• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.34 no.4
• /
• pp.781-799
• /
• 2024

Recently, the US and EU have been institutionally introducing and promoting Coordinated Vulnerability Disclosure(CVD) to strengthen the response to security vulnerabilities in ICT products and services, based on collaboration with white-hat hackers. In response to these changes in cybersecurity, we propose a three-step approach to introduce CVD through the Information and Communications Network Act(ICNA). In the first step, to comprehend the necessity and requirements for legislating CVD, we survey the current situation in Korea and the trends of CVD in the US, EU, and OECD. In the second step, we analyze the necessity for legislating CVD and derive the requirements for its legislation. In this paper, we analyze the necessity for legislating CVD from three perspectives: the need for introducing CVD, the need for institutionalization based on law, and the suitability of the ICNA as the legislation. The derived requirements for CVD legislation include the establishment and publication of Vulnerability Disclosure Policy(VDP), legal protection for white-hat hackers, and designation and role assignments of coordinator. In the third step, we introduce approaches to apply the requirements for CVD legislation to the ICNA, which is the law governing prevention and response to cybersecurity incidents in private sector.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.23 no.4
• /
• pp.781-797
• /
• 2013

Nowadays, it is increasing that corporates consign tasks related to the personal information processing to the consignees for efficiency and quality improvements and cost reductions. As the consignments are increased, there are increases on types and amounts of personal information. Therefore, the needs on the information managements and the security threats are increased. This report will analyze the laws that consignors and consignees should follow. Moreover, it identifies issues and analyzes the current levels on consignees in terms of the personal information protection so that the consignors can come up with the best and efficient way to monitor the consignees when they consign the personal information processing tasks.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2001.05a
• /
• pp.575-578
• /
• 2001

Number Portability means that one can use his original telephone number when he change telephone service provider, region and the kind of service. Number portability is not necessary when only one telephone service provider exist in korea. But it is necessary to guarantee pair competition among the service providers as new communication service provider comes. The law which is related number portability is established by government as number portability is considered a tool to guarantee pair competition between old service provider and new service provider. A national standard on number portability with which all service provider can agree is needed. We developed functional standard for that purpose. Functional standard includes call processing structure, network requirement. This paper handle functional standards.

• Proceedings of the Korean Society of Disaster Information Conference
• /
• 2015.11a
• /
• pp.300-302
• /
• 2015

독일의 응급구조업무의 조직은 독일 기본법(GG) 제30조, 제70조에 따라 오로지 연방부들에게 있다. 유럽 연합은 기술적 조직적 통일성과는 별도로 각각의 국민들의 건강보호의 일부분으로 응급구조의 조직과 재정에서 상당히 광범위하게 재량을 인정하고 있으며 이에 따라 유럽연합의 시스템과 정책들의 입법적 조화를 사실상 포기하고 있는 실정이다. 독일연방주들은 자신들의 주응급구조법률(LRDG)에서 응급구조업무의 보장을 일반적으로 재차 지방자치단체(주 근교도시중심)에게 독자적인 업무로서 인정하고 있다(가령 슐레비히 홀스타인주 응급구조법(RDGSH) 제6조). 이러한 주들은 응급구조를 자신의 관할지역에 대해 준비하고 스스로 운영하거나 운영통제할 수 있는 구조목적의 단체들(RZV)과 공동협력을 할 수 있다. 각각의 업무능력과 법적인 기준에 따라 구조 목적의 단체들(RZV)은 자신의 이름으로 응급구조를 운영하거나 하나 또는 다수의 기관(공공 구조서비스 혹은 사설 구조서비스)에게 시행을 위임할 수 있다. 이러한 측면에서 본 연구에서는 독일의 경우 의사가 직접 현장 의료를 담당하고 있다는 점에서최근 입법을 통해 응급구조사의 교육과정을 개편하고 있으며, 질적 향상을 통해 응급의사와 응급구조사의 권한범위에서 독일 응급구조사의 권한확대가 시도되고 있다는 시사점을 도출하고 있다.

• Journal of Digital Convergence
• /
• v.14 no.10
• /
• pp.535-542
• /
• 2016

This study was to explore the meanings and follow-up tasks for enactment of Act on Supply and Utilization Promotion of Assistive Technology Devices for People with Disabilities and Seniors(Assistive Technology Act) in Korea. I conducted analysis about contents and establishment process of the Act. The study found meaningful effects ; it provided the basis for supporting assistive technology devices based on the social model, it led to an Implementation of the national obligations such as UN Convention on the Rights of Persons with Disabilities, it provided terms related to assistive technology. It is suggested to conduct follow-up studies and to put the efforts to strengthen additional laws for backing up the effective policy for extended support of assistive technology devices and for security of budget, for establishing regional service centers, for phasing of professional qualification, for controlling quality, for establishing an information system, and for promoting industries.

• Journal of Information Management
• /
• v.33 no.4
• /
• pp.57-84
• /
• 2002

Digital library in knowledge-information-based society of the 21st century should develop legally various digital information resources in order to provide information services to users. This study analyzes and examines in detail the related provisions of copyright law relating to the development of digital information resources(digitalized works, electronic books, electronic journals, electronic reserve materials etc.). This study also points out the problems of the current Copyright Act and proposed Copyright Act of Korea. And it suggests necessary measures and improved plans to promote the development of digital information resources.

• Journal of the Korea Society of Computer and Information
• /
• v.26 no.3
• /
• pp.29-34
• /
• 2021

With the advent of the 4th industrial revolution era, IT technology is creating new services that have not existed by converging with various existing industries and fields. In particular, in the field of artificial intelligence, chatbots and the latest technologies have developed dramatically with the development of natural language processing technology, and various business processes are processed through chatbots. This study is a study on a system that provides a close answer to the question the user wants to find by creating a structural form for legal inquiries through Slot Filling-based chatbot technology, and inputting a predetermined type of question. Using the proposal system, it is possible to construct question-and-answer data in a more structured form of legal information, which is unstructured data in text form. In addition, by managing the accumulated Q&A data through a big data storage system such as Apache Hive and recycling the data for learning, the reliability of the response can be expected to continuously improve.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2013.11a
• /
• pp.5-8
• /
• 2013

전 산업분야의 변화 사이클이 짧은 격변의 시대에 공공부문의 IT는 "정보시스템의 효율적 도입 및 운영 등에 관한 법률"에 따라 구축되고 운영되고 있으며, 정부의 국정기조 아래 각 기관 조직의 전략실행 수단으로 활용되고 있으며 조직목표 달성에 기여하고자 EA를 구축하고 있다. 또한 조직의 통 폐합 등 변화에 따라 기존에 운영되고 있는 시스템 및 서비스들을 효율적으로 관리하기 위해서는 작은 예산을 통하여 적기에 빠르게 모형이 표준화되고 EA 지원시스템에 목표 아키텍처로 등록되며 현행화 되는 구조개선 작업이 필요하다. 본 연구에서는 새 정부 출범시마다 변화되는 주변 환경에 따라 해당조직의 통 폐합 과정에서 추진한 지난 정부에서의 사례 제시를 통하여, 민간과 다른 특성을 가지고 프로세스의 변화에 능동적으로 대응이 어려우며 현업의 참여가 소극적인 특성을 가진 공공기관에 적합한 EA 현행화와 구조개선 사례를 제공하고 이것을 바탕으로 다른 유사 공공기관들의 업무에 활용이 가능하도록 제안 한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2009.04a
• /
• pp.1466-1469
• /
• 2009

최근 웹 서비스 환경에서 공격자가 자신의 근원지를 은닉하기 위하여 여러 단계의 경유지를 거쳐 공격을 시도하는 사례가 증가하고 있으며, 이에 대한 법률적 증거 확보 및 능동적인 대처를 위하여 웹 어플리케이션에서의 역추적 기술이 필요하다. 현재 자바 애플릿이나 ActiveX, 플러그인, 웹 로그 등을 이용한 응용 계층의 추적 기술이 개발되고 있지만, 웹 클라이언트에 의하여 차단될 가능성이 높고, 플러그인 종류 및 호환되지 않는 운영 환경 등 제약조건으로 인하여 사용에 제한이 있다. 본 논문에서는 액션 스크립트를 이용한 웹 클라이언트 모니터링 시스템을 제안한다. 제안된 시스템은 웹 클라이언트가 실행을 인식하지 못하고 수행되어 웹 클라이언트에 의한 차단을 막을 수 있고, 다양한 운영 환경에서 사용이 가능하다.

• Journal of Korean Library and Information Science Society
• /
• v.53 no.2
• /
• pp.1-23
• /
• 2022

Access to knowledge and information is a universal human right. However, even after the Marrakesh Treaty was adopted on June 27, 2013, only 1-7% of standard printed materials are accessible to people with reading disabilities, including the visually impaired, and library services are very weak. As a result, the book famine of people with reading disabilities continues. This study, focusing on such severe access gaps and inequalities, analyzes Learning Ally and Bookshare in the US, the Royal National Institute of Blind People (RNIB) in the UK, Bibliothèque Numérique Francophone Accessible (BNFA) in France, and SAPIE in Japan, which are considered private organizations leading library services for the disabled in major developed countries. And based on the derived implications and the Marrakesh Treaty, a strategic plan was proposed to strengthen the services of the disabled in domestic libraries. It is urgent to enact the 'Act to Resolve Reading Barriers', amend the provisions related to the Copyright Act that restrict library services, strengthen the organizational capacity of the National Library for the Disabled, raise the service index for the disabled in library evaluation, and establish a library cooperation system centered on regional representative libraries and expand services, etc.