• 디지털산업정보학회논문지
• /
• 제9권3호
• /
• pp.99-106
• /
• 2013

There has been a lot of growth more than 10% in the information security industry. In accordance with the industrial growth, it increased needs for the information security manpower development as a national problem. But there is an imbalance between demand and supply of the information security manpower in terms of the quantity and quality. It is mainly caused by the curriculum of the information security is made considering for suppliers not for demanders. As a resolution to solve this problem, we suggest the curriculum of information security for vocational education and training. As the information security area is wide in view of required knowledge and technology, we design the curriculum by selecting major occupation type from the information security manpower distribution and products and then by investigating the job description using NCS(National Competency Standard). And we compared the curriculum to that of two or three year diploma courses in Korea.

• 시큐리티연구
• /
• 제40호
• /
• pp.175-207
• /
• 2014

산업보안관리사는 현재 민간자격이지만 향후 국가자격화 되어 현장에서 적절하게 활용 가능한 인력인지 여부에 대하여 국가적으로 공신력이 부여될 필요가 있다. 공신력 확보를 위한 운용방안 중 고려할 수 있는 것이 등급제이다. 현재와 같이 단일등급제로 운용할 경우 양적 확산에 초점을 두게 될 가능성이 있다. 따라서 질적 혁신 차원에서 산업보안관리사의 등급제도 활용도를 장기적인 관점에서 검토하여 등급을 구분할 필요가 있다. 한편, 산업보안 현장 실무자의 산업보안관리사 자격시험에 응시할 수 있는 요건, 산업보안 실무연수 과정 이수, 민간자격을 이미 취득한 인력의 경우 국가자격 승계문제도 중요한 고려 사항중 하나이다. 산업보안관리사제도가 활성화 되기 위해서는 국가자격화를 통한 공신력 확보뿐만 아니라 산업보안관리사의 인력의 수요창출이 필요하다. 현재 증가하는 산업기술유출에 대한 우려에도 불구하고 우리기업 등의 보안관리체계의 미비 등 산업보안대응 역량이 상당히 취약한 실정임을 고려할 때, 산업기술 보호에 특화된 산업보안관리체계에 대한 인증을 기존의 정보보호관리체계인증과 별개로 도입할 필요성이 있다. 산업보안 관리체제 인증제도와 산업보안관리사 자격제도가 연동될 때 국가핵심기술 등을 다루는 기업체, 연구기관 등의 산업보안이 실질적으로 이루어져 시너지 효과가 발생할 것이다.

• Asia pacific journal of information systems
• /
• 제32권4호
• /
• pp.803-829
• /
• 2022

With the advances in technology and the trend towards increased computer-based experiential learning in education settings, business games are being increasingly used by business educators. This article utilizes Toulmin's Sensemaking Framework to investigate the sensemaking process of business professionals to reveal how they consciously reason about the value of business games for learning complex business concepts and principles. Using the analysis of responses from 43 business professionals, our study identifies key areas where business professionals find value in business games and the limitations of using business games. First, business games are found to be an effective tool when teaching practical business skill sets to business professionals. Second, business games enhance the overall learning process in professional business training. Third, despite the advantages, some pitfalls in applying business games to practice are found. We also found sub-themes, claims, and argument patterns of how business professionals evaluate the value of business games through a grounded theory qualitative analysis method. Analysis results show several ground-warrant patterns exist in the arguments on values of business games including general principle - causal reasoning, personal experience - generalization, and personal projection - generalization. With these findings, we believe this paper contributes to the theory and practice of business game design, development, and the game playing and learning process.

• Asia pacific journal of information systems
• /
• 제14권4호
• /
• pp.71-85
• /
• 2004

Due to exponentially growing threats of cyber attacks, many organizations have begun to recognize the importance of information security. There is an explosion in demand for experienced ISMs(Information Security Managers) and ISSDs(Information Security System Developers). To educate ISMs and ISSDs, identifying the specific knowledge and skill for information security professional is critical. This paper identifies 15 items of knowledge and skill for ISMs and ISSDs using a simplified Delphi technique and categories them. The results of this paper could be used in determining what kinds of knowledge and skill should be included in the curriculum of information security programs.

• Journal of Information Science Theory and Practice
• /
• 제5권1호
• /
• pp.47-64
• /
• 2017

Purpose: This study aims to assess the level of job satisfaction among the practicing Library and Information Science (LIS) professionals in India. Some of the key variables studied include salary, work environment, professional position, working hours, location, employee participation in administrative matters, recognition, and advancement. Scope: The study is limited to LIS professionals in India; however, the results of the study show some degree of commonality among LIS professionals across the world. Methodology/Approach: The study has been purely undertaken by analyzing the primary data collected from practicing library and information professionals across India by circulating an online questionnaire, using Google services and by posting the link on various social groups and other social networking sites such as Groups, Facebook, LinkedIn, discussion forums, and e-mails. Findings: Responses were generated across 20 states and union territories of the country, representing 88.15% territory of India. Of the total responses generated, 72.88% are males and 27.12% females. From the data analysis it emerged that every third library professional in India enters in to LIS profession by chance and not by choice, as 35.59% respondents expressed that they landed in the LIS profession by chance and 60.45% by choice. More than 77% respondents have expressed their willingness to change their present employer, if given better opportunity. More than 80% professionals either fully or partly agree that most of the LIS professionals across India are dissatisfied with their employers. All these and many more areas have been explored, which reflect the aspects of job satisfaction and dissatisfaction among LIS professionals in India.

• 정보보호학회논문지
• /
• 제22권2호
• /
• pp.295-316
• /
• 2012

최근 정보화 사회에서 사이버 정보 보호는 가장 중요한 분야로 대두 되고 있는 가운데 전문적인 정보 보호 인력에 대한 수요는 전 세계적으로 빠르게 증가 하고 있다. 전문적이고 능력 있는 정보 기술 인력의 보유는 정보화 사회에서 향후 경쟁력과 리더십을 얻는데 매우 중요한 이슈이다. 본 연구는 대학에서 정보 보호와 관련한 전공을 선택한 학생들을 중심으로 어떠한 요인들이 그들의 전공선택과 향후 정보보안과 관련한 직업을 선택하게 하는데 영향을 미치는 지를 분석 하였다. 문헌 고찰을 통해 학생들이 전공 선택과 직업선택에 관한 영향을 미칠 수 있는 대표적인 요인들을 도출하고 이 요인들과 학생들의 전공 및 직업선택과의 관계를 실증적으로 검증 하였다. 본 연구의 연구 결과는 향후 우리 사회가 보다 우수하고 전문적인 정보 보호 인력을 양성하고 유지하는 데에 기여 할 수 있을 것이다.

• 한국전자거래학회지
• /
• 제24권2호
• /
• pp.29-53
• /
• 2019

현재까지 운영되고 있는 55개의 보안관련 학과들 중 정보보안학과는 총 45개로 압도적으로 많은 비중을 차지하고 있다. 기존의 보안은 이처럼 정보보안과 같은 기술 중심의 보안에 집중하고 있었으니 최근 들어 융합적인 관점에서 보안을 이해하고 적용하는 산업보안이 관심을 받고 있다. 산업보안 전문가를 양성하기 위한 산업보안 학과 역시 2014년에 처음 개설된 이후 현재까지 4개의 학과가 개설되었다. 기존의 문제를 해결하기 위해 새로운 학문분야가 생겨나고 관련 인력이 양성되는 것은 축하할 일이나 산업보안에 관한 정의가 하나로 구체화 되어 있지 않고 융합이라는 학문적 특성을 수용하기 위해서는 교육 과목에 관한 논의 역시 더 필요한 상황이다. 하지만 산업보안 전문 인력에 대한 수요는 꾸준히 증가하고 있으며 이에 대응하기 위해 산업보안 학과들이 꾸준히 개설되고 있다. 이러한 상황에서 과연 대학에서는 어떠한 산업보안 교육이 이루어지고 있는지 확인해 볼 필요가 있다. 본 연구는 4개의 산업보안 학과들의 교육 커리큘럼을 분석하여 학과들 간 어떤 공통점과 차이점이 있는지 확인하여 현재의 산업보안 교육 현황을 분석하고자 한다. 이를 위해 총 127개의 과목들을 대상으로 분석을 진행하여 각 과목들의 교육영역을 파악하고 사회네트워크분석(Social Network Analysis)을 활용하여 각 학과들의 과목들 간 관계성을 파악했다. 그 결과 각 학과들이 집중하고 있는 교육영역은 매우 상이하며 같은 교육영역 내의 과목들조차 공통적인 요소들이 매우 적은 것으로 나타났다.

• 한국정보통신학회:학술대회논문집
• /
• 한국정보통신학회 2012년도 추계학술대회
• /
• pp.154-156
• /
• 2012

This paper presents a user authentication scheme for healthcare application using wireless medical sensor networks, where wireless medical sensors are used for patients monitoring. These medical sensors' sense the patient body data and transmit it to the professionals (e.g., doctors, nurses, and surgeons). Since, the data of an individual are highly vulnerable; it must ensures that patients medical vital signs are secure, and are not exposed to an unauthorized person. In this regards, we have proposed a user1 authentication scheme for healthcare application using medical sensor networks. The proposed scheme includes: a novel two-factor professionals authentication (user authentication), where the healthcare professionals are authenticated before access the patient's body data; a secure session key is establish between the patient sensor node and the professional at the end of user authentication. Furthermore, the analysis shows that the proposed scheme is safeguard to various practical attacks and achieves efficiency at low computation cost.

• 산업기술연구
• /
• 제31권A호
• /
• pp.113-118
• /
• 2011

Federal Information Security Management Act emphasizes the importance of information security to the economic and national security interests of the United States. This paper provides a brief review on FISMA which is a United States federal law enacted in 2002 as Title III of the E-Government Act of 2002, and predicts the possible problems which might be caused from domestic introduction of FISMA. The domestic introduction of FISMA could improve the average level of information security of government agencies. Whereas, the government agencies and the government officials might face with many problems such as the increased government budget, lack of social awareness and security professionals, and the effectiveness of penalty on non-compliance.

• International Journal of Computer Science & Network Security
• /
• 제24권4호
• /
• pp.155-162
• /
• 2024

Anonymity online has been an ever so fundamental topic among journalists, experts, cybersecurity professionals, corporate whistleblowers. Highest degree of anonymity online can be obtained by mimicking a normal everyday user of the internet. Without raising any flags of suspicion and perfectly merging with the masses of public users. Online Security is a very diverse topic, with new exploits, malwares, ransomwares, zero-day attacks, breaches occurring every day, staying updated with the latest security measures against them is quite expensive and resource intensive. Network security through anonymity focuses on being unidentifiable by disguising or blending into the public to become invisible to the targeted attacks. By following strict digital discipline, we can avoid all the malicious attacks as a whole. In this paper we have demonstrated a proof of concept and feasibility of securing yourself on a network by being anonymous.