보안 안전성을 위한 자동화 보안진단평가 시스템에 관한 연구 = A Study on Automatic Security Diagnostic Evaluation System for Security Assurance

다국어 초록 (Multilingual Abstract)

In the paper, we designed an automatic security diagnostic evaluation System(SeDES)
based on a security diagnostic evaluation model(SeDEM) for an organization’s security
assurance. The SeDEM evaluates a security level of an organization quantitatively by a
security evaluation formula which is composed of security variables and security index as
applying the statistical CAEL model for evaluate risk level of banks. The SeDES has a
good expandability as changing security variables according to an organization scale,
characteristics and so on. And it also has a excellent usage because it inputs only numeric
data got from statistical technique to security index. We can understand more a security
level correctly than the existent risk assessment system because it is possible to assess
quantitatively with an security grade as well as score. analysis.

참고문헌 (Reference)

1 김신원, "정보시스템 보안 위험분석 모델에 관한 연구" 서강대학교, 정보통신대학원 2001

2 정신동, "우리나라 금융부문 조기경보시스템의 발전방향 ― 금융감독원 조기경보시스템을 중심으로 ―" 한국경제발전학회 14 (14): 113-134, 2008

3 엄정호, "사이버 공격과 보안 기술" 홍릉과학출판사 3-9, 2009

4 국방부, "군사보안시행규칙, 국군 인쇄창"

5 엄정호, "국방 정보통신기반체계의 보안관리를 위한 효율적인 위험분석 모델에 관한 연구" 성균관대학교 2003

6 "http://www.hani.co.kr/arti/society/society_general/364809. html"

7 김영기, "SCOR모형을 활용한 상호저축은행 조기경보시스템 연구" 한국금융연구원 19 (19): 33-68, 2005

8 Richard Fairley, "Risk management for software projects" 11 (11): 57-67, 1994

9 "Risk Analysis and Management Standards for Public Information Systems Security-Risk Analysis Methodology Model" 한국정보통신기술협회 (TTA) 2000

10 ISO/IEC SC 27/WG2, "Information Technology-Security techniques-Guidelines for the management of IT security-Part1:Concepts and models of IT Security" 1996

11 "BS 7799-Guide to Risk Assessment and Risk management" BSI 1998

12 "A Guide to Security Risk Management for Information Technology Systems, MG-2, CSE Manual"