• Korean Security Journal
• /
• no.61
• /
• pp.39-57
• /
• 2019

The executive authority of the Ministry of Public Administration and Security on the 'management of security of the government complexes' is not sufficiently secured only with the organization law, the Government Organization Act. It is needed to establish an administrative actions law, an individual law that sets detailed contents and limitations of the executive authority to be stipulated. The current regulation, Regulation on the Management of the Government Complexes which is a Presidential Decree, is a legal decree that lacks a legal basis. The decree does not match with the current constitutional framework and raises the issue of its legality. The regulation may have the characteristics as a public property management law so far as it stipulates such matters as supply and maintenance management for the complexes, acquisition and disposition of complexes, facilities management of complexes, etc. However, the regulation includes high authority actions by an administrative organization, such as facilities security and order maintenance including restriction and control of access. This makes the regulation have the characteristics of a public property policy act as well. To supplement the legal framework for this situation, it is needed to level up some of the provisions relating to protection and security management to the level of an act as they stipulate high authority actions by an administrative organization. Other matters in the Regulation on the Management of the Government Complexes such as provisions relating to supply and allocation of complexes, etc. may be maintained as they are. In addition, the protection officers (general service official) does not own legal authority and have limitations on securing the capability to deal with the situations on implementing the on-site protection duty. Therefore, it is needed for the protection officers to secure protection duty-related authority by stipulating in a law. The main contents of the law on the protection and security of the government complexes may be those matters providing reservations on the implementations of laws. These may include the limitation of rights of and charging obligations on the people such as restricting the actions of personnel in the complex, rights and obligations of protection personnels relating to their duties, use of weapons, training of protection personnel, penal provisions, etc. These legal reservations should be included in an individual act.

• Journal of the Society of Disaster Information
• /
• v.11 no.2
• /
• pp.263-267
• /
• 2015

This study shows the result of the security assessment of the nationwide key energy facilities and suggests the ways of improving the security level. According to the study, most of the energy facilities are adequately equipped with physical security factors such as security personnel, security systems, fences, and guard posts, but lack of awareness is pervasive among those concerned, so the security operation is inefficient. In other words, inefficient deployment of security personnel, lack of the fundamental knowledge of the security systems, excessive dependence on surveillance cameras' functions such as Pan/Tilt/Zoom, misplaced cameras, low efficiency of monitoring, and irrelevant security plans. To solve these problems, above all, the authority concerned need to develop professional training programs to secure certified security mangers, and need to standardize security process to ensure consistency and to harness the standardization as a source of self assessment to improve security level.

• KIPS Transactions on Computer and Communication Systems
• /
• v.2 no.12
• /
• pp.561-568
• /
• 2013

Instrumentation and control system in nuclear power plant performs protecting, controling and monitoring safety operation of Nuclear Power Plant. As cyber attack to the control equipment of instrumentation and control system can cause reactor shutdown and radiation release, it is required to design the instrumentation and control system considering cyber security in accordance with regulatory guides and industrial standards. In this paper, we proposed a design method of uni-directional communication structure which is required in the design of defense-in-depth model according to regulatory guides and industrial standards and we implemented a communication board with the proposed method. This communication board was tested in various test environments and test items and we concluded it can provide uni-directional communication structure required to design of defense-in-depth model against cyber attack by analyzing the results. The proposed method and implemented communication board were applied in the design of SMART (system-integrated modular advanced reactor) I&C (instrumentation and control) systems.

• Review of KIISC
• /
• v.28 no.2
• /
• pp.51-60
• /
• 2018

"원자력시설 등의 방호 및 방사능 방재 대책법"(이하 '방사능방재법')에 의거하여 한국원자력통제기술원은 원자력안전위원회로부터 원자력시설의 사이버보안 규제 업무를 위임받아 수행하고 있으며, 그 중 위협평가 업무를 통해 최신 사이버 위협 사례를 분석하여 사이버보안체제의 기준이 되는 설계기준위협을 설정하고 원자력사업자의 이행 여부를 평가하고 있다. 위협평가의 첫 단계로 방사능방재법에 따라 3년 마다 최신 사이버 위협 사례를 조사 및 분석하여야 하며, 사이버 위협분석 자료는 원자력사업자가 방호해야하는 최대 위협 수준인 설계기준위협 설정에 사용된다. 본 논문에서는 최근 3년간 원자력시설과 같은 중요시설 대상으로 발생한 사이버 위협 사례를 분석하였으며, 향후 분석 자료를 바탕으로 위협평가에 활용하고자 한다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2023.11a
• /
• pp.343-344
• /
• 2023

본 연구는 국가중요시설의 청사 내에 근무하는 청사보안과 안전유지, 질서유지를 담당하는 방호직 공무원에게 발생하는 다양한 민원인 불량행동의 유형과 국가중요시설에서 일어나는 각 유형에 맞는 민원인 불량행동에 대한 개선방안을 효율적으로 제시하는데 그 목적이 있다. 이에 인터뷰를 통해 국가중요시설에서 근무하는 방호직공무원이 느끼는 민원인 불량행동이 어떠한 유형으로 있는지 조사하였고 개별면담을 통해 나타난 대표적인 민원인 불량행동의 유형들은 첫째, 국가중요시설 내에서 큰 소리를 지르고 욕설을 하는 언어폭력형 둘째, 각 국가기관 및 지자체의 국가중요시설에서 서비스 업무수행 과정 중 다른 타 민원인이 있음에도 본인 자신의 이익과 편의를 위해 행해지는 행위를 하는 이기주의형 셋째, 각 국가중요시설의 규정 및 내규가 있음에도 규정된 규칙을 무시하고 따르지 않는 규칙위반형 등이 있다. 이에 따라 각 유형별 민원인 불량행동에 대한 개선방안 항목들로 첫째, 방호직공무원 교육의 체계화, 둘째, 민원인을 응대할 수 있는 기관의 내규 및 규칙, 셋째, 민원인에게 겪는 스트레스를 해소할 수 있는 환경을 제시하였다.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2022.10a
• /
• pp.119-120
• /
• 2022

본 연구는 국가중요시설의 청사 내에 근무하는 청사보안과 안전유지, 질서유지를 담당하는 방호직 공무원에게 발생하는 다양한 민원인 불량행동의 유형과 국가중요시설에서 일어나는 각 유형에 맞는 민원인 불량행동에 대한 개선방안을 효율적으로 제시하는데 그 목적이 있다. 이에 인터뷰를 통해 국가중요시설에서 근무하는 방호직공무원이 느끼는 민원인 불량행동이 어떠한 유형으로 있는지 조사하였고 개별면담을 통해 나타난 대표적인 민원인 불량행동의 유형들은 첫째, 국가중요시설 내에서 큰 소리를 지르고 욕설을 하는 언어폭력형 둘째, 각 국가기관 및 지자체의 국가중요시설에서 서비스 업무수행 과정 중 다른 타 민원인이 있음에도 본인 자신의 이익과 편의를 위해 행해지는 행위를 하는 이기주의형 셋째, 각 국가중요시설의 규정 및 내규가 있음에도 규정된 규칙을 무시하고 따르지 않는 규칙위반형 등이 있다. 이에 따라 각 유형별 민원인 불량행동에 대한 개선방안 항목들로 첫째, 방호직공무원 교육의 체계화, 둘째, 민원인을 응대할 수 있는 기관의 내규 및 규칙, 셋째, 민원인에게 겪는 스트레스를 해소할 수 있는 환경을 제시하였다.

• Review of KIISC
• /
• v.27 no.2
• /
• pp.57-68
• /
• 2017

원자력시설에 대한 사이버보안 위협이 증가됨에 따라 "원자력시설 등의 방호 및 방사능 방재 대책법"에 의거 원자력통제기술원은 사이버보안 이행에 관한 세부 기준을 제시하는 KINAC/RS-015 "원자력시설 등의 컴퓨터 및 정보시스템 보안기술기준"을 마련하고 원자력 사업자로 하여금 사이버보안계획(CSP)을 이행토록 하였다. 따라서 원자력사업자는 사이버공격으로부터 필수디지털자산(CDA)을 보호하기 위해 운영적 관리적 기술적 사이버 보안조치를 적용 및 이행하여야 한다. 본 논문에서는 원자력시설의 최상위 설계요건인 안전성 및 신뢰성 확보를 위해 사이버보안 기술을 적용하는데 많은 어려움이 따르는 기술적 보안조치인 접근통제, 감사 및 책임, 시스템 및 통신의 보호, 식별 및 인증, 시스템 보안강화에 대한 이행방안을 살펴보고자 한다.

• Korean Security Journal
• /
• no.61
• /
• pp.9-38
• /
• 2019

As the scales & density of the Korean national infrastructures have been increased, they will be identified as rich and attractive potential targets for intensified North Korea's attack in the rear region and terrorism attack. In addition, due to changes in security environment such as drone threats and lack of security forces under the 52-hour workweek law, I think that it is the proper time point to reevaluate the effectiveness and appropriateness of the current physical protection system and its shift to a new system. In this study, the direction and improvement of the perimeter physical protection systems of the national infrastructures are to be studied from the viewpoints of its concepts of operations and design methodology, focusing on the nuclear power plant. The reason why we focus on nuclear power plants is because they cause wide-range and long-term damages caused by radioactive materials disperal and pollution, along with short-term damage caused by the interruption of electricity generation in the event of damage to nuclear power plants. With the aim of extracting improvement directions, as we will comprehensively review domestic research trends and domestic·overseas related laws, and consider Korea's specificity, we try to reframe the concept of operation - systematization, mobilization and flexibility -, and establish criteria on system change. In order to improve the technical performance of the new perimeter physical protection system, we study on high-fidelity·multi-methodology based integrated design methodology, breaking from individual silo-type design methods, and I suggest improvement of government procurement, its expansion to export business and other national infrastructure.

• Korean Security Journal
• /
• no.57
• /
• pp.9-26
• /
• 2018

In order to reflect the Changes in this government's policy of making Temporary Position employees into the Public sector permanent, special security guards from Private Security firms in the National Critical Facilities protection Position are moving forward transformation to Permanent Position. Especially, the organization of the protection personnel of the National Government Buildings designated as the National Critical Facilities is comprised of various types of security personnels, protective officer, special security guards from Private Security firms, Private police guards, police officers and these types of security personnels protect for the Government Buildings. Recently, The Government Security planning division is discussing various types of transformation, Special Security guards are employed directly by the Government in order to convert them into Permanent position, Special Security guards are employed directly through a establishment of Public Security corporation, protective officers are hired by the Government, Self-guards are hired directly by the Government, Private police guards are employed directly by the Government. In order to reflect the Changes the Government policy of making Temporary position employees into the Permanent, the Special Security Guards from Private Security Firms in the National Critical Facility's protection environment, protective personnels operation characteristic under various circumstances. Especially, in the process of making Special Security Guards to Permanent position, it is necessary to take precedence over the various opinions of Special Security Guards and stakeholder.

• Review of KIISC
• /
• v.28 no.6
• /
• pp.88-95
• /
• 2018

방사능방재법의 개정을 통해 전자적 침해행위의 유형으로 고출력 전자기파(Electromagnetic Pulse, 이하 EMP) 위협에 대한 대책이 원자력시설별로 마련되도록 요구되었다. 그동안 국내의 EMP 위협에 대한 방호 대책은 군사시설 중심으로 오랫동안 연구되고 적용된 바 있으나, 공공 및 민간시설에 대해서는 이제 막 첫발을 내딛은 상황이다. 본고에서는 한국원자력통제기술원 사이버보안실에서 추진하고 있는 국내 원자력시설에 대한 EMP 방호 규제체계 구축현황에 대해 소개하고, 이에 배경이 되는 법적 근거 및 국내 외 유관 연구사례 및 기술표준 등에 대해 살펴보고자 한다.