사물인터넷(IoT) 관련 사이버범죄 동향 및 형사법적 규제

Abstract

A Hyper-connected Society is Coming. Hyper-connectivity is the increasing digital interconnection of people – and things – anytime and anywhere. Internet of Things, a network of items—each embedded with sensors—which are connected to the Internet will change everything. As we are entering the age of the Internet of Things, our homes are becoming increasingly populated by devices that are connected to the Internet. The idea of devices of all sorts coming under computer control, and being able to communicate with servers and with each other promises an explosion of IoT for Business. IoT ranges from wearable devices like Google Glass, Jawbone, smart clothing, smart car and many others from automated household appliances to sophisticated business tools. The number of connected machines and devices will be about 1 trillion by the year 2022. The ability to put an IP address on very small devices has created almost endless opportunities for innovation. The huge business value of IoT is that it opens an opportunity for new business models in industries ranging from manufacturing, agriculture, health care, transportation and more. As the Internet of Things becomes a greater part of everyday life, security concerns are developing faster than the Internet of Things itself. IoT, which will involve more devices, processes, and people interacting via the internet, will create a “wider attack surface and more attack vectors”. With connected technologies, cyber criminals could disrupt major business processes. For example, many smart cities are leveraging surveillance and sensor technologies to perform city planning, incident response, traffic coordination, and crime management. Hacking these systems could create disastrous consequences. IID even predicted that a death caused by an by internet-connected device may happen within the year. This article seeks to address and analyse the following issues. Firstly, it provides overview of various type and examples of IoT cyber crime. Secondly it reviews the state of the existing legislative and regulatory framework and their efficiency in combating this form of cyber crime. Straightforwardly, the existing legal framework in Korea is insufficient to face this challenges. The existing law governing the cyber crime is Act of promotion of Information and Communication Network Utilization and Information Protection, etc, Personal Information Protection Act, Act of the Protection of Information and Communications Infrastructure, and so on. But it is insufficient to regulate the critical cyber crime. Finally, this article also urges legislatures to update statutory rule that govern the cyber crime in response to the new challenge of IoT cyber crime.