사이버 위협 탐지대응시간 모델링 = Cyber threat Detection and Response Time Modeling

다국어 초록 (Multilingual Abstract)

There is little research on actual business activities in the field of security control. Therefore, in this paper, we intend to present a practical research methodology that can contribute to the calculation of the size of the appropriate input personnel through the modeling of the threat information detection response time of the security control and to analyze the effectiveness of the latest security solutions. The total threat information detection response time performed by the security control center is defined as TIDRT (Total Intelligence Detection & Response Time). The total threat information detection response time (TIDRT) is composed of the sum of the internal intelligence detection & response time (IIDRT) and the external intelligence detection & response time (EIDRT). The internal threat information detection response time (IIDRT) can be calculated as the sum of the five steps required. The ultimate goal of this study is to model the major business activities of the security control center with an equation to calculate the cyber threat information detection response time calculation formula of the security control center. In Chapter 2, previous studies are examined, and in Chapter 3, the calculation formula of the total threat information detection response time is modeled. Chapter 4 concludes with a conclusion.

참고문헌 (Reference)

1 김민준, "제어망에서의 화이트리스트 침입 탐지 방식 구현에 관한 연구" 경기대학교 대학원 2012

2 한충희, "전력분야 사이버 위협 분석 및 기반시설 보안 강화를 위한 해외 IP 대역 차단 방안 연구" 한국정보보호학회 29 (29): 401-415, 2019

3 Chrismon D, "Threat Intelligence: Collecting, analyzing, evaluating" MWR Infosecurity

4 Dalziel H, "How to define and build an effective cyber threat intelligence capability" Elsevier

5 Han Choong-Hee, "Enhanced Security Control model for critical infrastructures with the blocking prioritization process to cyber threats in power system" 26 : 100312-, 2019

6 McMillan R., "Definition: threat intelligence"

7 Cyril Onwobiko, "Cyber Security Operation Centre:Security Monitoring for protecting Business and supporting Cyber Defense Strategy" Intelligence &Security Assurance, E-Security Group

8 Sitaram Kowtha, "Cyber Security Operation Center Characterization Model and Analysis, Johns Hopkins University, Applied Physics Laboratory" IEEE

9 서태웅, "CCTV 보안관제 취약성 및 성능 분석" 한국멀티미디어학회 15 (15): 93-100, 2012

10 Eui-yeon Jung, "A Study on the Integrated Security Monitoring &Control in Financial Investment Industry Computer Networks’" Korea Information Processing Society

11 Gil Sun, Yu, "A Study on the Cyber Security monitoring Detection and Response" The Graduate School of Hanseo University 2018

12 Han Choong-Hee, "A Study on Cyber Threat Detection Response Analysis and Blocking Method" Graduate School of Chonnam National University 2019