5G 서비스 보안 강화를 위한 제로트러스트 기반 보안점검항목 연구
A Study on Zero Trust-Based Security Check Items to Strengthen 5G Service Security
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
5G 무선 이동통신 기술 관련 통신장비 수입 및 도청· 백도어 사고 증가와 비대면 업무 환경의 보편화로 글로벌 대기업의 내부 계정을 탈취한 랩서스 공격 등 사이버 위협이 지속 증가하고 있다. 또한, 기존정보보호 인증제도 관련 최소한의 요건으로 인하여 산· 학· 연· 관 분야별 보안 전문가는 효과성 관련 고도화되는 新기술 발전에 부합하는 보안점검항목의 필요성을 제기하고 있다. 본 논문에서는 국내· 외 관련 제도 및 표준의 보안점검항목 등 비교· 분석을 통해 정보통신망의 안정성 및 신뢰성 확보와 보안성 강화를 위한 4가지(5G, Zero Trust(ZT), 주요정보통신기반시설보호(CIIP), ISMS-P) 보안점검항목을 결합하여 한국형 5G와 ZT 보안 성숙도 모델 개발 및 5ZCI 통합 보안점검항목을 개발하고 산· 학· 연 5ZCI 보안 전문가대상으로 관리체계별 실효성(적합성) 검증을 진행하였다. 연구 결과는 5G 네트워크 사업자 및 ISMS- P· CIIP 보안 담당자 세부 점검 등에 활용 가능하여 향후 기업· 조직의 사이버 보안 수준을 향상 시킬 수 있다.
Abstract
Cyber threats are continuing to increase, including the increasing number of wiretapping and backdoor incidents related to the import of communication equipment related to 5G wireless mobile communication technology and the widespread use of non-face-to-face work environments, such as the Wrapsus attack, in which the internal accounts of global conglomerates were stolen. In addition, due to the minimum requirements of the existing information protection certification system, security experts in each field of industry, academia, research, and government are raising the need for security inspection items that meet the increasingly advanced new technologies related to effectiveness. In this paper, we developed a Korean-style 5G and ZT security maturity model and a 5ZCI integrated security inspection item by combining four security inspection items (5G, Zero Trust (ZT), CIIP, ISMS-P) to secure the stability and reliability of information and communication networks and strengthen security through comparison and analysis of security inspection items in related domestic and international systems and standards. We also conducted an effectiveness (suitability) verification for each management system for 5ZCI security experts from industry, academia, and research institutes. The research results can be used for detailed inspection by 5G network operators and ISMS-P· CIIP security personnel, etc. and can improve the cyber security level of companies and organizations in the future.
참고문헌 (30)
- E. Dalman, "5G NR The Next Generation Wireless Access Technology" (2018), Elsevier
- Ki bong Kim, "A Study on Factors Affecting the Intention of Using 5G-Based Realistic Defense Simulation Training Service : Focused on Personal Tactical Simulation", pp.2021
- Lee Young Ho, "A Study on the Threats of Wiretapping and Effective Security Management Strategies", Korean Society of Security Management (2020)
- Paul Hong, "A Study on Security Requirements for 5G Base Station", Journal of The Korea Institute of Information Security & Cryptology (2021)
- IEEE ComSoc, "T-Mobile hacked by cyber-espionage group linked to Chinese Intelligence agency", WSJ, ~ (2024)
- Song, In-Kuk, "Proposal of Research Issues related to the Technology, Service, Policy and Business Model in Commercializing and Promoting 5G Network", pp.2019
- 2023Cybersecurity Threat Outlook, "Ministry of Science and ICT", ~ (2023)
- Tenable Research, "CVE-2023-46805, CVE-2024-21887: Zero-Day Vulnerabilities Exploited in Ivanti Connect Secure and Policy Secure Gateways", ~ (2024)
- Yangkyu Lim, "Zero Trust Security Requirements for APT Attack Response A Study on Derivation", pp.2024
- ENISA, "5G security controls matrix booklet-paper", ~ (2023)
- Ministry of Science and ICT, "Zero Trust Guideline 2.0", ~ (2024)
- Alliance, NGMN, "Next-Generation Mobile Networks, White paper" (2015)
- 5G Americas, "Security Considerations for 5G", ~ (2020)
- 3GPP, "TS 33.501 Security architecture and procedures for 5G", ~ (2020)
- ENISA, "ENISA Threat Landscape for 5G Networks", ~ (2020)
- Financia Security Service, "Electronic Finance and Financial Security", ~ (2019)
- Kwon Soon-hyun, "5G-based Smart Factory Security Trend Analysis", ~ (2020)
- Hoon-Yong Park, "Analysis of Major Issues on Countering False Base Stations in 5G Security", ~ (2020)
- Jong-Keun Park, "5G Edge Security Technology Trends", ~ (2020)
- Hwan-kook Kim, "Analysis of Overseas Security Requirements Trend for Security Technology Design Suitable for 5G Architecture", ~ (2020)
- Hwan-Kook Kim, "Security Issues and Considerations of Cyber Response Technology as 5G Network Technology Evolves", ~ (2019)
- Sungmin Park, "A Study on Integrated Session Management and Anomaly Detection Techniques Based on Protocol Analysis in 5G Network Environment", pp.2024
- National Intelligence Servic, "2024National Cyber Security White Paper" (2024)
- Ministry of Science and ICT, "Detailed Guide on How to Analyze and Evaluate Technical Vulnerabilities of Critical Information Infrastructure Protection", ~ (2021)
- Ministry of Science and ICT, "Information Security and Personal Information Protection Management System (ISMS-P) Certification System Guide", ~ (2024)
- Ministry of Science and ICT, "Zero Trust Guideline 1.0", ~ (2023)
- Yoo Il-sun, "Column of the Korea Information Security Society: Review of Security Issues for Innovation into Specialized Network Services", ~ (2024)
- Hye-Jin Lee, "Domestic and International Trends Related to Open RAN and Its Impact on Cybersecurity", ~ (2024)
- Cheolho Lee, "Zero Trust Maturity Diagnosis, Adoption Plan Establishment, and Attacker Perspective Approach to Measure Adoption Effectiveness", Journal of the Korean Information Security Society (2024)
- Minyoung Choi, "A Study on the Improvement of Controls for Cloud Security Authentication in a Zero Trust Environment", pp.2024