패스워드의 정보시스템 보안효과에 영향을 미치는 요인에 관한 연구

목차 (Table of Contents)

• abstract
• Ⅰ. 서 론
• Ⅱ. 문헌연구
• 2.1 정보보안
• 2.2 정보유출과 패스워드
• 2.3 자산
• 2.4 위협
• 2.5 취약성
• 2.6 위험분석방법론
• 2.7 보안정책
• 2.8 개인정보 보안의식
• 2.9 패스워드 선택
• 2.10 개인적 특성
• 2.11 보안효과
• Ⅲ. 연구내용
• 3.1 연구모형의 설계
• 3.2 연구의 가설
• 3.3 연구변수의 조작적 정의 및 측정항목
• Ⅳ. 실증분석
• 4.1 자료의 수집과 분석
• 4.2 표본의 특성
• 4.3 측정모형의 추정과 분석
• 4.4 구조모형의 평가 및 가설검증
• Ⅴ. 결 론
• 참 고 문 헌

참고문헌 (Reference)

1 박성희, "효과적인 정보시스템 보안을 위한 통합적 모형의 연구" 35 : 271-298, 2004

2 임채호, "효과적인 정보보호인식 제고 방안" 16 (16): 30-36, 2006

3 정경수, "패스워드 이용과 관한 실증분석: 대학과 종합병원을 중심으로" 30 (30): 143-157, 2001

4 이필중, "패스워드 시스템의 보안에 관한 고찰" 1 (1): 109-118, 1991

5 정보통신부, "패스워드 선택 및 이용가이드" 정보통신부 2008

6 박승배, "타인의 관찰에 의한 패스워드 노출로부터 안전한 패스워드 시스템" 10C (10C): 141-144, 2003

7 김종기, "컴퓨터 바이러스 통제의 행위의도에 영향을 미치는 요인" 한국정보화진흥원 13 (13): 174-196, 2006

8 홍승필, "최신 이론과 경향으로 배우는 정보보호의 이해" 아이워크북 2004

9 정해철, "조직구성원의 정보보안 의식과 조직의 정보보안 수준과의 관계 연구" 7 (7): 117-134, 2000

10 김종기, "정보시스템 보안의 효과성 모형에 관한 실증적 연구" 7 (7): 91-108, 1998

11 권영옥, "정보보안 사고와 사고방지 관련 투자가 기업가치에 미치는 영향" 9 (9): 105-120, 2007

12 최상수, "보안관리 및 위험분석을 위한 분류체계, 평가기준 및 평가 스케일의 조사연구" 13 (13): 28-49, 2003

13 홍일유, "국내기업의 정보시스템 보안위협 인식에 관한 연구" 27 (27): 157-185, 2000

14 KISA, "“2006년 정보보호 실태조사 당신의 정보보호 수준은?,” 정보보호 뉴스, pp. 12-17."

15 Drevin, L., "Value-Focused Assessment of ICT Security Awareness in an Academic Environment" 26 : 36-43, 2007

16 Menkus, B., "Understanding the Use of Passwords" 7 (7): 132-136, 1988

17 Fornell, C., "Two Structural Equation Models: LISREL and PLS Applied to Consumer Exit-Voice Theory" 19 (19): 440-452, 1982

18 Loch, K., "Treats to Information Systems: Today’s Reality, Yesterday’s Understanding" 16 (16): 1992

19 Barclay, D., "The Partial Least Squares(PLS) Approach to Causal Modeling, Personal Computer Adoptiong and Use as Illustration" 2 (2): 285-324, 1995

20 Whitaker,R, "The End of Privacy: How Total Surveillance is becoming a Reality" New Press 1999

21 Anderson, J., "Structural Equation Modeling in Practice: A Review and Recommended Two-Step Approach" 103 (103): 411-423, 1988

22 Frank, J, "Security-related Behavior of PC Users in Organizations" 21 (21): 127-135, 1991

23 Pounder, C., "Security with Unfortunate Side Effects" 22 (22): 115-118, 2003

24 Goodhue, D., "Security Concerns of System Users: A Study of Perception of the Adequacy of Security" 20 (20): 13-27, 1991

25 강병서, "SPSS와 AMOS 활용 연구조사방법론" 무역경영사 2005

26 NIST, "Risk management Guide for Information Technology Systems" Special Publication 800-30 2001

27 Tregear, J., "Risk Assessment" 6 (6): 19-27, 2001

28 Baskerville, R., "Risk Analysis: An Interpretive Feasibility Tool in Justifying Information Security" 1 (1): 121-130, 1991

29 Rainer, R., "Risk Analysis for Information Technology" 8 (8): 129-147, 1991

30 O'Gorman, L., "Query-Directed Passwords" 24 : 546-560, 2005

31 Urban, G, "Placing Trust at the Center of Your Internet Strategy" 39-69, 2000

32 Ronald, C., "Phishing for User Security Awareness" 26 : 73-80, 2007

33 Salisbury, D., "Perceived security and World Wide Web purchase intention" 101 (101): 165-176, 2001

34 Zviran, M., "Password Security: An Empirical Study" 15 (15): 161-185, 1999

35 "PRIVACY: What Every Manager Should Know" 33-40, 2002

36 Bagozzi, R., "On the Evaluation of Structural Equation Models" 16 : 74-97, 1988

37 "NIST, Risk management Guide for Information Technology Systems Recommendations of the Institute of Standards and Technology, NIST SP 800-30, 1998."

38 Peyravian, M., "Methods for Protecting Password Transmission" 19 (19): 466-469, 2000

39 King, R.C., "Media Appropriateness: Effects of Experience on Communication Media Choice" 28 (28): 877-910, 1997

40 Torkzadeh, G., "Measuring Factors that Influence the Sucess of Internet Commerce" 13 (13): 187-204, 2002

41 Adams, A, "Making Passwords Secure and Usable" 1-19, 1997

42 "KISA, “당신의 패스워드, 얼마나 안전할까요?,” 정보보호뉴스, 2007c, pp. 12-16."

43 "KISA, “8월 개인정보침해 민원접수 현황 및 분석,” 정보보호뉴스, 2007b, pp. 10- 11."

44 "KISA, “10월 개인정보침해 민원접수 현황 및 분석,” 정보보호뉴스, 2008, pp. 12-13."

45 Chin, W., "Issues and Opinions on Structural Equation Modeling" 22 (22): 7-16, 1998

46 Baldwin, N.S., "Information-Seeking Behavior of Securities Analysis: Individual Institutional Influences, Information Sources and Channels, and Outcomes" 48 (48): 674-693, 1997

47 Karyda, M., "Information System Security Policies: A Contextual Perspective" 24 : 246-260, 2005

48 Peltier,T, "Information Security Risk Analysis" Auerbach 2001

49 Wiant, T.L., "Information Security Policy's Impact on Reporting Security Incidents" 24 : 448-459, 2005

50 Smith, H.J, "Information Privacy: Measuring Individuals Concerns about Organizational Practices" 20 : 165-195, 1996

51 Leach, J., "Improving User Security Behavior" 22 (22): 685-692, 2003

52 "ISO/IEC, Guidelines for the Management of IT Security (GMITS), International Organization for Standardization/International Electrotechnical Commission, 2005."

53 "ISO/IEC, Guidelines for the Management of IT Security (GMITS) TR 13335-5, International Organization for Standardization/International Electrotechnical Commission, 2001."

54 CSE, "Guide to Security Risk Management for IT Systems" Communications Security Establishment 1996

55 Post, G.V., "Evaluating Information Security Tradeoffs: Restricting Access Can Interfere With User Tasks" 26 : 229-237, 2007

56 Juang, W., "Efficient Password Authenticated Key Agreement Using Smart Cards" 23 : 167-173, 2004

57 Wood, C., "Effective Information System Security with Password Controls" 2 (2): 5-10, 1983

58 Straub, D., "Effective IS Security: An Empirical Study" 1 (1): 255-276, 1990

59 Bob, L., "Critical review of Queensland’s Crime and Misconduct Commission Inquiry into abuse of children in foster care: Social work’s contribution to reform" 58 (58): 86-99, 2005

60 Jarvenpaa, S., "Consumer trust in an Internet store" 1 : 45-71, 2000

61 Parker, D.B, "Computer Security Management" Reston Publishing Co 1981

62 Russell, D, "Computer Security Basics" O'Reilly and Associates 1991

63 BSI, "Code of Practices for Information Security Management" British Standards Institution 2005

64 Highland, H., "Changing Passwords" 16 (16): 183-184, 1997

65 "CMU/SEI, Operationally Critical Threat, Asset, Vulnerability Evaluation(OCTAVE) Framework, Ver. 1.0, CMU/SEI-99-TR-017. Carnegie Mellon University/Software Engineering Institute, June 1999."

66 Jackson, K.M, "British Library Cataloging in Publication Data" Computer Security Reference Book 227-263, 1992

67 BSI, "BS7799:Code of Practices for Information Security Management" United Kingdom 1999

68 Gefen, D., "Assessing Unidimensionality through LISREL: An Explanation and Example" 12 (12): 23-47, 2003

69 Jeffrey, M.S, "Analysis of End User Security Behaviors" 24 : 124-133, 2005

70 Stanton, J.M, "Analysis of End User Security Behaviors" 24 : 124-133, 2005

71 Crockford, N, "An Introduction to Risk Management" Woodhead-Faulkner Limited 1980

72 Lee, S.M, "An Empirical Study of the Relationships among End-User Information Systems Acceptance, Training, and Effectiveness" 12 (12): 189-202, 1995

73 Furnell, S., "An Assessment of Website Password Practices" 26 : 445-451, 2007

74 Doherty, N.F., "Aligning the Information Security Policy with the Strategic Information Systems Plan" 25 : 55-63, 2006

75 Jobusch, D.L., "A Survey of Password Mechanisms: Weakness and Potential Improvements, Part 1" 8 (8): 587-604, 1989

76 Kruger, H.A., "A Prototype for Assessing Information Security Awareness" 25 : 289-296, 2006

77 Miller, H.E, "A Methodology for Managing Information-Based Risk" 17-24, 1996

78 Kim, D, "A B-To-C Trust Model for On-Line Exchange" 784-787, 2001

79 정보통신부, "2006 국가정보보호백서" 정보통신부 2006

80 Gilbert, I.A, ""Risk Analysis: Concepts and Tools," Datapro Reports on Information Security" 101-112, 1991