coordination mechanisms, and R&D budgeting. The three Basic Acts have expanded the scope of regulation over time to cover the entire cycle of the S&T process. They concern a wide range of issues, including creating a basis for scientific and technological development, S&T promotion, disseminating and commercializing research outcomes, and preventing adverse effects from science and technology. The content of the Basic Acts has evolved in response to changes in the political, economic, and social environment of Korean industry during the past five decades.

A Study on the Policy Tasks for the Development of National Fire Service - Redesigning Institutional and Organizational Improvement for the Establishment of the National Fire Service Agency - (한국소방발전을 위한 정책과제 연구 - 소방청 신설에 대응하는 제도·조직개선 구상 -)

  • Choi, Byoung-Hahk;Kim, Hak-Soo
    • The Korean Journal of Emergency Medical Services
    • /
    • v.6 no.1
    • /
    • pp.185-197
    • /
    • 2002
  • Today, the basic problem of functional safe management of Korean Disaster Control system was separately administrated 33 acts that are relating to safe management in 13 ministries. Because of the facts that the fire service is not provided practically, the control system and risk management for safe administration are not operated, the information can not be shared with each other, and the various laws have the lacks of linkage, the National Safe System was appeared unsteady. The roles and functions of fire service have started with restriction to operate structurally and institutionally, which operational structure of fire service is becoming weak. As a result, the federal and local fire organizations have not reached yet to the institutionalization and the local fire service agencies have bias with the task regarding the fire service because of the relation between organizational structure and the local fire agency. With the enforcement of the federal and local fire system, professionality and autonomy for making policy, and dealing with changes of fire service positively, the national fire service on the policy performance can be established. Promotion of research and development and education training to strengthen innovation in technology and competition in fire industry will contribute to the firmly establishment of control system to prevent from fire, flood, terror and national disaster. This article proposed that (a) the established law and administration, agency are required efforts to effectively operate fire service system; (b) the national fire service agency, national college of fire, national institute of science fire, and national fire service hospital should be early established to make firmly policy to operate effectively and practically. These kinds of innovational acts are known the best ways of operating solid policy of national fire service system.

  • PDF