• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.11 no.10
• /
• pp.3935-3941
• /
• 2010

With the advent of high-speed communications networks, many authentication and access control systems are being introduced to combat network security issues like system hacking. But the fact is that the security systems for protecting information used in these networks are themselves weak. In response to the mounting demands of existing users, there is a clear need for a new authentication system that provides both safety and reliability. This research presents an authentication method with excellent access authorization (explicit and implicit authentication) and safety performance, demonstrated through its use in online networks.

• Journal of the Korea Convergence Society
• /
• v.8 no.11
• /
• pp.29-35
• /
• 2017

The fourth industrial revolution and so on, the manufacturing environment is based on the latest IT technology, and ICT-based convergence that links with various industrial fields is actively proceeding. For this reason, convergence security based on changing environment in the field of security is emerging as a new issue, and various demands for convergence security are increasing. Such changes in the industrial environment not only provide advantages of convergence environment, but also cause various fusion and complex security problems. In particular, the government is actively promoting policies to build 10,000 smart plants by 2020, and has implemented projects to build 2,800 smart plants from 2014 to 2016. Therefore, we will examine the security threats and countermeasures against smart factories that are being built on the basis of ICT rather than the existing closed type.

• Convergence Security Journal
• /
• v.17 no.5
• /
• pp.133-142
• /
• 2017

Breaking away from the blind faith of internal military security network, current military security demands strengthening measure on the H/W, controlling measure against information communications within the military, strengthening measure on the linkage point of the military and universal internal networks, legal supplementation, sucurity management ofn the military facilities from outsourcing services supporting the military. By analyzing the danger of military organizations hacking and real hacking cases, policy establishment for strengthening the security on military network hacking, legal supplementation and controlling measure for the outsourcing services are the pragmatic counter measures against military security hacking considering the peculiarities of military rather than the application of physical containment linked with information communications technology on the H/W safety measures.

• Journal of Digital Convergence
• /
• v.17 no.1
• /
• pp.141-148
• /
• 2019

The advancement of digital technology accelerates intelligence, convergence, and demands better change beyond traditional methods in all aspects of business models and technologies, infrastructure, processes, and platforms. Risk management is becoming more important because of various security risks, depending on the changing business environment and aligned to business goals is emerging from the existing information asset based risk management. For business aligned risk management, it is essential to understand the risk appetite for achieving business goals, which provides a basis for decision-making in subsequent risk management processes. In this paper, we propose a framework for analyzing the risk management framework, pre - existing risk analysis, and protection motivation theory that influences decisions on security risk management. To examine the practical feasibility of the developed risk appetite framework, we reviewed the applicability and significance of the proposed risk appetite framework through an advisory committee composed of security risk management specialists.

• Korean Security Journal
• /
• no.16
• /
• pp.357-371
• /
• 2008

Currently, the security operations in nation's key foundations in Korea are performed by private police and special security guard in accordance with the Private Police Act and Security Business Act, respectively. In 1960s, The Korean Government introduced the private police system in terms of the national security issues, but it was just a hurriedly-set plan on the basis of Japanese Sunsa system as by that time there was no such system revitalized. However, the special security guards could offer wider range of security services including those of the private police with the enactment and revision of the Security Business Act 1976 and April 2001, respectively. Moreover, the expectations and interests rose over the special security guards in nation's key foundations after 9.11Terror Event in the U. S. 2001. However, as we investigated the current education/training system for the special security guard, we found that such education/training which is not activating the specialty of special security guard will not respond to the social demands. Special security guard owns its own characteristics other than those of general security guard as they are in service in nation's key foundations. Thus, the effcient management and training for the special security guard is the most important matter for the safety and security of nation's key foundations. Therefore, the well-educated special security guard through the reorganized and specialized education/training for the protection of nation's key foundations is expected to offer qualitatively improved security services.

• Journal of Digital Convergence
• /
• v.12 no.9
• /
• pp.159-168
• /
• 2014

With the advancement of internet and mobile communication devices, mobile banking such as internet banking, internet loan and smart phones related to the people's economic activities using mobile communication devices is becoming increasingly more popular. Various security systems to prevent such new crimes are being introduced and the security system market is anticipated to continuously increase substantially in the future. Accordingly, qualitative advancement of the security systems are also in continuous demand. Therefore, this thesis proposes the method and system for quality evaluation of the network access control system by proposing testing and evaluating method for the relevant system through surveying and analyzing the tend in the foundation technologies and standards in the area of network access control system, which is one of the security systems, in order to cope with the demands for the evaluation of the quality of the security system as the security system product market is anticipated to grow continuously.

• Korean Security Journal
• /
• no.60
• /
• pp.227-251
• /
• 2019

National interest in nuclear safety continues to increase. One of the policies that the government is pursuing is to change a temporary position to a permanent position for irregular special security guards of Nuclear power plants. At this point in time, it is urgent to discuss the method of their physical fitness test because duties of special security guards such as arrest and self-defense, unarmed defensive tactics, proficiency with semiautomatic rifle, etc, demands a lot of physical fitness. The purpose of this study is to analyze the physical fitness tests of police, firefighters and soldiers in Korea, US and Japan through literature review. After that, a new fitness test method suitable for special security guards of nuclear power plants was derived through expert meetings. This study also suggested a guideline to analyze the fitness test results so that the developed fitness method can be introduced to the field. For this purpose, physical fitness tests were conducted on 74 subjects. Based on the results of the experiment, the expected records of special security guard fitness tests were presented.

• Convergence Security Journal
• /
• v.11 no.3
• /
• pp.99-111
• /
• 2011

The management and deposit of paper document costs are increased gradually. Specially, it is too expensive to safekeeping paper document in the warehouse. Also paper based document system is exposed in several security problems. Therefore, demands of transformation process from paper document into electronic ones are quietly needed. Electronic document repository system is one of the best solutions for solving paper based document system issues. Electronic document repository system can reduce overall costs and provides some advantages in comparison with paper based document system. But, electronic document repository system has no formal methodology for guarantee safeties. Therefore, we suggest a security mechanism for establish electronic document repository system. Suggested security methodology can help for design of more secure electronic document repository system.

• Journal of Information Processing Systems
• /
• v.5 no.3
• /
• pp.117-130
• /
• 2009

By providing ubiquitous Internet connectivity, wireless networks offer more convenient ways for users to surf the Internet. However, wireless networks encounter more technological challenges than wired networks, such as bandwidth, security problems, and handoff latency. Thus, this paper proposes new technologies to solve these problems. First, a Security Access Gateway (SAG) is proposed to solve the security issue. Originally, mobile terminals were unable to process high security calculations because of their low calculating power. SAG not only offers high calculating power to encrypt the encryption demand of SAG's domain, but also helps mobile terminals to establish a multiple safety tunnel to maintain a secure domain. Second, Robust Header Compression (RoHC) technology is adopted to increase the utilization of bandwidth. Instead of Access Point (AP), Access Gateway (AG) is used to deal with the packet header compression and de-compression from the wireless end. AG's high calculating power is able to reduce the load on AP. In the original architecture, AP has to deal with a large number of demands by header compression/de-compression from mobile terminals. Eventually, wireless networks must offer users "Mobility" and "Roaming". For wireless networks to achieve "Mobility" and "Roaming," we can use Mobile IPv6 (MIPv6) technology. Nevertheless, such technology might cause latency. Furthermore, how the security tunnel and header compression established before the handoff can be used by mobile terminals handoff will be another great challenge. Thus, this paper proposes to solve the problem by using Early Binding Updates (EBU) and Security Access Gateway (SAG) to offer a complete mechanism with low latency, low handoff mechanism calculation, and high security.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.14 no.2
• /
• pp.85-100
• /
• 2004

Study and analysis on the digital certification of the world today, and census on how digital signature is being used or considered for the government will be used to sum of what can be the difficulties and Problems in operating digital signature certifications for the government administrations at this research, and of course the answers to these problems will be provided too. This research suggests practical ideas on how to interoperate between Government PKI (GPKI: Administrational Digital Certification for the Government) and National PKI (NPKI: Digital Certification for General Public ＆Business), how to make use of Standard Security APIs, how to manage (e.g. issue, reissue, update, revoke) digital certificate, how to improve technical side of security and reliability, and how to improve political issues on public education for information security. Digital certification will become more popular and widely used in government administrations in the future. Therefore, census and research on demands md satisfactions of digital certification for public and government will be regularly performed. Of course, continuous maintenances and improvement in this field will be necessary to obtain firmer way of information security.