• Title/Summary/Keyword: auditing

Search Result 322, Processing Time 0.027 seconds

A Study on Computer Security and Controls (Computer Security에 관한 소고 - 사고범죄예방을 중심으로 -)

  • 이종철
    • Journal of Korean Society of Industrial and Systems Engineering
    • /
    • v.4 no.4
    • /
    • pp.25-34
    • /
    • 1981
  • Recently there has been a marked increase in concern for security in computerized operations. The purposes of computer security controls are to protect against the unauthorized access to and modification of data processing resources, unauthorised access to and modification of data files and software, and the misuse of authorized activities. The controls relate to the physical security of the data processing department and of the areas within the data processing department : to the security of the data files, programs, and system software : and to the human interaction with the data files, programs, and system software. The controls that will be discussed in this paper include : I. Risk on the computer use. II. Methods of risk counter measure. III. Role of system auditing.

  • PDF

A Evaluation of Office Environment in Universal Design (유니버설 디자인 관점에서의 오피스환경 평가 연구)

  • 구아현;하미경
    • Proceedings of the Korean Institute of Interior Design Conference
    • /
    • 1999.04a
    • /
    • pp.49-52
    • /
    • 1999
  • The purpose of this research is providing the fundamental data for the effective workplace design, so that employees are not suffered from physical barrier. This research based on literature review. And then gain actual data by auditing buildings and data have been analyzed by percentage. The results and conclusions of research are the follow: In order to evaluate the law-abiding levels of office buildings, classifying the sources as the three levels. Just 44.2 percentage of building were marked on 'compliance' level. And also the 24% was 'not compliance' 31.8% was 'not accommodation'. The actual office building was out of the allowance of regulations so the regulations should be added both about new building and ready-built buildings.

  • PDF

A Evaluation of Office Environment in Universal Design-by related laws- (유니버설 디자인 관점에서의 업무시설환경평가연구-관련법규를 중심으로-)

  • 하미경;구아현
    • Korean Institute of Interior Design Journal
    • /
    • no.22
    • /
    • pp.117-122
    • /
    • 2000
  • The purpose of this research is to provide the fundamental information for the effective workplace design, so that employees are not suffered from physical barriers. This research based on literature review; and then gain actual data by auditing buildings and data have been analyzed by percentage. The results and conclusions of research are the follow : In order to evaluate the law-abiding levels of office buildings, classifying the sources as the three levels. Just 44.2 percentage of building were marked on 'compliance' level. And also the 24% was 'not compliance' 31.8% was 'not accommodation'. The actual office building was out of the allowance of regulations, so the regulations should be added both about new building and ready built buildings.

  • PDF

Efficient Scheduling for Salesperson Monitoring System (영업사원 관제시스템의 효율적인 경로 스케줄링)

  • Kim, Seung;Min, Yeong-Bin;Lee, Woo-Key;Bae, Hye-Rim
    • Journal of Korean Institute of Industrial Engineers
    • /
    • v.37 no.4
    • /
    • pp.382-389
    • /
    • 2011
  • Salesperson Monitoring System (SMS) is geographic based information system that supports business auditing, sales area coordinating and customer management for each salesperson. Conventional SMSs focus mainly on the monitoring or logging functions, i.e., a salesperson locating or moving trail tracking. However, the schedules have been planned by human planner, and they have rarely been managed with a software system like SMS. In this paper, a mixed integer programming model for a salesperson routing schedule is provided. Then, 2-phase Genetic Algorithm (GA) is proposed to make salesperson routing schedule. Experimental results show a validity of the proposed method.

A Suggestion for Effectiveness Measure and Improvements of Information System Auditing (정보시스템 감리 효과성 측청 및 향상 방안에 관한 연구)

  • Moon, Song-Chul;Kim, Hyun-Soo
    • 한국IT서비스학회:학술대회논문집
    • /
    • 2002.11a
    • /
    • pp.215-222
    • /
    • 2002
  • 정보시스템 감리와 관련된 기존 연구들은 감리와 관련된 이해관계자 집단 전체의 관점에서 포괄적으로 문제를 분석하지 못하고 한국전산원 감리인만을 대상으로 하거나, 또는 공기업 중심의 피감리인만을 대상으로 연구되어 왔다. 또한 감리 효과 향상을 위한 연구도 법적, 제도적 측면에서의 향상방안을 중심으로 수행되어 왔다. 본 연구는 감리효과성 측정과 향상 방안에 대하여 한국전산원과 민간 감리법인들의 감리인, 관공서 및 기업체의 감리의뢰인, 관공서 및 기업체소속의 피감리인, 기타 정보시스템 기술 (IT) 관련 업무에 종사 하는 전문가 등 4그룹을 대상으로 포괄적인 연구를 수행하였으며 감리 향상 방안도 법적, 제도적 측면의 향상 방안뿐만 아니라 감리인, 피감리인, 감리의뢰인 측면에서의 향상 방안을 포함하여 연구를 수행하였다.

  • PDF

Design of Access Control for Secure Linux OS and its Implementation (안전한 리눅스 운영체제를 위한 접근제어 설계 및 구현)

  • 고종국;두소영;은성경;김정녀
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2000.10a
    • /
    • pp.650-652
    • /
    • 2000
  • 본 논문은 최근에 그 수요가 증가하고 있는 리눅스를 기반으로 하여 안전한 운영체제의 설계 및 구현에 대하여 기술한다. 안전한 운영체제를 위해 사용되는 보안 기능들은 MAC(Mandatory Access Control), DAC(Discretionary Access Control), 그리고 SOP(Separate of privilege)과 같이 파일, 디렉토리, 그리고 디바이스와 같은 시스템 자원에 대한 접근을 제어하는 기능과 감사 추적(Auditing)기능, 그리고 사용자 인증기능 등이 있다. 접근제어란 컴퓨터자원, 통신자원, 정보자원 등에 대한 허가되지 않는 접근을 막는 것이다 본 논문에서는 리눅스 운영체제의 보안을 위해 필요한 접근 제어 기능과 다중 레벨의 사용자 인증기능의 설계 및 구현에 대해 기술한다. 또한 접근 제어기능 구현은 국제 표준화인 OSIX1003.le을 기준으로 하였다.

  • PDF

Design and Implementation of an Auditing Module for the Efficient Government Accounting Audit (효율적인 정부회계감사를 위한 감사모듈의 설계와 구현)

  • Park Seok-Gu;Cho Eun-Ae
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2005.11b
    • /
    • pp.592-594
    • /
    • 2005
  • 국가회계 전산화는 자료의 가시성(visibility)을 약화시키고 내부통제의 위험을 증가시키는 등 감사환경을 변화시키고 있다. 정부재정규모의 증가로 거래건수가 증가하고, 결산기간 단축, 자금 전자이체, 정부구매 카드 도입 등 정보화에 따라 회계처리방법이 변화되고 있어 이에 대응할 수 있는 전산감사기법 개발이 필요하다. 전산감사기법은 감사자의 감사능력을 향상시켜 생산성과 감사품질을 향상시키고, 내부통제 확인, 회계부정에 대한 예방기능을 가지고 있다. 본 논문에서는 외부감사인(감사원)이 회계감사에 활용할 수 있도록 국가재정정보시스템 등 정부회계 관련 정보시스템으로부터 수집할 수 있는 자료를 대상으로 회계 감사 시나리오작성 및 검증, 데이터수집, 전산분석기법의 적용을 통한 감사모듈 개발방법을 제안한다.

  • PDF

Improving the Safety Regulation For Self Contained Breathing Apparatus (특정소방대상물의 공기호흡기 안전규제 개선방안)

  • Lee, Sang-Pal
    • Fire Science and Engineering
    • /
    • v.24 no.3
    • /
    • pp.45-51
    • /
    • 2010
  • The objective of this study to analyse the cause and pattern of failing to use in Self Contained Breathing Apparatus using by government regulation for producer and client. Regulation for producer is related to legal and institution of safety inspectiontest of SCBA. Rregulation for client is preventive maintenance. Improving fail in use of SCBA are following. First, expansion of ad hoc collection inspection and safety checking is required. Second, the strict application of the law for monitoring and auditing disposal procedure in low performance SCBA is required.

A Platform for RFID Security and Privacy Administration

  • Rieback, Melanie R.;Gaydadjiev, Georgi N.;Crispo, Bruno;Hofman, Rutger F.H.;Tanenbaum, Andrew S.
    • 한국정보컨버전스학회:학술대회논문집
    • /
    • 2008.06a
    • /
    • pp.75-86
    • /
    • 2008
  • This paper presents the design, implementation, and evaluation of the RFID Guardian, the first-ever unified platform for RFID security and privacy administration. The RFID Guardian resembles an "RFID firewall", enabling individuals to monitor and control access to their RFID tags by combining a standard-issue RFID reader with unique RFID tag emulation capabilities. Our system provides a platform for coordinated usage of RFID security mechanisms, offering fine-grained control over RFID-based auditing, key management, access control, and authentication capabilities. We have prototyped the RFID Guardian using off-the-shelf components, and our experience has shown that active mobile devices are a valuable tool for managing the security of RFID tags in a variety of applications, including protecting low-cost tags that are unable to regulate their own usage.

  • PDF

Case Studies of HVAC System through Energy audit (공조시스템의 에너지진단 사례)

  • Kim, Doo-Sung;Kim, Chun-Yong;Um, Chul-Jun;Song, Euy
    • Proceedings of the SAREK Conference
    • /
    • 2008.06a
    • /
    • pp.66-71
    • /
    • 2008
  • Energy audit was started in 2006 that Korea Government Policy for Energy saving. Who used over 2,000toe/yr(tons of oil equivalent) energy consumption has to perform Energy audit program of obligation every five years with auditing company. HANMI C&E as a company authorized by Government has diagnosed various type building. It shows four case studies of HVAC system in office building through Energy audit. This studies present efficient recommendation method for improving system performance.

  • PDF