• Proceedings of the Korea Society for Industrial Systems Conference
• /
• 2000.11a
• /
• pp.597-607
• /
• 2000

전자상거래 보안은 전자상거래의 성공여부를 결정할 수 있는 신뢰성 확보를 위한 기반기술로서 인식되고 있다. 이러한 보안 서비스의 문제는 전자상거래 활성화의 가장 큰 요소 중의 하나로서 정보기술과 인터넷 기술의 발전과 함께 꾸준히 연구 및 보완되어야 할 중대한 이슈가 되었다. 특히 전자상거래의 급성장과 함께 보안사고가 잇따르고 있는 상황에서 이를 대처하기 위한 전문인력이 절대적으로 부족함에도 불구하고 이런 상황을 타개하기 위한 전문인력 양성제도나 기관은 극히 취약한 실정이다. 이와 같은 상황에서 보안 전문인력의 양성을 위한 자격인증 제도의 도입이 절실히 요구되고 있다. 따라서 본 연구는 전자상거래 보안 전문가를 양성하기 위한 연구로서 자격증 인증제도의 도입에 관하여 실무적으로 접근한다는 점에서 그 의의를 갖는다. 즉 본 연구는 전자상거래 보안전문가 자격제도의 도입, 관련 교육에 관한 이론적, 실무적 체계 마련 등 전자상거래 보안전문가 자격인증제도의 기반을 연구함으로써 국내 전자상거래 보안 수준을 향상시키고 나아가 전자상거래 발전에 기여하게 될 것이다.

• Review of KIISC
• /
• v.33 no.4
• /
• pp.75-81
• /
• 2023

본 논문에서는 국제전기통신연합(ITU)의 정보통신기술 표준을 담당하고 있는 ITU-T에서 보안 분야표준을 제정하고 있는 SG17에서의 양자암호 표준화 최신 동향을 살펴보았다. ITU-T SG17에서 양자암호 관련 표준화는 실무반인 Q15에서 담당하고 있다. 양자암호통신은 더 이상 쪼갤 수 없는 물리량의 최소 단위인 양자(Quantum)의 특성을 다양한 통신서비스에 적용하여 가장 높은 수준의 보안 서비스를 제공하는 것을 목적으로 하고 있고, 이를 위해 표준화가 필요한 영역에서의 보안 요구 사항과 그와 관련된 상호호환성을 보장하기 위한 다양한 영역의 표준화를 ITU-T SG17 Q15에서 진행 중에 있는데, 해당 실무반의 표준화 연혁과 현재 진행 중인 다양한 표준화 과제의 최신 표준화 현황을 살펴보았다.

• Journal of Industrial Convergence
• /
• v.20 no.3
• /
• pp.23-31
• /
• 2022

Recently, the importance of the role of the university information security department in nurturing security experts to defend against cyber attacks is increasing day by day. The current university security curriculum has a problem in that the proportion of theoretical education is high and the professionalism of practical education is relatively low. This study analyzed the recent educational programs of domestic and foreign security education institutions for the purpose of improving the practical ability of the Department of Security, designing a class model suitable for the core specialization process, and suggesting the direction. The proposed model improves the existing problems of basic class connection and security practice curriculum roadmap, and additionally explains the practice program of the five core specialized subjects. This study intends to contribute to the improvement of the quality of the curriculum and educational model of each university's security department.

• Convergence Security Journal
• /
• v.17 no.5
• /
• pp.179-186
• /
• 2017

The purpose of this study is to analyze the relation of security officers' martial arts training and job performance. To this end, we conducted surveys on security practitioners. The questionnaire consisted of three variables, "necessity of martial arts training, application to practical security work, improvement of job satisfaction". In this study for reliability analysis, Chronbach's Alpha coefficient was calculated. In order to verify the validity of the measured variables, exploratory factors were analyzed using the Berimax method. Both AVE and CR values of the measured variables were above the reference value of 0.5, indicating that the convergence validity was good. As a result of the hypothesis test, the standardization coefficient is 0.636 for "need for training in martial arts training${\Rightarrow}$practical security work", 0.986 for "practical security work${\Rightarrow}$job satisfaction improving", and the relationship between the two hypotheses is positive(+). In order to improve the job satisfaction of security-related practitioners, it seems necessary to raise the need for martial arts training.

• Korean Security Journal
• /
• no.59
• /
• pp.91-108
• /
• 2019

The purpose of this study is to investigate the relationship between the number of first aid training and safety performance. The researcher's questionnaire consisted of three variables: necessity of first aid education, application to security practice, and improvement of job satisfaction. In this study, Chronbach's Alpha coefficients were calculated to measure the internal validity for the reliability of the questionnaire. In order to verify the validity of the measured variables, exploratory factor analysis was carried out using the Berimax rotation method. The mean variance extracted AVE and the conceptual reliability CR value of the measurement result variables were both above the allowable reference value of 0.5 and it was judged to be a good test in terms of intensive validity. As a result of the hypothesis test, the standardization coefficient was 1.106 for 'necessity of first aid education ⇒ applied to security practice work', and 'applied to security work practice ⇒ improvement of job satisfaction' was 1.063 and the relationship of hypothesis 1 hypothesis 2 was significant (+), Respectively. Therefore, in order to increase the job satisfaction of security related workers, it is necessary to support first aid education and to receive first aid education.

• The Journal of Korean Association of Computer Education
• /
• v.17 no.3
• /
• pp.75-84
• /
• 2014

It is a current situation that a large number of physical and financial damages are increasing due to the growth of intellectual cyber crime and unexpected Internet incidents year by year. In the large scale security incidents, digital forensics techniques for computer crime investigations are essential to secure a place in the field. However, qualified digital forensics investigators who complete with digital security technology are practically insufficient in domestic. In this paper, as one of developing human resources plans regarding to scientific investigation of Internet security incidents, an undergraduate curriculum per stage in digital forensics was proposed. For the effective curriculum per stage, the interviews, group discussion on focused group of existing digital forensics investigators and related research were performed to select curriculum, and then the level of difficulty and practical suitability on each subject designed were analyzed through survey and interview to current investigators and security professionals. After collating the survey, the digital forensic curriculum per level was designed to highly adaptable workforce for the future for working and positive suggestions and proposals are addressed.

• Review of KIISC
• /
• v.24 no.4
• /
• pp.20-25
• /
• 2014

정보보안은 조직의 거버너스와 사회적 책임의 기본적인 구성요소의 하나다. 조직이 정보보안을 구현하고 관리하는 것은 일반적으로 기대되는 관리자의 책임이며, 많은 선진국에서는 투자자와 고객의 이익을 보호하고 안전한 거래 기반을 마련하기 위해 정보의 보안관리에 관한 다양한 법적 규제를 수립하여 강제 또는 권고하고 있다. 이러한 조직의 책임을 지원하고 최적의 실무를 제시하기 위하여 여러 국제기구에서 보안관리 표준화를 진행하고 있다. 보안관리 표준화 분야의 국제 표준화를 주도하고 있는 대표적인 표준화 기구로는 ISO와 ITU-T가 있다. 본 논문에서는 이 두 기구에서 진행되고 있는 보안관리 표준화 동향에 대한 정보를 제공하고자 한다.

• Journal of Platform Technology
• /
• v.9 no.2
• /
• pp.26-37
• /
• 2021

E-mail is one of the important tools for communicating with people in everyday life. With COVID-19 (Coronavirus) increasing non-face-to-face activity, security incidents through e-mail such as spam, phishing, and ransomware are increasing. E-mail security incidents are increasing as social engineering attack using human psychology rather than arising from technological weaknesses that e-mails have. Security incidents using human psychology can be prevented and defended by improving security awareness. This study empirically studies the analysis of changes in response to malicious e-mail due to improved security awareness through malicious e-mail simulations on executives and employees of domestic and foreign company. In this study, the factors of security training, top-down security management, and security issue sharing are found to be effective in safely responding to malicious e-mail. This study presents a new study by conducting empirical analysis of theoretical research on security awareness in relation to malicious e-mail responses, and results obtained from simulations in a practical setting may help security work.

• Journal of Digital Convergence
• /
• v.17 no.1
• /
• pp.141-148
• /
• 2019

The advancement of digital technology accelerates intelligence, convergence, and demands better change beyond traditional methods in all aspects of business models and technologies, infrastructure, processes, and platforms. Risk management is becoming more important because of various security risks, depending on the changing business environment and aligned to business goals is emerging from the existing information asset based risk management. For business aligned risk management, it is essential to understand the risk appetite for achieving business goals, which provides a basis for decision-making in subsequent risk management processes. In this paper, we propose a framework for analyzing the risk management framework, pre - existing risk analysis, and protection motivation theory that influences decisions on security risk management. To examine the practical feasibility of the developed risk appetite framework, we reviewed the applicability and significance of the proposed risk appetite framework through an advisory committee composed of security risk management specialists.

• Journal of the Institute of Electronics and Information Engineers
• /
• v.54 no.1
• /
• pp.46-52
• /
• 2017

Social attention to information security field is inspired, and manpower demand forecast of this area is getting high. This study surveyed information security knowledge of practitioners who work in a field of information security such as computer and network system. We analyzed a connection between survey data, information protection job system that was suggested by NICE, IT skills that NCS and KISA classified and security field classification system. Base on data that analyzed, this study suggests a curriculum that trains professional manpower who perform duties in the field of information security. Suggested curriculum can be applied to 2 year college, 3 year college and 4 year college. Suggested curriculum provides courses that students who want to work in a field of information security must learn during the college. Suggested courses are closely connected to a related field and detailed guideline is indicated to each course to educate. Suggested curriculum is required, and it combines a theoretical education that become basis and a practical education so that it is not weighted to learn theory and is not only focusing on learning simple commands. This curriculum is established to educate students countermeasures of hacking and security defend that based on scenario that connected to executive ability. This curriculum helps to achieve certificates related to a field more than paper qualification. Also, we expect this curriculum helps to train convergent information security manpower for next generation.