• Asia pacific journal of information systems
• /
• 제8권2호
• /
• pp.105-119
• /
• 1998

As the first step to information security, the security policy and organizational control need to be established. The purpose of this study is to investigate the policy and management of information security of five major Korean business groups. The results of case study on five giant groups can be summarized as follows. There exists a basic policy for information security. But it is outdated and not realistic in the present. The security audit and education need to be upgraded. It is also necessary to use security tools actively. The security level is low in companies which do not have independent information security divisions. Therefore, it is desirable to build information security teams. The number of security personnel is not enough for the task although there exist an information security team in the company. It is important to check if the team has the ability of perform information security task. The interview with security managers reveals that the total security management should be integrated with physical and computer security. It is suggested that an Information Security Center play the major role for information security. The study on the information security management for industry level is expected to be performed in the future.

• 한국산업정보학회논문지
• /
• 제22권4호
• /
• pp.45-64
• /
• 2017

본 연구의 목적은 금융회사의 정보보호활동이 정보보호담당자들의 보안업무에 대한 자신감에 미치는 영향을 파악하고 미흡한 점을 보완하기 위한 학문적, 실무적 시사점을 찾기 위한 연구이다. 연구결과, 금융회사가 정보보호교육, 침해사고 대응 및 입/출입 보안에 중점을 두고 정보보호활동을 하면 정보보호담당자의 회사에 대한 정보보호자신감 및 직원들의 정보보호의식 수준이 높아진다는 것을 확인할 수 있었다.

• 한국컴퓨터정보학회논문지
• /
• 제17권8호
• /
• pp.145-161
• /
• 2012

본 연구에서는 정보시스템 관련 교육의 정도와 인터넷 활용 능력이 인지된 보안성 우려에 어떠한 영향을 미치며, 기술수용모델에 기반을 두어 이 세 변수가 온라인 거래 의도에는 어떻게 영향을 미치는지 살펴보고자 하였다. 또한 스마트 폰을 이용하여 필요로 하는 제품을 구매하는 사례가 증가하는 추세이므로 기존 인터넷을 이용할 경우와 스마트 폰을 이용할 경우로 구분하여 비교 분석하였다. 실증 분석 결과, 정보시스템 관련 교육의 정도, 인터넷 활용 능력, 인지된 보안성 우려는 인지된 유용성 및 인지된 사용 용이성을 매개로 하여 온라인 거래 의도에 유의한 영향을 미쳤다. 그리고 예상했던 것과 달리, 정보시스템 관련 교육을 많이 받을수록 해킹이나 프라이버시 침해 사례들을 더 많이 알게 되어 보안에 대해 더 우려하게 되며, 따라서 인터넷을 통한 거래가 많은 노력을 요구한다고 믿었다. 또한 정보시스템 관련 교육을 많이 받을수록 보안에 대해 더 우려하게 되므로, 인지된 보안성 우려는 인지된 유용성에 부(-)의 영향이 아니라 정(+)의 영향을 미쳤다. 마지막으로 정보시스템 관련 교육의 정도는 인터넷 거래의 유용성이나 인터넷 거래의 사용 용이성을 인지하는 것과는 관련이 있으나, 스마트 폰의 유용성이나 스마트 폰의 사용 용이성을 인지하는 것과는 관련이 없는 것으로 나타났다.

• 한국재난정보학회 논문집
• /
• 제2권1호
• /
• pp.91-111
• /
• 2006

Technology development of modern society reduces times, costs and labor costs but demands work forces requiring expert knowledge on technology. Consequently knowledge worker becomes important. Not changing into a specialist acquired expert knowledge, people can't survive in competitive society. Therefore, the purpose of this study is to grasp the actual condition of private security industry and to examine problems. The final goal is to find the way to improve the professionalism of workers in private security industry. First. Now we must make up for the subject for examination actually and be in a triangular position and complement a professional materials for teaching. At the same time it must strengthen the education using advanced instruments seek to Total Security System. Moreover it is demanded 'institutional supplement of security guard instructors' which means job training for security guard instructor Second. On the job training which can deal with a state of emergency through 'security guard training' with a theory and an actual training must be strengthen. Also, most security guards have low understandings and interests because their ages are from 50's to 60's. Accordingly proper education must be offered to security guard. Third. Certification system of the private security guards are needed to fix the problems on an indiscreet issue and an abuse of license through deliberation on the security license. Fourth. Universities must find a new market to minimize the squandering of human resources because of oversupply and reduce the personnel. Also with enhancing the employment rate through specialized education, universities must offer an education which keeps pace with the times for not an entrance strategy but a long-term development. Effort for education of specialist will produce an improvement in business quality and improved services produce a customer satisfaction. A customer satisfaction will produce a fame of a successful company and positive images in market area. Finally the private industry will be developed by productivity improvement.

• 한국재난정보학회 논문집
• /
• 제2권1호
• /
• pp.19-38
• /
• 2006

With rapid social change, security industries were diversified and universities related total security service were founded for training of specialist with a theory and practical affairs. Today, universities must provide an education which fits to job characteristics in rapidly changing society. Also students through this education must find their job properly. The purposes of this study, therefore, are to search a career selection of students majoring in total security service related departments and to study a role of universities for development of specialist related security industries. Revitalization plan of human resources for departments related security services are as follows ; roles of universities: a specialization of curriculum and a diversification of training method. 'academic-industrial cooperation', role of government: 'a legal and institutional policy on academic-industrial cooperation';. Universities, cooperations, government must cooperate mutually for development of specialist related security service field.

• 정보보호학회논문지
• /
• 제29권3호
• /
• pp.645-656
• /
• 2019

제어시스템에 대한 사이버 위협 사례가 증가함에 따라 제어시스템 사이버 보안에 대한 필요성이 증가하고 있다. 현재 국내외에서 다양한 사이버 보안 관련 교육과 제어시스템 관련 교육이 수행되고 있다. 그러나 제어시스템의 특성과 참가자의 특성을 온전히 반영하기에 아쉬움이 있다. 본 논문에서는 제어시스템의 특성을 반영하기 위하여 다양한 제어시스템을 분석하였다. 분석 내용과 IEC62443에서 제시된 제어시스템 모델을 이용하여 제어시스템 훈련 환경을 제안한다. 그리고 참가자의 학습 성과를 향상하기 위해 참가자 특성을 분석하고, 교육 분야의 ARCS 학습 모델을 활용한 융합소통 훈련 기법을 제안하였다. 그리고 제안한 훈련환경과 훈련기법을 이용한 교육훈련 시나리오를 제시하였다. 제안한 내용을 통해 보안전문가와 제어시스템 전문가의 상호 이해를 바탕으로 한 협업 모델을 실무에 적용하여 최종적으로 제어시스템 사이버 보안 능력을 향상시킬 수 있을 것이라고 기대한다.

• International Journal of Computer Science & Network Security
• /
• 제21권4호
• /
• pp.140-144
• /
• 2021

The article considers aspects of improving the quality of training of specialists based on the use of modern information and communication technologies in the educational process; the use of teaching methods and, as a result, an increase in the creative and intellectual components of educational activities; integration of various types of educational activities (educational, research, etc.); adaptation of information technology training to individual the characteristics of the student; ensuring continuity and consistency in learning; development of information technologies for distance learning; improving the software and methodological support of educational process.

• 디지털산업정보학회논문지
• /
• 제8권3호
• /
• pp.33-39
• /
• 2012

Since the passing of the Personal Information Act in March 2011 and its initial introduction in September, over the one year to date diverse security devices and solutions have been flowing into the market to enable observance of the relevant laws. Beginning with security consulting, corporations and institutions have focused on technology-based business in order to enable observance of those laws competitively in accordance with 6-step key procedures including proposal, materialization, introduction, construction, implementation, and execution. However there has not been any investment in human resources in the field of education such as technology education and policy education relative to the most important human resources field nor investment in professionals in the organization for the protection of personal information or in human resources for operating and managing IT infrastructure for actual entire personal information such as special sub-organizations. In this situation, as one process of attracting change from the nature of the technology-based security market toward a professional human resource-based security infrastructure market, it is necessary to conduct research into standardization modeling concerning special organizational composition and a management system for the protection of personal information.

• 정보교육학회논문지
• /
• 제2권1호
• /
• pp.130-137
• /
• 1998

An agent is a computer program that acts autonomously on a computer system. A mobile agent is not bound to the system where it begins execution. It has an ability to transport itself from on e system in a network to another. Mobile agent system solve the network traffic problem. Moreover, the agent may utilize the object services of the destination agent system. In this study the mobile agent system is introduced to support security service.

• 정보교육학회논문지
• /
• 제9권4호
• /
• pp.661-671
• /
• 2005