• 융합보안논문지
• /
• 제15권5호
• /
• pp.53-59
• /
• 2015

정보통신기술의 급진적인 발달로 인해 우리 주위의 모든 사물들이 인터넷으로 연결되어 서로 정보를 주고받으며 각각의 사물들이 제공하던 것 이상의 새로운 가치를 제공하는 사물인터넷(IoT) 시대를 맞이하고 있다. 사물인터넷 환경에서는 기존과 다르게 인터넷에 연결되는 사물의 수가 급격히 증가하기 때문에 그만큼 보안 위협도 많아지게 될 것이다. 또한 셀 수 없이 많은 사물들을 어떻게 보호하고 관리할 것인지에 대해 새롭게 생각해 볼 필요가 있다. 본 논문에서는 기존의 보안 관제의 역할과 절차에 대해 살펴본다. 아울러 IoT 환경에서의 보안 관제의 방향에 대해 소개한다.

• Nuclear Engineering and Technology
• /
• 제53권10호
• /
• pp.3319-3326
• /
• 2021

As a form of industrial control systems (ICS), nuclear instrumentation and control (I&C) systems have been digitalized increasingly. This has raised in turn cyber security concerns. Cyber security for ICS is important because cyber-attacks against ICS can cause not only equipment damage and loss of production but also personal and public safety hazards unlike in general IT environments. Numerous risk analyses have been carried out to enhance the safety of ICS and recently, many studies related to the cyber security of ICS are being conducted. Many existing risk analyses and cyber security studies have considered safety and cyber security separately. However, both safety and cyber security perspectives should be considered when analyzing risks for complex and critical ICS facilities such as nuclear power plants (NPPs). In this paper, the STPA-SafeSec methodology is selected to consider both safety and security perspectives when performing a risk analysis for NPPs in order to assess impacts on the safety by cyber-attacks against the digital I&C systems. The STPA-SafeSec methodology was applied to a test-bed system that simulates a condensate water (CD) system in an NPP. The process of the application up to the development of mitigation strategies is described in detail.

• Nuclear Engineering and Technology
• /
• 제55권6호
• /
• pp.2034-2046
• /
• 2023

Industrial control systems in nuclear facilities are facing increasing cyber threats due to the widespread use of information and communication equipment. To implement cyber security programs effectively through the RG 5.71, it is necessary to quantitatively assess cyber risks. However, this can be challenging due to limited historical data on threats and customized Critical Digital Assets (CDAs) in nuclear facilities. Previous works have focused on identifying data flows, the assets where the data is stored and processed, which means that the methods are heavily biased towards information security concerns. Additionally, in nuclear facilities, cyber threats need to be analyzed from a safety perspective. In this study, we use the system theoretic process analysis to identify system-level threat scenarios that could violate safety constraints. Instead of quantifying the likelihood of exploiting vulnerabilities, we quantify Security Control Measures (SCMs) against the identified threat scenarios. We classify the system and CDAs into four consequence-based classes, as presented in NEI 13-10, to analyze the adversary impact on CDAs. This allows for the ranking of identified threat scenarios according to the quantified SCMs. The proposed framework enables stakeholders to more effectively and accurately rank cyber risks, as well as establish security and response strategies.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제10권8호
• /
• pp.3826-3851
• /
• 2016

With traditional data storage solutions becoming too expensive and cumbersome to support Big Data processing, enterprises are now starting to outsource their data requirements to third parties, such as cloud service providers. However, this outsourced initiative introduces a number of security and privacy concerns. In this paper, homomorphic encryption is suggested as a mechanism to protect the confidentiality and privacy of outsourced data, while at the same time allowing third parties to perform computation on encrypted data. This paper also discusses the challenges of Big Data processing protection and highlights its differences from traditional data protection. Existing works on homomorphic encryption are technically reviewed and compared in terms of their encryption scheme, homomorphism classification, algorithm design, noise management, and security assumption. Finally, this paper discusses the current implementation, challenges, and future direction towards a practical homomorphic encryption scheme for securing outsourced Big Data computation.

• 정보학연구
• /
• 제1권2호
• /
• pp.229-244
• /
• 1998

전자문서 전자영수증 대금결제 서명 및 상호인증 등 전자상거래의 거의 모든 영역에서 사용되고 있는 전자서명의 경우에는 특히, 거래 상대방을 확인할 수 있는 확인 절차와 더불어 안전하고 신뢰성 있는 보안시스템의 구축을 위한 암호화가 필요하게 된다. 따라서 전자서명의 일반적 고찰과 관련하여 각국에서 제정되고 있는 법규는 물론 전자서명에 따른 보안문제를 고찰하고자 한다.

• Journal of information and communication convergence engineering
• /
• 제9권5호
• /
• pp.562-566
• /
• 2011

As telecommunication technologies in telemedicine services are developed, the expeditious development of wireless and mobile networks has stimulated wide applications of mobile electronic healthcare systems. However, security is an essential system requirement since many patients have privacy concerns when it comes to releasing their personal information over the open wireless channels. Due to the invisible feature of mobile signals, hackers have easier access to hospital networks than wired network systems. This may result in several security incidents unless security protocols are well prepared. In this paper, we analyzed authentication and authorization procedures for healthcare system architecture to apply secure M-health systems in the hospital environment. From the analyses, we estimate optimal requirements as a countermeasure to its vulnerabilities.

• 한국멀티미디어학회논문지
• /
• 제21권8호
• /
• pp.909-916
• /
• 2018

Cloud storage services have many advantages. As a result, the amount of data stored in the storage of the cloud service provider is increasing rapidly. This increase in demand forces cloud storage providers to apply deduplication technology for efficient use of storages. However, deduplication technology has inherent security and privacy concerns. Several schemes have been proposed to solve these problems, but there are still some vulnerabilities to well-known attacks on deduplication techniques. In this paper, we examine some of the existing schemes and analyze their security weaknesses.

• Journal of information and communication convergence engineering
• /
• 제6권3호
• /
• pp.348-352
• /
• 2008

In distributed computing paradigm, mobile surrogate systems migrates from on host in a network to another. However, Mobile surrogate system have not gained wide acceptance because of security concerns that have not been suitably addressed yet. In this paper, we propose a security framework based on Grid Proxy Gateway for mobile Grid service. The current Grid Security Infrastructure is extended to mobile computing environments. The surrogate host system designed for mobile Personal Digital Assistant (PDA) users can access the certified host and get his proxy credential to launch remote job submission securely.

• 대한전자공학회:학술대회논문집
• /
• 대한전자공학회 2008년도 하계종합학술대회
• /
• pp.63-64
• /
• 2008

The mobile RFID (Radio Frequency Identification) is a new application to use mobile phone as RFID reader with a wireless technology and provides new valuable services to user by integrating RFID and ubiquitous sensor network infrastructure with mobile communication and wireless internet. However, there are an increasing number of concerns, and even some resistances, related to consumer tracking and profiling using RFID technology. Therefore, in this paper, we describe the security analysis and implementation leveraging globally networked mobile RFID services which complies with the Korea's mobile RFID forum standard.

• 조명전기설비학회논문지
• /
• 제16권3호
• /
• pp.7-14
• /
• 2002

경제급전은 전력회사간에 생산된 전력을 사고 파는 경우에 필연적으로 고려해야 한다. 본 논문은 전력계통 안전도, 최적조류계산과 안전도를 고려한 경제급전을 설명하고, 상용화된 EDSA의 active optimal power flow 프로 그램을 이용한 사례연구를 통하여 최적의 경제급전이 되었음을 검증하였다.