통합정보보호시스템의 최적 품질 확보를 위한 최소개발비용 탐색에 관한 연구
A Study on Optimal Developmental Cost for Quality Factors of Integrated Information Security Systems
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
To protect information resources, many organizations including private corporate and government employ integrated information security systems which provide the functions of intrusion detection, firewall, and virus vaccine. In order to develop a reliable integrated information security system during the development life cycle, the managers in charge of the development of the system must efficiently distribute the development resources to the quality factors of an integrated information security system. This study suggests a distribution methodology that minimizes the total cost with satisfying the minimum quality level of an integrated information security system by assigning development resources to quality factors considered appropriately. To achieve this goal, this study identifies quality factors of an integrated information system, measures the relative weights among the quality factors using analytic hierarchy process (AHP). The suggested distribution methodology makes it possible to search an optimal solution which minimizes the total cost with satisfying the required quality levels of processes by distributing development resources to quality factors during the development life cycle.
Abstract
To protect information resources, many organizations including private corporate and government employ integrated information security systems which provide the functions of intrusion detection, firewall, and virus vaccine. In order to develop a reliable integrated information security system during the development life cycle, the managers in charge of the development of the system must efficiently distribute the development resources to the quality factors of an integrated information security system. This study suggests a distribution methodology that minimizes the total cost with satisfying the minimum quality level of an integrated information security system by assigning development resources to quality factors considered appropriately. To achieve this goal, this study identifies quality factors of an integrated information system, measures the relative weights among the quality factors using analytic hierarchy process (AHP). The suggested distribution methodology makes it possible to search an optimal solution which minimizes the total cost with satisfying the required quality levels of processes by distributing development resources to quality factors during the development life cycle.
참고문헌 (18)
- 김종기, "시스템 보안공학 능력 성숙도 모델 고찰", 정보보호학회지, 11(6) (2001)
- "국가사이버안전센터"[URL]
- "산업기술인터넷방송"[URL]
- Aguaroˊn,J, "The Geometric Consistency Index:Approximated Threshold", European Journal of Operation Research, 147, pp.137~145 (2003)
- Côté, "The Evolution Path for Industrial Software Quality Evaluation Methods Applying ISO", IEC 9126, 2001, 17~39
- Choi,M.G, "An Empirical Study of Quality and Cost Balanced Security Engineering", Lecture Notes in Computer Science, (3903), pp.379~389 (2006)
- Choi,M.G, "Optimizing Quality Levels and Development Costs for Developing an Integrated Information Security System", Lecture Notes in Computer Science, (4867), pp.359~370 (2007)
- Eloff,M, "Information Security Management,Hierarchical Framework for Various Approaches", Computers and Security, 19, pp.243~256 (2000)
- Goldberg,D.E, "Genetic Algorithms in Search Optimization, and Machine Learning" (1989), Addison-Wesley Professional
- "Software Engineering-Product QualityPart1 : Quality Model", ISO, 2001
- John Leach, "Security Engineering and Security Rol", Computers and Security, 22(6), pp.482~486 (2003)
- Y.Lee, "Integrating Software Lifecycle Process Standards with Security Engineering", Computers and Security, 21(4), pp.345~355 (2002)
- Park,Y.J, "Cost-Constrained G-efficient Response Surface Designs for Cuboidal Regions", Quality Reliability Engineering International, 22(2), pp.121~139 (2006)
- Pham,D.T, "Intelligent Optimisation Techniques : Genetic Algorithms, Tabu Search, Simulated Annealing and Neural Networks" (2000), Springer
- Pijl,G, "ISO 9000 versus CMM:Standardization and Certification of IS Development", Information and Management, 32, pp.267~274 (1997)
- Satty,T, "Decision Making for Leaders : The Analytical Hierarchy Process for Decision in a Complex World" (1995), RWS Publications
- Wood,C, "ISO 9000 and information,Security,Computer and Security", 14(4), pp.287~288 (1995)
- "3com"[URL]