데이터 위탁이 없는 SaaS 구현을 위한 보안 시스템

다국어 초록 (Multilingual Abstract)

SaaS, ERP and CRM have been fused together to become SaaS ERP and SaaS CRM in cloud computing. Even though they provide advanced services than before, companies must entrust their inside information to SaaS provider. And the threats for entrusted information disturb to use SaaS ERP and SaaS CRM. We analyzed threats for SaaS by attack scenarios, and proposed a secure system which store company’s data to database in DMZ. Companies need not entrust their information to SaaS provider. We encrypted information of database with fully homomorphic encryption to guarantee security. Since Fully Homomorphic Encryption is cryptographic System that makes operation possible without having to decrypt encrypted data, It is expected to fit in environments without data consignment.

참고문헌 (Reference)

1 김세환, "클라우드 컴퓨팅 환경에서의 개인정보보호를 위한 완전 동형 암호 적용 방안 고찰" 한국정보보호학회 24 (24): 941-949, 2014

2 Paul D. Hamerman, "The SaaS ERP Applications Landscape" Forrester Research 2015

3 Software Policy & Research Institute, "Software Industry Annual Report 2014" 2015

4 Rack-Cheol Kim, "Security Requirements for Cloud Services" 430-434, 2012

5 Jong-sun Pack, "SaaS that will lead growth to the cloud markets is coming!, In Eugene Investment &Securities analysis" 1-78, 2015

6 Ministry of Science, "ICT and Future Planning, In K-ICT Cloud Computing Activation Plan" 2015

7 Fumei Weng, "Competition and Challenge on Adopting Cloud ERP" 5 (5): 309-313, 2014

8 Doo-Hyon Kim, "Cloud Computing Technology Composition and Current State" 164 : 50-55, 2016

9 Kyung-jin Yu, "Analysis of Cloud Introduction Issue in Korea : Focusing on policies related leading countries" Samjong KPMG ERI Inc 3-28, 2016

10 Pradeep Kumar Tiwari, "A Review of Data Security and Privacy Issues over SaaS" 2014