본문 바로가기
KERD
논문KCI 등재

기업의 사이버위협정보 공유 활성화에 관한 연구

A Study on the Activation of Sharing Cyber-Threat Information among Businesses

최석언|이종섭|탁근선|최주원
한국정보처리학회|2023.04|정보처리학회논문지. 컴퓨터 및 통신시스템 (KIPS Transactions on Computer and Communication Systems)|제12권 제4호|pp. 143-156

0

조회

0

다운로드

1

인용

0

참고문헌

키워드

지각된 가치Perceived Value사이버보안침해사고대응기업정보보호가치기반수용모델Cyber SecurityCERTEnterprise Information SecurityValue Based Adoption Model
주제분류컴퓨터학

초록

급변하는 사이버 환경에서 다양한 유형으로 발생하는 보안위협에 상응하기 위한 국내 위협정보 공유체계는 미흡한 상황이다. 본 연구에서는이러한 문제를 해결하고 위협정보 공유 활성화를 제고시키고자, 정보 공유 시 핵심 요인을 가치기반수용모델(VAM) 기반으로 연구모델을 도출하고정보보호 관련 종사자들 총 204명 대상으로 리커드 5점 척도 설문조사를 수행한 후 1차 151명의 통계결과를 SPSS와 AMOS를 활용하여 분석을수행하고 2차 204명의 통계결과를 R-Studio를 통해 추가 검증하였다. 이를 통하여 사이버위협정보 공유 활성화 핵심요인으로 지각된 용이성이유의미한 영향을 미치고 있으며(β=0.405, p<0.01), 저해요인은 혁신 저항으로 분석되었다(β=-0.152, p<0.01). 도출된 연구 결과는 미시적으로 향후기업의 사어버 위협정보 공유의 활성화를 위한 요인 분석 시 활용과 거시적으로 국가 사이버위협 대응체계의 기반 조성에 기여할 수 있겠다.

Abstract

The domestic threat information sharing system to deal with various security threats in the rapidly changing cyber environment needsto be improved. In this study, to solve these problems and promote the activation of threat information sharing, we derive a researchmodel based on the value-based containment model (VAM) for vital factors in information sharing. After conducting a Ricardian 5-pointsurvey on a total of 204 individuals, the statistical results of the first 151 individuals were analyzed using SPSS and AMOS, and the statisticalresults of the second 204 individuals were analyzed using R-Studio. As a result, perceivability was found to have a significant impactas a core factor in the activation of cyber threat information sharing (β=0.405, p<0.01), and the hindrance factor was analyzed as innovationresistance (β=-0.152, p<0.01). Microscopically, the obtained results can be applied to factor analysis for activating information sharingof cyber threats by companies in the future, and macroscopically, they can contribute to the foundational development of a nationalcyber threat response system.

참고문헌 (50)

  1. "The era of ‘cyber pandemic’ that resembles COVID-19 is coming."[URL]
  2. "60 Worrying Cybercrime Statistics & Facts"[URL]
  3. Y. S. Lee, "Trends in cyber threat and response technology according to COVID-19 : Focusing on security systems and infringement response services", Korea Institute of Information Security and Cryptology, 31(5), pp.5~12 (2021)
  4. "2021 National Cybersecurity White Paper" (2021)[URL]
  5. "Even if COVID-19 disappears, the cyber pandemic continues"[URL]
  6. Z. Fathi, "Anon-ISAC : Anonymity-preserving cyber threat information sharing platform based on permissioned Blockchain", 2020 28th Iranian Conference on Electrical Engineering(ICEE) (2020)
  7. 김대건, "사이버위기에 대응하기 위한 국가정보기관의 사이버위협정보 공유 역할에 대한 고찰", 디지털융복합연구, 15(6), pp.51~59 (2017), 한국디지털정책학회[DOI]
  8. H. J. Lee, "Korean cyber threat information sharing technology and development direction", Journal of the Korean Society for Information Protection, Korea Institute of Information Security and Cryptology, 31(5), pp.47~54 (2021)
  9. S. N. Khajeddin, "Towards a functional and trustful web-based information sharing center", 2019 5th International Conference on Web Research(ICWR), pp.252~257 (2019)
  10. J. S. Lee, "A study on the factors affecting the intention to use mydata service based on open banking", Ph.D, pp.2022
  11. H. J. Kwoun, "A study on the effect of local government's technology readiness index on cloud computing conversion intention : Focused on the mediating role of VAM and the moderating effect of organizational learning", Ph.D, pp.2022
  12. Y. J. Joo, "Effect of avatar characteristics and avatar identification on information sharing intention and loyalty in role-playing game(RPG)", MA, pp.2022
  13. M. Y. Dong, "The Effects of Information sharing by interfirm networks on supply chain resilience and firm's performance", MA, pp.2022
  14. S. G. Oh, "Cooperation environment within the supply chain and direct and indirect performance of the company", The Korea Society of Information Technology Applications 2010. Spring Conference Materials Book, pp.235~247 (2010)
  15. S. Barnum, "Standardizing cyber threat intelligence information with the structured threat information expression（stix)", Mitre, pp.7~8 (2012)
  16. D. W. Chadwick, "A cloud-edge based data security architecture for sharing and analysing cyber threat information", Future Generation Computer Systems, 102(C), pp.710~722 (2020)
  17. S. E. Choe, "A study on the facilitation of sharing cyberthreat information among businesses : Empirical analysis according to the value-based adoption model(VAM)", MA, pp.2022
  18. D. Kahneman, "Prospect theory : An analysis of decision under risk", The Econometric Society, pp.284~289 (1979)
  19. H. Kim, "Value-based adoption of mobile internet : An empirical investigation", Decision Support Systems, pp.115~116 (2007)
  20. S. Liu, "A study on factors affecting intention to use sharing economy services based on value-based adoption model : Focus on the moderating effect of psychological ownership", Ph.D, pp.2022
  21. 남수정, "소비자의 개인", 집단주의 성향과 소비가치가 소비에 대한 자기조절에 미치는 영향, 2007, pp.10(3), 59~86[DOI]
  22. J. W. Choi, "A study on factors affecting acceptance intention to use smart fish farming system based on artificial intelligence", Ph.D, pp.2021
  23. 이미준, "보건교사의 직무 스트레스와 소진 및 자기 효능감에 대한 구조모형: 경로분석", 한국산학기술학회논문지, 21(1), pp.317~325 (2020), 한국산학기술학회[DOI]
  24. Y. T. Jo, "A study of executives’ intention on accepting the artificial intelligence collaborative decision-making framework", Ph.D, pp.2022
  25. G. Y. Gu, "A study on the factor affecting the intention to use the service provided by the rpa system", Ph.D, pp.2022
  26. B. Muthén, "A comparison of some methodologies for the factor analysis of non-normal Likert variables", British Journal of Mathematical and Statistical Psychology, 38(2), pp.87~94 (1985)
  27. E. G. Carmines, "Analyzing models with unobserved variables : Analysis of covariance structures", Social Measurement (1981)
  28. M. W. Browne, "Alternative ways of assessing model fit", Sociological Methods & Research, 21(2), pp.230~258 (1992)
  29. J. F. Hair, "Multivariate data analysis with readings" (1998), Macmillan
  30. K.G. Joreskog, "LISREL VI : Analysis of linear structural relationships by the method of maximum likelihood" (1984), National Educational Resources
  31. S. A. Mulaik, "Evaluation of goodness-of-fit indices for structural equation models", Psychological Bulletin, 105(3), pp.430~445 (1989)
  32. P. M. Bentler, "Significance tests and goodness of fit in the analysis of covariance structures", Psychological Bulletin, 88(3), pp.588~606 (1980)
  33. P. M. Bentler, "Comparative fit indexes in structural models", Psychological Bulletin, 107(2), pp.238~246 (1990)
  34. L. R. James, "Causal analysis : Assumptions, models, and data" (1983), Sage
  35. E. S. Lee, "Development of a job crafting scale for hospital nurses", Ph.D, pp.2018
  36. H. K. Kwoun, "The mediation effect of college Major and Job match on the relationship between Graduates satisfaction with university education and job satisfaction", MA, pp.2021
  37. J. C. Nunnally, "Psychometric theory" (1994), McGraw-Hill
  38. R. P. Bagozzi, "On the evaluation of structural equation models", Journal of the Academy of Marketing Science, 16(1), pp.74~94 (1988)
  39. 윤철호, "R을 이용한 PLS 구조방정식모형 분석 튜토리얼: 예시 연구모형 및 데이터를 중심으로", 경영정보학연구, 16(3), pp.89~112 (2014), 한국경영정보학회[DOI]
  40. D. Gefen, "A practical guide to factorial validity using PLS-Graph : Tutorial and annotated example", Communications of the Association for Information Systems, 16(1), pp.91~109 (2005)
  41. J. F. Hair, "A primer on partial least squares structural equation modeling (PLS-SEM)" (2014), Sage Publications
  42. F. Francy, "The aviation information sharing and analysis center(A-ISAC)", ICNS 2015 - Innovation in Operations, Implementation Benefits and Integration of the CNS Infrastructure, Conference Proceedings (2015)
  43. T. Wallis, "EE-ISAC-Practical cybersecurity solution for the energy sector", Energies, 15(6), pp.2170~ (2022)
  44. C. Z. Liu, "Rethinking FS-ISAC : An IT security information sharing network model for the financial services sector", Communications of the Association for Information Systems, 34(1), pp.15~36 (2014)
  45. I. M. Sholihah, "Design and development of information sharing and analysis center(ISAC)as an information sharing platform", 2021Sixth International Conference on Informatics and Computing(ICIC) (2021)
  46. C. P. Lamberton, "When is ours better than mine? A framework for understanding and altering participation in commercial sharing systems", Journal of Marketing, 76(4), pp.109~125 (2012)
  47. G. Y. Jo, "Study on the structural relationship between characteristic factors of shared accommodation platform and co-creation value and reuse intention by applying Value-based Adoption Model : Focusing on Airbnb", Ph.D, pp.2020
  48. I. S. Koo, "The effect of shared leadership on organizational commitment and change-oriented organizational citizenship behavior : The mediating effect of positive psychological capital and the moderating effect of LMX", Ph.D, pp.2020
  49. K. Y. Koo, "A study on the factor affecting the intention to use the service provided by the RPA system", Ph.D, pp.2022
  50. V. A. Zeithaml, "Consumer perceptions of price, quality, and value : a means-end model and synthesis of evidence", Journal of Marketing, 52(3), pp.2~22 (1988)

관련 논문AI추천

국내 사이버위협 정보 공유에 영향을 미치는 요인김태성, 김하영한국정보보호학회 · 정보보호학회논문지2017 · 제27권 제5호사이버 테러 위협 상황 인식 공유를 위한 정보 공유 모델 구성 요소 도출 연구고성훈, 최재만, 한경석한국IT정책경영학회 · 한국IT정책경영학회 논문지2015 · 제7권 제2호국방사이버위협 대응체계 이용의도에 관한 실증적 연구김성주, 박찬석, 안용준, 한경석한국IT정책경영학회 · 한국IT정책경영학회 논문지2021 · 제13권 제1호기업 보안관리 강화의지 및 실행에 영향을 미치는 요인에 관한 연구황종호대한경영정보학회 · 경영과 정보연구2013 · 제32권 제2호중소기업의 보안 활동이 사이버 침해사고 대응에 미치는 영향김은정, 박인채한국산업보안연구학회 · 한국산업보안연구2023 · 제13권 제1호사이버 위협 지표 간 중요도 비교 분석 연구권헌영, 이로운한국정보보호학회 · 정보보호학회논문지2021 · 제31권 제5호

이 간행물의 다른 논문 (2건)

gcc 기반 eCos 운영체제 및 PROFINET 통신 스택의IAR 포팅 방법김진호pp. 127-134소프트웨어 정의 스토리지의 디스크 이용을최적화하는 방법에 관한 연구장민영, 이정일, 최윤아, 박주은pp. 135-142
원문 보기