• Title/Summary/Keyword: Common Methodology

Search Result 654, Processing Time 0.026 seconds

CC를 적용한 시스템 보안평가 동향

  • 이경구;손경호
    • Review of KIISC
    • /
    • v.13 no.4
    • /
    • pp.25-36
    • /
    • 2003
  • 현재 미국을 비롯한 선진 국가에서는 ISO 국제 표준인 국제 공통 평가 기준 ISO/IEC 15408(CC v2.1, Common Criteria for Information Technology Security Evaluation))과 공통평가방법론(CEM, Common Methodology for Information Technology Security Evaluation)에 근거하여 IT 제품 및 시스템에 대한 보안성 평가를 하고 있다. 그러나, 현재 CC 및 CEM은 주로 IT 제품의 보안성 평가를 위한 것이며, 실제 IT 환경에서 운용되는 시스템에서 이를 적용해 평가하는데는 많은 어려움이 있다. ISO를 중심으로 각 국에서도 이와 관련해 시스템 평가에 CC를 적용하기 위한 방법론이 검토 중에 있다. 그리고 현재 개발 진행중이거나 시장에 출시된 많은 제품이 여러 단일 제품이 합성된 통합제품 형태로 구성되고 있는 추세이며, 이는 시스템 평가 문제와 더불어 향후 CC 기반의 평가를 활성화시키기 위해 풀어야 할 문제로 제기되고 있다. 본고에서는 각 국에서 추진 중인 시스템 평가 동향을 살펴보고, 현재 ISO/IEC SC27/WG3에 표준화로 제안된 "Security Assessment of Operational System"에 대해 살펴보고자 한다.자 한다.

공통평가기준(CC)과 공통평가방법론(CEM)의 변경내용 분석

  • 강연희;김정대;방영환;최성자;이강수
    • Review of KIISC
    • /
    • v.14 no.4
    • /
    • pp.68-77
    • /
    • 2004
  • 국가 사회 각 분야(정부, 공공기관 및 민간기관)의 정보보호시스템에 의한 정보처리 의존도가 증가하고 있으며 정보보호 수준강화를 위한 평가업무의 수요 또한 늘어가고 있다. 이에 발맞추어 현재 정보보호시스템 평가에 대한 상호인증을 위해 공통평가기준(CC : Common Criteria)과 공통평가방법론(CEM : Common Evaluation Methodology)을 사용하고 있다. 본 논문에서는 정보보호시스템의 신뢰성의 확보와 상호인증을 위한 지침으로써 CC와 CEM에 대한 변화과정 및 특징을 분석하였으며 앞으로 이를 반영한 국제동향에 능동적인 대처와 효율적인 평가에 기여할 것으로 기대된다. 또한, 평가참여자(평가신청자, 개발자, 평가자, 감독자 등)의 역할도 변화의 흐름에 유연하게 대응해야 하며 이러한 지식을 토대로 객관적이며 체계적인 평가계획을 수립하는데 이용할 수 있을 것이다.

Evaluation Guide of OSS-embedded Information Security System derived from CC/CEM (CC/CEM에서 유도한 오픈소스 내포형 정보보호시스템의 평가지침)

  • 강연희;김정대;최성자;이강수;윤여웅;이병권
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2004.10a
    • /
    • pp.397-399
    • /
    • 2004
  • 오늘날 조직에서 공개된 소프트웨어를 이용한 오픈소스 내포형 정보보호시스템(OSS-embedded Information Security System) 개발이 증가되고 있으며 소스의 상당부분을 오픈소스 소프트웨어(OSS : Open source Software)를 이용함으로써 복잡한 IT환경 속에서 효율성 증대와 고가의 라이센스에 대한 비용 절감 효과 등을 통해 높은 시장성이 예상된다. 그러므로 오픈소스 내포형 정보보호시스템에 대한 평가 제출물 준비 및 평가에 대한 기준을 정의할 필요가 있으며 공통평가기준(CC : Common Criteria)과 공통평가방법론(CEM : Common Evaluation Methodology)에서 유도한 OSS 평가요구사항을 분석하고자 한다.

  • PDF

Design of Product-Line Architecture based-on Common Architecture (공통 아키텍처 기반 제품계열 아키텍처 설계)

  • Oh, Young-Bae;Shin, Sung-Oog;Kim, Young-Gab;Baik, Doo-Kwon
    • Journal of Information Technology Services
    • /
    • v.5 no.2
    • /
    • pp.155-168
    • /
    • 2006
  • Software product line is a software product or a set of software system, which has common functions. We can develop a specific software product, which satisfies requirements of a particular market segment and a mission in a specific domain by reusing the core asset such as the developed software architecture through the software product line. Software development methodology based on the software product line can develop a software more easily and fast by reusing the developed software core asset. Developed countries of software technology select software product line as a core field of software production technology, and support technology development. In case of USA, CMU/SEI(Carnegie Mellon University/Software Engineering Institute) developed product-line framework 4.0 together with the industry and the Department of Defense. Europe is supporting the development of product line technology through ITEA(IT for European Advancement) program. However, industries in our country understand the necessity of software production technology based on product line concept for the purpose of increasing productivity, it is not sufficient to invest for this technology development. In this paper, we aim to construct the common architecture of software product line for production of the software product line.

A Study on the PN-Spatial Characteristics of Japanese Contemporary Architecture - Focused on the Projects of Four Contemporary Young Architects - (일본 현대 건축의 PN-space적 특징에 관한 연구 - 동시대의 신진 건축가 4인의 작품을 중심으로 -)

  • Seo, Sung-Min;Lim, Yeong-Hwan
    • Journal of the Architectural Institute of Korea Planning & Design
    • /
    • v.34 no.4
    • /
    • pp.45-55
    • /
    • 2018
  • The purpose of this study is to analyze common features and methodological differences of PN-spatial characteristics found in architectural theories and works of contemporary young architects in Japan, such as Sou Fujimoto, Yo shimada, Keisuke Maeda and Junya Ishigami. These architects have paid attention to space between nature and inner space and have tried to establish their own architectural theory on that. Such space is ambiguous and PN-spatial in a way that it has features of both nature and inner space. Ambiguousness is a characteristic of modern architecture and PN-spatial characteristics are one of the features of Japanese architecture. This study aims to analyze the architectural theories and works of contemporary young architects in Japan from the perspective of PN-space and to draw methodological differences and common features. Their theories and works have common features in terms of 'ambiguous spatial boundary', 'unregulated spatial territory', 'detoured circulation' and 'architectural motifs', but each has their own methodology. To sum up, the works and theories of the Japanese young architects contain the philosophy and discourse of modern architecture in general. To be sure, they clearly have characteristics of Japanese architecture, which needs to be studied constantly.

Air Quality Measurements and QC/QA (I) -Principles and Methodology (대기환경측정과 정도관리 (I)-원리와 방법론)

  • Baek Sung-Ok;Kim Ki-Hyun;Heo Gwi-Seok
    • Journal of Korean Society for Atmospheric Environment
    • /
    • v.20 no.2
    • /
    • pp.237-249
    • /
    • 2004
  • With the increasing concern over the air quality degradation, there are growing demands to accurately and precisely measure air quality. In this article, the general principles and approaches were described to help aid proper evaluation of air quality. In order to introduce the basic approaches for conducting field/laboratory experiments and for interpreting experimental data sets, we explained all the common methodologies involved and provided some insights into the desirable protocols for air quality measurements.

An Effective Analyzing Method of Process Capability (효과적(效果的)인 공정능력(工程能力)의 해석기법(解析技法)에 관한 연구(硏究))

  • Song, Seo-Il;Hwang, Ui-Cheol
    • Journal of Korean Society for Quality Management
    • /
    • v.15 no.1
    • /
    • pp.47-54
    • /
    • 1987
  • It is common that the process capability fluctuates as time passes, but concentrates to the mean value. To keep up process capability with given limits is vital to stability of process. Various control charts, especially ${\sigma}-chart$, have been used for analyzing process capability, but It sometimes can not give distinct answer. So this paper introduces another analyzing method by ARMA (autoregressive moving average) which is originally developed for forecasting, and demonstrates the analyzing methodology through a case study.

  • PDF

The Establishment of Train Operation Plan in Railway System (철도시스템의 운전계획 수립)

  • 이동근;고영호;권정원
    • Proceedings of the KSR Conference
    • /
    • 2002.10b
    • /
    • pp.929-936
    • /
    • 2002
  • This paper presents a Rotem's methodology for the establishment of train operation plan in Railway system. Train operation plan is the key prior plan to proceed the design of the civil and E&M relevant subsystem. But, due to the limitation of the environmental and project condition, common consensus to the key factors which make up the operation plan have not been accomplished. So, as a result of this comparative review for the general approaching method of train operation plan and application status of the major key factors being performed by Rotem, we will get the opportunities to improve the accuracy of the train operation plan.

  • PDF

On the Ship Design Procedure and its Computer Aids (선박설계(船舶設計)의 과정(過程)과 그 전산화(電算化)에 대하여)

  • S.H.,Han
    • Bulletin of the Society of Naval Architects of Korea
    • /
    • v.18 no.4
    • /
    • pp.31-40
    • /
    • 1981
  • Nowadays we needs the ship design ability strongly for our shipbuilding industry to attain the 2nd position among the competitive world marine industries. But we have short experience in ship design, so several ship design terminologies are used without clear understandings. Here, papers on ship design procedure and design methodology are summarized with some investigation about our present status. In addition, the state arts and new developments of Computer Aided ship Design in advanced ship building countries are treated. It is hoped that we-ship designers of our country-do have common understandings about the ship design terminologies.

  • PDF

A Data Modeling Methodology for CALS Environment (CALS 환경을 지원하는 데이터 모델링 방법론 개발)

  • 김중인;김철한;우훈식;임동순
    • The Journal of Society for e-Business Studies
    • /
    • v.5 no.2
    • /
    • pp.61-79
    • /
    • 2000
  • For CALS environment, sharing information among business processes within the enterprise and between enterprises have been increased through common database. To support integrated data environment, data of the local legacy system must coincide with data of the global system to guarantee data integrity and transparency. This study is concerned with the implementation of this distributed database system under CALS environment. Based on existing IDEF methods, we developed a modified method which newly includes concepts of the enterprise structure, the integration of legacy databases, the distribution of data, and the distributed applications .

  • PDF