• Convergence Security Journal
• /
• v.23 no.4
• /
• pp.33-41
• /
• 2023

In recent years, advanced persistent threat (APT) attack organizations have exploited various vulnerabilities and attack techniques to target companies and institutions with national core technologies, distributing ransomware and demanding payment, stealing nationally important industrial secrets and distributing them on the black market (dark web), selling them to third countries, or using them to close the technology gap, requiring national-level security preparations. In this paper, we analyze the attack methods of attack organizations such as Kimsuky and Lazarus that caused industrial secrets leakage damage through APT attacks in Korea using the MITRE ATT&CK framework, and derive 26 cybersecurity-related administrative, physical, and technical security requirements that a company's security system should be equipped with. We also proposed a security framework and system configuration plan to utilize the security requirements in actual field. The security requirements presented in this paper provide practical methods and frameworks for security system developers and operators to utilize in security work to prevent leakage of corporate industrial secrets. In the future, it is necessary to analyze the advanced and intelligent attacks of various APT attack groups based on this paper and further research on related security measures.

• Journal of The Korean Institute of Defense Technology
• /
• v.5 no.1
• /
• pp.19-24
• /
• 2023

The future battlefield is expected to be very different from what it is today because of the development of new technologies. In particular, it becomes difficult to predict the war's outcome as AI and robots, whose performance is improved, participate in the battlefield. Accordingly, major countries including the US and China regard AI as the key technology and game changer that changing national competitiveness and future wars. Therefore, they are concentrating their efforts at the national level to occupy advance related technologies and to develop AI weapon systems. For this reason, countries are preparing strategies and policies to defense AI, and are actively expanding infrastructure, such as establishing organizations. In Korea, Defense AI is also being promoted. But, it suffers from a lack of governance that manages and controls integrally. Nevertheless, a significant consensus is forming on the necessity of establishing a defense AI center. In this study, we analyzed the status of defense AI promotion in major foreign countries such as the US, UK, and Australia, and suggested some implications for the establishment of defense AI policies.

• Asia-Pacific Journal of Business Venturing and Entrepreneurship
• /
• v.1 no.1
• /
• pp.23-52
• /
• 2006

Industry-academy Collaboration alms to produce synergy-empowerment through co-opt between university and business within R&D and human resource management. The lack of indigenous R&D capabilities makes Korean small businesses not have sustainable competitive advantages. While the Korean government has increased the budgetary supports on small businesses since the late 1990s to enhance technological capabilities of small businesses, the competitiveness gap between large and small firms has been widened. The alternative for the government support is considered as active industry-academy collaboration. After exploring various policy measures for the collaboration with classifying them and pointing out their problems from a technological innovation perspective, this study shows the more expected roles of the collaboration to be a catalyst coordinating the R&D activities among the local small businesses, local universities, and public research institutes. Based upon the analyses, this study suggests several policy alternatives to facilitate the technological innovations of small businesses in the regional innovation clusters.

• The Journal of Korean Institute for Practical Engineering Education
• /
• v.4 no.2
• /
• pp.13-23
• /
• 2012

The purpose of this study is to identify and develop a rubric for assessing the practice test in national technical qualification with validity and objectivity. There are three specific purposes for this study. First. we suggest some issues to consider when we develop a rubric. Second, we suggest the general procedure and main factors in developing a rubric. Third, we identify some problems and suggest some improvement measures for the rubric in national technical qualification examination. The procedure for developing a rubric is as follows; decisions of task, the relation with goal, classify of performance level, and validity. Also, there are five main factors as follows; contents, criteria, practicality, credibility, and objectivity.

• Journal of Intelligence and Information Systems
• /
• v.26 no.3
• /
• pp.127-147
• /
• 2020

The world is suffering from numerous human and economic losses due to the novel coronavirus infection (COVID-19). The Korean government established a strategy to overcome the national infectious disease crisis through research and development. It is difficult to find distinctive features and changes in a specific R&D field when using the existing technical classification or science and technology standard classification. Recently, a few studies have been conducted to establish a classification system to provide information about the investment research areas of infectious diseases in Korea through a comparative analysis of Korea government-funded research projects. However, these studies did not provide the necessary information for establishing cooperative research strategies among countries in the infectious diseases, which is required as an execution plan to achieve the goals of national health security and fostering new growth industries. Therefore, it is inevitable to study information services based on the classification system and classification model for establishing a national collaborative R&D strategy. Seven classification - Diagnosis_biomarker, Drug_discovery, Epidemiology, Evaluation_validation, Mechanism_signaling pathway, Prediction, and Vaccine_therapeutic antibody - systems were derived through reviewing infectious diseases-related national-funded research projects of South Korea. A classification system model was trained by combining Scopus data with a bidirectional RNN model. The classification performance of the final model secured robustness with an accuracy of over 90%. In order to conduct the empirical study, an infectious disease classification system was applied to the coronavirus-related research and development projects of major countries such as the STAR Metrics (National Institutes of Health) and NSF (National Science Foundation) of the United States(US), the CORDIS (Community Research & Development Information Service)of the European Union(EU), and the KAKEN (Database of Grants-in-Aid for Scientific Research) of Japan. It can be seen that the research and development trends of infectious diseases (coronavirus) in major countries are mostly concentrated in the prediction that deals with predicting success for clinical trials at the new drug development stage or predicting toxicity that causes side effects. The intriguing result is that for all of these nations, the portion of national investment in the vaccine_therapeutic antibody, which is recognized as an area of research and development aimed at the development of vaccines and treatments, was also very small (5.1%). It indirectly explained the reason of the poor development of vaccines and treatments. Based on the result of examining the investment status of coronavirus-related research projects through comparative analysis by country, it was found that the US and Japan are relatively evenly investing in all infectious diseases-related research areas, while Europe has relatively large investments in specific research areas such as diagnosis_biomarker. Moreover, the information on major coronavirus-related research organizations in major countries was provided by the classification system, thereby allowing establishing an international collaborative R&D projects.

• Journal of Korea Technology Innovation Society
• /
• v.13 no.1
• /
• pp.1-27
• /
• 2010

In this paper We analyze the correlation between investment and performance of Korean R&D programs, by six factors diversified, based on evolutionary economics of technology. National Science and Technology Information Service(NTIS) started from March, 2008 was used for collecting investment and performance data of national R&D program. We search the investment cost according to science-technology standard classification of Korea, research conductors, socio-economic objectives and cooperation types per year from 2002 to 2008, and we regard this data as "investment". Similarly, we search the number of papers, patents, commercializations, royalties and so forth according to science technology standard classification of Korea, research organizations, socio-economic objectives and cooperation types per year from 2002 to 2008, and this data is regarded as "performance". We expected analysis results of this investment and performance data confirm the diversified factors to affect advancement of science and technology. And we though, as a result, we will get some meaningful directions of investment of national R&D from the analysis results. But this study has several limitations because we did not consider enough microscopic characteristics of sector or technology, research organizations, cooperation network types, and external effect of social, politic, cultural factors.

• Annual Conference of KIPS
• /
• 2002.11c
• /
• pp.1977-1980
• /
• 2002

오늘날 정보기술은 국가를 비롯한 각 조직의 생존을 위한 필수적인 요소가 되었으며, 조직의 업무를 효과적으로 수행하기 위해서는 정보기술관리 및 상호운용성이 보장된 통합시스템구축이 필수적인 과제가 되었다. 그러나 현재 운용중인 대다수의 시스템들은 이러한 상호운용성의 개념 없이 개별적인 기능을 위해 개발되었으며, 향후 다른 시스템과 상호운용을 위해서는 막대한 비용과 노력이 요구되고 있으나, 정보 시스템들 사이의 상호운용을 구축하기 위한 지침이나 방안이 없는 것이 현실이다. 본 고에서는 미 국방성이 상호운용을 위하여 정립한 LISI(Levels of Information Systems Interoperability: 이하 LISI로 표기함)에 대하여 설명하고, 이러한 LISI를 전사적 범위에서의 정보시스템 현실에 적용하기 위한 방안을 제시하고, 현 기술 수준에 맞는 능력모델과 구현옵션테이블을 구현하여 상호운용성 수준 측정 프레임워크를 제안하였다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2003.04d
• /
• pp.617-619
• /
• 2003

Grid는 고성능의 프로세스와 네트워크의 발전으로 인한 분산 컴퓨팅 환경에서의 이기종성을 극복하고, 대규모의 자원 및 데이터를 관리하고, 고속의 연산 수행이 가능한 시스템 개발을 가능하게 하였다. 또한, 현재 국가 및 대학 연구소를 중심으로 가상 환경에서의 협업 및 정보 공유가 가능한 가상 조직을 구축을 목표로 하고 있다. Grid는 고정된 분산 시스템을 기반으로 연구되고 있으며, 현재 컴퓨팅 환경의 변화의 축인 이동성을 고려하지 않고 있다. 경량화 된 프로세스는 이동기기의 대중화를 가져왔으며, 무선 네트워크의 저가화로 인해 무선 인터넷을 통한 컨텐츠 및 어플리케이션의 사용이 범람하게 되었다. 컴퓨팅 자원들의 산재와 이동성의 부여 둥의 컴퓨팅 환경의 변화는 사용자 중심의 컴퓨터 패러다임을 낳았으며, Grid 환경의 계속적인 발전을 위해서는 이러한 변화 수용이 필수적이다. 또한 변화된 컴퓨팅 환경에서의 사용자의 요구사항들에 대한 Grid 컴퓨팅 환경의 적용에 관한 많은 문제점들이 제시되고 있다. 본 논문에서는 이러한 관점을 고려하여 이동 컴퓨팅 환경의 인프라들을 기반으로 기존의 Grid 컴퓨팅과의 연동을 고려하여 적응성 및 재구성이 가능한 Mobile-Grid 아키텍처를 제시하고, 가상 조직 내에서 확장성, 유연성, 호환성, 개방성 둥의 특징을 가지는 Mobile-Grid의 미들웨어를 제안한다.

• Proceedings of the Korea Water Resources Association Conference
• /
• 2016.05a
• /
• pp.580-580
• /
• 2016

기후변화의 영향으로 전세계적으로 이상 기후 및 자연재해가 증가하면서 재난을 효과적으로 관리하기 위한 법체계 및 제도에 대한 관심이 높아지고 있다. 그럼에도 불구하고 재난관리의 법과 제도적 측면에 대한 연구는 공학 및 기술적 연구에 비해 충분히 이루어지지 않고 있다. 특히 재난관리에 대해 많은 경험을 축적해온 선진국가의 재난관리체제에 대한 연구는 아직 미비한 수준이라 할 수 있다. 따라서 본 연구는 영국의 재난관리체제를 법과 제도를 중심으로 분석하고 한국에 필요한 시사점을 도출한다. 영국의 재난관리 체제는 지방정부가 재난대응에 있어서 주도적인 역할을 수행하고 중앙정부는 대응 가이드라인을 제시하고 지원 및 조정업무를 수행하는 분산적 재난대응체제라 할 수 있다. 중앙정부에는 재해를 전담하는 조직이 별도로 구성되어 있지 않고 지방행정조직이 지역특정에 맞게 위기관리계획을 수립하고 집행한다. 지역별로는 지방정부, 기업, 시민단체로 구성된 민관협력체인 위기관리포럼을 형성하여 재난에 대처한다. 반면 한국의 재난대응체제는 중앙집권적이며 국민안전처가 재해전담조직으로서 역할을 하고 있으나 영국과 같은 민관협력체는 발달하지 않았다는 차이점을 발견할 수 있다. 영국과 한국의 재난관리체제를 비교해 볼 때 다음과 같은 법 제도적 개선방안을 제시할 수 있다. 첫째, 분산되어 있는 재난관리 기본법을 하나로 통폐합할 필요가 있다. 둘째, 지방정부의 재난대응권한을 강화해야 하며 특히 인력과 예산이 재난에 적절히 대응할 수 있는 수준으로 조정되어야 한다. 세째, 지방수준에서 재난대응 관련 기관들간 조정 및 협력을 할 수 있는 체제가 강화되어야 한다. 네째, 민간단체를 재난대응체제에 조직적으로 참여시킬 수 있도록 해야 한다. 이를 위해서는 주민단위의 방재조직이 공공부분과 효과적으로 협조할 수 있도록 할 수 있는 제도적 틀이 필요하다. 다섯째, 재난대응단계 설정에 있어 예방에 앞서 지역의 특성에 따라 예방업무를 효과적으로 수행할 수 있도록 진단하는 평가단계를 추가하는 것을 고려해야 한다.

• Journal of Korea Port Economic Association
• /
• v.30 no.1
• /
• pp.159-173
• /
• 2014

This study is key competence port logistics companies analyze the priorities of evaluation factors. key competence index of NCS(National competency standard) was designed on the basis of the research model. The priorities of evaluation factors were analyzed using AHP method. The results of the analysis of 1 layer's key competence priorities are as follows: Interpersonal skills(0.217), communication skills(0.153), ability to develop problem(0.148), ability to understand the organization(0.103), and resource management skills(0.090), self-development ability and professional ethics(0.070), information skills(0.065), technical skills(0.049), numeracy skills(0.035).