• Title/Summary/Keyword: 보안실무

Search Result 132, Processing Time 0.023 seconds

The Factors Affecting Acceptance of Mobile App Service : Using Extending UTAUT for Real Estate Service (모바일 앱 서비스에 대한 서비스 수용 : 부동산 중개서비스에 대한 확장된 UTAUT모형 시각에서의 접근)

  • Park, Yoonjoo;Choe, Yoowha
    • The Journal of the Convergence on Culture Technology
    • /
    • v.6 no.3
    • /
    • pp.327-334
    • /
    • 2020
  • Recently, mobile and smart devices are rapidly spreading. As a result, real estate services, which were formerly face-to-face, have now been replaced by mobile environments. This study focuses on the real estate app service and 261 samples were used for the empirical analysis. The results of the hypotheses test using structural equation model are summarized as follows. First, performance expectancy, facilitating conditions, security and aesthetic perceived by users of real estate services have positively influence on positive attitude, but effort expectancy and social influence do not. Second, positive attitude of real estate services have positive effects on service Acceptance. Third, involvement moderated the relationship between positive attitude and service Acceptance. Based on the results of the analysis, it provided meaningful implications for practitioners and researchers in related fields.

A Study of Factors Affecting Attitude Towards Using Mobile Cloud Service (모바일 클라우드 서비스 이용태도에 영향을 미치는 요인 연구)

  • Kim, Su-Yeon;Lee, Sang Hoon;Hwang, Hyun-Seok
    • Journal of Korea Society of Industrial Information Systems
    • /
    • v.18 no.6
    • /
    • pp.83-94
    • /
    • 2013
  • As smart devices have proliferated and mobile networks have accelerated, various wired IT(Information Technology) services are transplanted in wireless environments. Cloud computing service, enabling individual users or firm users to download data from a server and upload data after manipulating data, is also available in mobile devices. Unlike cloud service in wired network environments, mobile cloud service provides differentiated aspects in mobility, security issues caused by persistent connection to networks. In this paper we aim to analyze the factors affecting the user attitude and their structural relationships towards mobile cloud service use. We extend TAM(Technology Acceptance Model) to consider the characteristics of mobile environments. Research findings, analyzed by SEM(Structural Equation Model), are explained and practical implications are presented with concluding remarks.

A Study on the Improvement of the Military Studies Curriculum at the Civilian Universities (일반대학 군사학 교육과정 개선에 관한 연구)

  • Kim, Jong Ryul
    • Convergence Security Journal
    • /
    • v.13 no.2
    • /
    • pp.121-131
    • /
    • 2013
  • It has been almost 10 years since the department of military studies was opened at the civilian universities. One of the important elements for the success of these new departments would be the curriculum. This paper tries to give an realistic answer to the question of curriculum. The factors influencing the design of curriculum of military studies are analyzed, such as the curricular of the military institutes that confer the B.S. in military studies, the domain of military studies and research areas, documentation classification of military studies and military engineering, scientific knowledge versus vocational capabilities in university education, relations between the B.S. courses and the master or doctorate courses, requirements asked by the Army, and moral education needed for the military officers. As a result of the analysis, the mandatory core courses should be total of 19, including 5 general courses and 14 major courses.

How to Cope with Ransomware in the Healthcare Industry (의료산업에서의 랜섬웨어 대응 방법)

  • Jeon, In-seok;Kim, Dong-won;Han, Keun-hee
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.28 no.1
    • /
    • pp.155-165
    • /
    • 2018
  • As medical healthcare industry is growing up rapidly these days, providing various new healthcare service is considered carefully. Health information is considered to be more important than financial information; therefore, protecting health information becomes a very significant task. Ransomware is now targeting industry groups that have high information value. Especially, ransomware has grown in various ways since entering maturity in 2017. Healthcare industry is highly vulnerable to ransomeware since most healthcare organizations are configured in closed network with lack of malware protection. Only meeting the security criteria is not the solution. In the case of a successful attack, restoration process must be prepared to minimize damages as soon as possible. Ransomware is growing rapidly and becoming more complex that protection must be improved much faster. Based on ISO 27799 and 27002 standard, we extract and present security measures against advanced ransomware to maintain and manage healthcare system more effectively.

An Account Management System on IOT Devices (사물인터넷 디바이스의 계정 관리 시스템)

  • Choi, Changwon;Chung, Hyuncheol
    • Journal of Internet of Things and Convergence
    • /
    • v.7 no.1
    • /
    • pp.71-77
    • /
    • 2021
  • As the IOT technology has developed, it becomes more big issues about IOT device security. An account management is a nerve-in-the-box routine job for the system administrator and users who manage the several hundreds IOT devices(IP camera, Home IOT, the various measuring equipment). This study is to propose the account management system by the hierarchical design and it is efficient for the user to manipulate the account management. The designed system supports 6 functions for the account management and apply the advanced technologies for the existed system. After the performance of the designed system is validated successfully by the authoritative test, the designed system is applied for the relative fields. And it is on going for the development of the smart account management system by applying the AI technique.

Application of Knowledge Management to Defense Organizations: Issues and Implications (지식경영의 국방조직에 대한 적용 : 최신 이슈 및 연구시사점)

  • Yang, Sung-Byung;Koh, Joon
    • Journal of the military operations research society of Korea
    • /
    • v.34 no.1
    • /
    • pp.99-115
    • /
    • 2008
  • This paper introduces the concept of knowledge management(KM) and current KM trend(such as community-of-practice, knowledge ecology, and social network analysis) with some successful KM practices, and discusses a chance to apply KM to defense organizations. Although defense organizations have several unique characteristics which differ from other private organizations such as critical security issues, implementing KM initiatives for them seems essential. Implications and future research directions are also discussed.

A Study on Data Acquisition and Analysis Methods for Mac Memory Forensics (macOS 메모리 포렌식을 위한 데이터 수집 및 분석 방법에 대한 연구)

  • Jung Woo Lee;Dohyun Kim
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.34 no.2
    • /
    • pp.179-192
    • /
    • 2024
  • macOS presents challenges for memory data acquisition due to its proprietary system architecture, closed-source kernel, and security features such as System Integrity Protection (SIP), which are exclusive to Apple's product line. Consequently, conventional memory acquisition tools are often ineffective or require system rebooting. This paper analyzes the status and limitations of existing memory forensics research and tools related to macOS. We investigate methods for memory acquisition and analysis across various macOS versions. Our findings include the development of a practical memory acquisition and analysis process for digital forensic investigations utilizing OSXPmem and dd tools for memory acquisition without system rebooting, and Volatility 2, 3 for memory data analysis.

A study on primary control area for information security management system (ISMS): focusing on the finance-related organizations (정보보호 관리체계를 위한 주요 통제영역 연구: 금융 관련 조직을 중심으로)

  • Kang, Youn-chul;Ahn, Jong-chang
    • Journal of Internet Computing and Services
    • /
    • v.19 no.6
    • /
    • pp.9-20
    • /
    • 2018
  • Financial service industry has introduced and operated management systems such as information security management system (ISMS), personal information security management system, business continuity management system to protect and maintain suitably customer's financial information and financial service. This study started that it's desirable financial industry takes consideration of ISMS and it can be different types among various organizations taking consideration of culture, practical work, and guideline of information security. The study derives primary control areas of ISMS through analyzing non-conformity trends and control factors according to certification audit for finance-related organizations introduced international ISMS of ISO27001 which is well known and commonly applicable irrespective of areas in financial service industry. Through case analyses for five finance-related organizations operating ISMS, this study analyzed improvement effects of ISMS. It has a meaning as an initial research though it was difficulty in acquiring data for empirical study because of rare organizations maintaining certification in financial sector. As a result, number of non-confirmity from the first audit to three years' elapse was decreased every year. Physical and environmental security, communication and operations management, and access control having the highest frequency of non-conformity each presented 23%, 19%, and 17%, which reached 59% in total and they are derived into primary control areas. ISMS can fulfill technical, managerial, physical security issues, which have not been treated importantly in financial industry. In addition, this study presented that ISMS can be an effective management system applicable for financial service industry.

The Role of Control Transparency and Outcome Feedback on Security Protection in Online Banking (계좌 이용 과정과 결과의 투명성이 온라인 뱅킹 이용자의 보안 인식에 미치는 영향)

  • Lee, Un-Kon;Choi, Ji Eun;Lee, Ho Geun
    • Information Systems Review
    • /
    • v.14 no.3
    • /
    • pp.75-97
    • /
    • 2012
  • Fostering trusting belief in financial transactions is a challenging task in Internet banking services. Authenticated Certificate had been regarded as an effective method to guarantee the trusting belief for online transactions. However, previous research claimed that this method has some loopholes for such abusers as hackers, who intend to attack the financial accounts of innocent transactors in Internet. Two types of methods have been suggested as alternatives for securing user identification and activity in online financial services. Control transparency uses information over the transaction process to verify and to control the transactions. Outcome feedback, which refers to the specific information about exchange outcomes, provides information over final transaction results. By using these two methods, financial service providers can send signals to involved parties about the robustness of their security mechanisms. These two methods-control transparency and outcome feedback-have been widely used in the IS field to enhance the quality of IS services. In this research, we intend to verify that these two methods can also be used to reduce risks and to increase the security protections in online banking services. The purpose of this paper is to empirically test the effects of the control transparency and the outcome feedback on the risk perceptions in Internet banking services. Our assumption is that these two methods-control transparency and outcome feedback-can reduce perceived risks involved with online financial transactions, while increasing perceived trust over financial service providers. These changes in user attitudes can increase the level of user satisfactions, which may lead to the increased user loyalty as well as users' willingness to pay for the financial transactions. Previous research in IS suggested that the increased level of transparency on the process and the result of transactions can enhance the information quality and decision quality of IS users. Transparency helps IS users to acquire the information needed to control the transaction counterpart and thus to complete transaction successfully. It is also argued that transparency can reduce the perceived transaction risks in IS usage. Many IS researchers also argued that the trust can be generated by the institutional mechanisms. Trusting belief refers to the truster's belief for the trustee to have attributes for being beneficial to the truster. Institution-based trust plays an important role to enhance the probability of achieving a successful outcome. When a transactor regards the conditions crucial for the transaction success, he or she considers the condition providers as trustful, and thus eventually trust the others involved with such condition providers. In this process, transparency helps the transactor complete the transaction successfully. Through the investigation of these studies, we expect that the control transparency and outcome feedback can reduce the risk perception on transaction and enhance the trust with the service provider. Based on a theoretical framework of transparency and institution-based trust, we propose and test a research model by evaluating research hypotheses. We have conducted a laboratory experiment in order to validate our research model. Since the transparency artifact(control transparency and outcome feedback) is not yet adopted in online banking services, the general survey method could not be employed to verify our research model. We collected data from 138 experiment subjects who had experiences with online banking services. PLS is used to analyze the experiment data. The measurement model confirms that our data set has appropriate convergent and discriminant validity. The results of testing the structural model indicate that control transparency significantly enhances the trust and significantly reduces the risk perception of online banking users. The result also suggested that the outcome feedback significantly enhances the trust of users. We have found that the reduced risk and the increased trust level significantly improve the level of service satisfaction. The increased satisfaction finally leads to the increased loyalty and willingness to pay for the financial services.

  • PDF

Determination of Optimal Operation Water Level of Rain Water Pump Station using Optimization Technique (최적화 기법을 이용한 빗물펌프장 최적 운영수위 결정)

  • Sim, Kyu-Bum;Yoo, Do-Guen;Kim, Eung-Seok
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.19 no.7
    • /
    • pp.337-342
    • /
    • 2018
  • A rain water pumping station is a structural countermeasure to inland flooding of domestic water generated in a urban watershed. In this study, the optimal operation water level of the pump with the minimum overflow was determined based on the opinions of the person in charge of the operation of the rain water pump station. A GA (Genetic Algorithm), which is an optimization technique, was used to estimate the optimal operation water level of the rain water pump station and was linked with SWMM (Ver.5.1) DLL, which is a rainfall-runoff model of an urban watershed. Considering the time required to maximize the efficiency of the pump, the optimal operating water level was estimated. As a result, the overall water level decreased at a lower operating water level than the existing water level. For most pumps, the lowest operating water level was selected for the operating range of each pump unit. The operation of the initial pump could reduce the amount of overflow, and there was no change in the overflow reduction, even after changing the operation condition of the pump. Internal water flooding reduction was calculated to be 1%~2%, and the overflow occurring in the downstream area was reduced. The operating point of the pump was judged to be an effective operation from a mechanical and practical point of view. A consideration of the operating conditions of the pump in future, will be helpful for improving the efficiency of the pump and to reducing inland flooding.