사이버전 대비차원의 국방정보보호 관리체계 연구 = Research on the defense information security management system in preparation for cyber warfare

다국어 초록 (Multilingual Abstract)

The world's leading countries, including the United States, defined cyber warfare as the fifth battleground and are putting together organizations, human resources, and technological research in preparation for the cyber warfare. North Korea, a country that is still continuing a military confrontation with South Korea, especially have been preparing for the cyber war on the national scale. North Korea has already committed a number of cyber terrorism, including the Nong-hyup bank computer network disabling incident last year, and such provocations are continuing to threat South korea's security and its citizens' properties.
South Korea's anemic responses to cyber attacks in the past demonstrates that South Korea's preparation for the cyber warfare has been lacking. Thanks to the creation of the Cyber Command in January 2010, South Korea has fortifying organization and developing tactics for the cyber war. Government's such actions provided a sense of relief, but taking a closer look on such endeavor reveals the fact that research and development on various fields is still much needed.


This thesis is on the new Information Security Management System(ISMS) that provides timely response to cyber attacks and is appropriate for the defence information environment.
The main goal in developing the Defence-Information Security Management System(D-ISMS) was to create an infrastructure capable of information security management to prevent cyber attacks. The D-ISMS is designed to facilitate commanders of various levels of military unit to acknowledge their units' security levels, therefore enabling timely and active response to North Korea's cyber attack. In order to make this possible, the internationally recognized ISMS concept was adopted and befitted to military use by adjusting the restrictive categories and procedures. The overall D-ISMS process provides accurate and appropriate security countermeasures by testing the amount of risk involved through asset identification, asset value assessment, risk assessment, and vulnerability assessment according to the flow of risk management.
In order to test the feasibility and efficiency of the D-ISMS in a field unit, the system was tested in 00 division located on the front lines, and the test indicated that using the D-ISMS shortened the time of the measure the security level of the unit, and provided more accurate measure of the security level, therefore enabled a balanced information security management at all times.
Therefore, D-ISMS in an infrastructure that can accurately monitor unit's security level at all times and provide appropriate security countermeasures for the commander in the

era of incessant cyber warfare.

목차 (Table of Contents)

• Ⅰ. 서 론 1
• 1. 연구의 필요성 1 2. 연구범위 및 내용 2 3. 연구의 제한점 4
• Ⅱ. 사이버전 소개 6
• 1. 사이버전의 개념 6 2. 각국의 사이버전 부대 활동 9 3. 사이버전 사례 및 양상 18 4. 사이버전의 특징 21
• Ⅲ. 국방사이버전 대응 실태 24
• 1. 국방정보보호 동향 24 2. 국방정보화 기반체계 30 3. 정보보호 주요활동 32 4. 인력양성 및 전문화 교육 38 5. 관련 법규 및 제도 39 6. 국방 사이버전 대비 실태평가 45
• Ⅳ. 국방정보보호관리체계 수립을 위한 접근방법 50
• 1. 정보보호 아키텍처 개념과 정보보호관리체계(ISMS) 50 2. 국제적인 정보보호관리체계 소개 52 3. 정보보호관리체계에서의 위험관리 58 4. 정보보호관리체계 적용 효과 69
• Ⅴ. 국방정보보호관리체계 구축 70
• 1. 국방 보안환경하 ISMS의 적용 가능성 판단 70 2. 국방정보보호관리체계 구축 기본개념 73 3. 현행 부대보안활동과 정보보호관리체계의 사이클 비교 76 4. 국방정보보호관리체계에서의 위험관리 79 5. 국방정보보호관리체계 적용 결과 96
• Ⅵ. 결 론 105
• 참 고 문 헌 108
• 부 록 110
• ABSTRACT 144