• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.20 no.6
• /
• pp.127-146
• /
• 2010

This report has continuously improved in Information Security Level of Information Communication Service Companies which are applicable to Information Security Safety Inspection System. Also, it presents a decided methodology after verified propriety and considered the pre-research or expropriation by being developed the way of Information Security Safety Result Measurement. Management territory weighted value was established and it was given according to the point of view and the strategy target and the and outcome index to consider overall to a measurement item. Accordingly, an outome to the Information Security Check Service is analyzed by this paper and measurement model and oucome analysis methodology are shown with this, and gives help to analyze an outcome. Also it make sure the the substantial information security check service will be accomplished, prevent a maintenance accident beforehand and improve an enterprise outcome independently by institutional system performance securement and enterprise.g corporate performance.

• Convergence Security Journal
• /
• v.14 no.2
• /
• pp.11-16
• /
• 2014

Recently, request of IPTV was increase. It is a multi-screen service by used TV, PC, and smart-phones. Especially, IPTV and smart-phone linked multi-screen service are very growth by user's recommends. Now, IPTV have a security service partial and multi-screen service. But smart-phone and multi-screen service don't have security service. And authentication service for smart-phone and IPTV linked multi-screen service is don't.. Therefore, We propose that user authentication system for multi-screen service with IPTV and multi-device linked authentcation services. Our proposed system base on Kerberos, so proposal is easy and fast about user authentication. This have simple procedures and more secure services against of PKI. So, our system can support secure multi-screen services against various security threats in multi-screen environments.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.21 no.1
• /
• pp.177-186
• /
• 2011

Mobile services which are applied PC performance and mobile characteristics are increased with spread of the smartphone. Recently, mobile cloud service is getting the spotlight as a solution of mobile service problems that mobile device is lack of memory, computing power and storage and mobile services are subordinate to a particular mobile device platform. However, mobile cloud service has more potential security threats by the threat inheritance of mobile service, wireless network and cloud computing service. Therefore, security threats of mobile cloud service has to be removed in order to deploy secure mobile cloud services and user and manager should be able to respond appropriately in the event of threat. In this paper, We define mobile cloud service threats by threat analysis of mobile device, wireless network and cloud computing and we propose mobile cloud service countermeasures in order to respond mobile cloud service threats and threat scenarios in order to respond and predict to potential mobile cloud service threats.

• Convergence Security Journal
• /
• v.15 no.1
• /
• pp.37-47
• /
• 2015

This study aims at exploring effects of airport special guard's security service value on customers' satisfaction and customers' loyalty. Users of airport facilities located in Incheon were selected as the population in Jun. 2013 and the sample was extracted using cluster random sampling and 460 people were used for a final analysis. The questionnaire used for the study was composed of total 22 items including 6 items of socio-demographical characteristics, 6 items of security service value, 6 items of customers' satisfaction and 4 items of customers' loyalty etc. and using SPSSWIN 18.0, factor analysis, reliability analysis, multiple regression analysis, path analysis etc. were used. The credibility of the questionnaire was indicated to be over ${\alpha}$=.809. The findings are as follows. First, security service value has an effect on customers' satisfaction. if monetary value is enhanced, satisfaction with service composition is high. second, security service value has an effect on customers' loyalty. If monetary value and time value are enhanced, will of continuous use and will of recommendation of others are high. Third, customers' satisfaction has an effect on customers' loyalty. If satisfaction with service composition and satisfaction with use decision are increased, will of continuous use and will of recommendation of others are high. Fourth, airport special guard's security service value has a direct and indirect effect on customers' satisfaction and customers' loyalty. That is, it means customers' satisfaction is an important variable to mediate security service value and customers' loyalty.

• Informatization Policy
• /
• v.24 no.2
• /
• pp.20-42
• /
• 2017

In this paper, we focus on classification of security threats and definitions of security requirements for Internet banking service. Threats are classified based on the past and potential incidents, based upon which we will be able to propose security requirements. In order to identify security threats, the structure of the Internet banking service is classified into three sections - the financial institutions, the network, and the user-terminal - and we defined arising threats for each section. We focused the analysis especially on the user-terminal section, which is relatively vulnerable, causing difficulties in securing stability of the service as a whole. The analyzed security threats are expected to serve the foundation for safe configuration of various Internet banking services.

• Journal of Korea Society of Digital Industry and Information Management
• /
• v.11 no.1
• /
• pp.69-78
• /
• 2015

Internet of Things(IoT) is electronic devices and household appliances use wireless sensor network in environment of high speed wireless network and LTE mobile service. The combination of the development of Internet and wireless network led to development of new forms of service such as electronic devices and household appliances can connect to the Internet through various sensors and online servers such as a Home Network. Even though Internet of Things is useful, there are problems in Internet of Things. In environment of Internet of Things, information leakage could happens by illegal eavesdropping and spoofing. Also illegal devices of wireless communication interference can cause interfere in Internet of things service, physical damage and denial of service by modulation of data and sensor. In this thesis, it will analyze security threats and security vulnerability in environment of mobile services and smart household appliances, then it will suggest plan. To solve security issues, it is important that IT and RFID sensor related companies realize importance of security environment rather than focus on making profit. It is important to develop the standardized security model that applies to the Internet of Things by security-related packages, standard certification system and strong encrypted authentication.

• Journal of Internet Computing and Services
• /
• v.8 no.6
• /
• pp.29-42
• /
• 2007

This paper describes a security object designed to support a dynamic security service for application services in u-healthcare computing environments in which domains are used to object groups for specifying security policies, In particular, we focus on security object for distributed framework support for u-healthcare including policy, role for security and operations use to access control. And then, by using the DPD-Tool. we showed the access right grant procedure of objects which are server programs, the developing process of client program. Also, we verified the executablility of security service supporting by distributed framework support for u-healthcare use to the mobile monitoring application developing procedure implemented through DPD-Tools.

• Knowledge Management Research
• /
• v.21 no.3
• /
• pp.197-213
• /
• 2020

This study analyzed the impact of information security service company certification on financial performance. The purpose of this study was to analyze the effect of the "Information Security Service Certification Company" system from a financial point of view for information security service certified & non-certified companies, and listed & unlisted companies. From a financial point of view, performance analysis was conducted using two-way ANOVA on sales, operating profit, and profit rate. This study verified whether there is a difference in management performance between an information security service certified company and an uncertified company. In the financial performance indicators of sales, operating profit, and profit rate, the information security service certification system showed an impact on financial performance because the information security service certification company showed better management performance than the uncertified company. The implications of this study are that the empirical performance analysis from the financial point of view of the information security service certified company system can be used as a basis for negative regulatory policies to revitalize the information security industry in the future, contributing to the growth of information security companies with excellent growth potential.

• Korean Security Journal
• /
• no.28
• /
• pp.7-31
• /
• 2011

The purpose of this study was to examine the relationship of the psychological empowerment of security guards to their service orientation and organizational performance. The subjects in this study were 300 security guards who were selected by purposive sampling from the population that consisted of the workers in private security agencies located in the cities of Chungan and Ahsan in 2011. After a survey was conducted, the answer sheets from 271 respondents were analyzed. The statistical package SPSS WIN 18.0 was employed to make a factor analysis, reliability analysis, multiple regression analysis and path analysis. The findings of the study were as follows: First, psychological empowerment affected service orientation. Better meaning and better self-determination led to better service human resources management, better service leadership and better service encounter management. Second, psychological empowerment exerted an influence on organizational performance. Stronger impact and better meaning led to stronger organizational commitment, higher job satisfaction and better performance. Third, service orientation had an impact on organizational performance. Better service human resources management, better service leadership and better service encounter management were followed by stronger organizational commitment, better job satisfaction and higher performance. Fourth, psychological empowerment exercised a firsthand and secondhand influence on service orientation and organizational performance. Given the findings of the study, managers of security agencies should keep in mind the unique working environments of employees, and they should empower employees to show what they can do in consideration of their changing working environments and let them assume the responsibility for their own job performance. That will encourage them to provide better service for customers, which will serve, in turn, to bolster the organizational performance.

• Proceedings of the KIEE Conference
• /
• 2002.11c
• /
• pp.585-588
• /
• 2002

Grid provides integral ing system that enables to use distributed computing resource and services as adapts traditional infrastructures to overcome the distributed computing environments. But, computing today is moving away from a restriction of the desktop, becoming diffused into our surrounding and onto our personal digital devices. In such mobile computing environments, users expects to access resource and services at any time from anywhere in such Mobile-Grid computing. This expectation results security issues, since the computing environments is expanded. This paper describes the security challenges in Mobile-Grid computing, explaining why traditional security mechanism fail to meet the demands of these environments. This paper describes policy driven security mechanism enabled entity to use service and data in trust Mobile-Grid environments and a set of security service module that need to be realized in the Mobile-Grid security architecture presents a set of use pattern that show hew these modules can be used for billing service in a secure Mobile-Grid environments.