국내 IoT 보안인증 제도 개선 연구 = A Research on the improvement of domestic IoT security certification system

다국어 초록 (Multilingual Abstract)

In a society where ICT technology is converged, the use of various network-connected devices such as IoT is spreading. Network-connected devices are inevitably exposed to the threat of hacking such as information leakage, and countermeasures need to be prepared to respond. Security certification system for IoT devices has been introduced to promote security of IoT products, and for this purpose, legalization and standardization of certification standards and methods are in progress. In line with this, in Korea, as the Information and Communication Network Act was revised in 2020, ICT convergence devices connected to the network were newly defined as "information and communication network connected devices," and the basis for the security certification system is being established. We summarized related domestic and foreign trends and suggest specific considerations for implementing the security certification system for IoT devices in South Korea.

참고문헌 (Reference)

1 한국인터넷진흥원, "사물인터넷(IoT) 보안 시험·인증기준 해설서 [Lite]"

2 한국인터넷진흥원, "사물인터넷(IoT) 보안 시험·인증기준 해설서 [Basic]"

3 한국인터넷진흥원, "사물인터넷(IoT) 보안 시험·인증 기준 해설서 [Standard]"

4 "https://www.sans.org/summit-archives/file/sum mit-archive-1521575758.pdf"

5 "https://www.nist.gov/blogs/cybersecurity-insi ghts/rounding-your-iot-security-requirements-dr aft-nist-guidance-federal"

6 "https://www.law.go.kr"

7 "https://www.ksecurity.or.kr/user/bbs/kisis/66/312/bbsDataView/10176.do?page=2&column=&search=&searchSDate=&searchEDate=&bbsDataCategory="

8 "https://www.kisa.or.kr/public/laws/laws3.jsp"

9 "https://www.idc.com/getdoc.jsp?containerId=prAP 46 180120"

10 "https://www.etsi.org/deliver/etsi_en/303600_303699/303645/02.01.01_60/en_303645v020101p.pdf"

11 "https://www.enisa.europa.eu/topics/standards/Pu blic-Consultations/public-consultations-cybersec urity-schemes"

12 "https://www.cybersecuritysummit.org/wp-cont ent/uploads/2017/10/4.00-Justin-Heyl.pdf"

13 "https://www.csa.gov.sg/-/media/csa/documents /sccs/cybersecurity_certification_guide_v2.pdf"

14 "https://www.congress.gov/116/plaws/publ207/PL AW-116publ207.pdf"

15 "https://www.cisco.com/c/en/us/solutions/collater al/executive-perspectives/annual-internet-report/white-paper-c11-741490.pdf"

16 "https://tietoturvamerkki.fi/en/products/"

17 "https://productiq.ulprospector.com/en"

18 "https://olis.leg.state.or.us/liz/2019R1/Downloads /MeasureDocument/HB2395/Enrolled"

19 "https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST. IR.8259D-draft.pdf"

20 "https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST. IR.8259C-draft.pdf"

21 "https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST. IR.8259B-draft.pdf"

22 "https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST. IR.8259A.pdf"

23 "https://nvlpubs.nist.gov/nistpubs/ir/2020/NIST. IR.8259.pdf"

24 "https://nvlpubs.nist.gov/nistpubs/SpecialPublicat ions/NIST.SP.800-213-draft.pdf"

25 "https://leginfo.legislature.ca.gov/faces/billTextCli ent.xhtml?bill_id=201720180SB327"

26 "https://korea.ul.com/news/보도자료_ul-cap-사이버보안평가"

27 "https://ims.ul.com/iot-security-what-does-reaso nable-security-look"

28 "https://eur-lex.europa.eu/legal-content/EN/TXT /PDF/?uri=CELEX:32019R0881&from=EN"

29 "https://cybersecurityventures.com/hackerpocalyp se-cybercrime-report-2016/"

30 박남제, "IoT 제품 보안인증 및 보안성 유지관리정책 추진방안연구" 한국인터넷진흥원 2016

31 이동혁, "IoT 제품 보안 인증 및 보안성유지 관리방안" 33 (33): 28-34, 2016

32 강다연, "IoT 보안인증서비스 인증기준 중요도 우선순위에 관한 연구" 한국콘텐츠학회 19 (19): 13-21, 2019

33 유우영, "IoT 보안에 대한 국내외 연구 동향 분석" 한국융합보안학회 18 (18): 61-67, 2018

34 고재용, "IoT 보안 요구사항 및 보안 운영체제 기반 기술 분석" 한국콘텐츠학회 18 (18): 164-177, 2018

35 이동혁, "IoT 기기의 보안성 확보를 위한 제도적 개선방안" 한국정보보호학회 27 (27): 607-615, 2017