본문 바로가기
KERD
논문KCI 등재

모바일오피스 환경에서의 보안위협 및 취약점에 대한 탐색적 연구

The Exploratory Study on Security Threats and Vulnerabilities for Mobile Office Environment

0

조회

0

다운로드

7

인용

0

참고문헌

키워드

주제분류과학기술학

초록

본 연구는 정보보안 관리체계에 따라 모바일 오피스에서 위협, 취약점을 모바일 오피스 구성항목의 유형별로 분석하고 현재 기술수준에서 통제가능성을 제시하는데 그 목적이 있다. 모바일오피스라는 신기술 분야를 대상으로 탐색적 연구를 수행하기 위해 문헌조사, 전문가 FGI, 그리고 실사용자설문조사 등의 통합적 연구 방법을 사용하였다. 모바일오피스 서비스의 주요 위험영역을 파악하기 위해 서비스 전달체계에 따라 사용자, 장소, 단말, 네트워크, 서버로 모바일오피스 서비스 계층 모형을개발하고, 다섯 가지 계층별로 구분하고 실사용자 그룹을 대상으로 설문지법을 이용하여 위협 및 취약점을 조사한 결과 사용자와 사용자가 사용하는 단말의 통제가 중요한 것으로 나타났다.

Abstract

This study is based on the information security management system, the threat frommobile office, mobile office configuration item type, vulnerability analysis and control at the levelof the current possibilities for technology to its purpose. To perform exploratory study for mobileOffice to target the new technology, we were used the integrated research methods such as the documentarysurvey, expert FGI and real user’s survey. To identify the main risk areas of mobileoffice services, we develop the mobile service layer model that separated the place, terminal, network,server according to service deliverly system. Finally, the result of survey for threats and vulnerabilitiesshowed that the control of the terminal of user is a significant.

참고문헌 (43)

  1. 스마트폰이 열어가는 미래, "삼성경제연구소", ~ (2010)
  2. 이민혜, "스마트워크 연구에 대한 고찰과 향후 연구 주제", 정보화정책, 18(2), pp.72~84 (2011), 한국정보화진흥원
  3. 이형찬, "스마트워크 보안 위협과 대책", 정보보호학회지, 12(21), pp.12~21 (2011)
  4. 정명수, "스마트워크 보안위협 및 보안 요구사항 분석", 정보보호학회지, 21(3), pp.55~63 (2011)
  5. 한국정보화진흥원, "기업을 위한 스마트워크 도입·운영가이드라인", ~ (2010)
  6. 황해수, "안전한 스마트워크 향상을 위한 Mobile Security 대응모델에 관한 연구", 정보보호학회지, 21(3), pp.22~34 (2011)
  7. Alan Bryman, "Barriers to Integrating Quantitative and Qualitative Research", Journal of Mixed Methods Research, 1(1), pp.8~22 (2007)
  8. Benjamin Halpert, "Mobile device security, InfoSec-CD", Proceedings of the 1st annual conference on Information security curriculum development, pp.99~101 (2004)
  9. Claudio Marciano, "DO YOU FEAR TELEWORK?-Understanding the petrify effect", Proceedings of the First International Conference on Information and Communication Technologies for Sustainability, pp.265~270 (2013)
  10. Day, F. C., "Telework Considerations for Public Managers with Strategiesfor Increasing Utilization", Communications of the IBIMA (2011)
  11. Ernst and Young, "Risk at Home: Privacy and Security in Telecommuting", Ernst and Young, 1~23 (2008)
  12. Furnell, S., "Securing the home worker", Network Security, 2006(11), pp.6~12 (2006)
  13. Godlove, "Examination of the factors that influence teleworkers willingness to comply with information security guidelines", Information Security Journal :A Global Perspective, 21(4), pp.216~229 (2012)
  14. "Five Big Security Threats for 2011, PCwolrd" (2011)[URL]
  15. James, P., "Are existing security models suitable for teleworking?", The 9th Australian Information Security Management Conference (2011)
  16. Johnson, R. Burke, "Toward a Definition of Mixed Methods Research", Journal of Mixed Methods Research, 1, pp.112~133 (2007)
  17. Joice, W., "Implementing Telework: The Technology Issue", Public Manager, 36, pp.64~68 (2007)
  18. Karen Scarfone, "User’s Guide to Securing External Devices for Telework and Remote Access", NIST, ~ (2007)
  19. Guide to enterprise telework and remote access security (draft), "Kent, K.", U.S. Dept. of Commerce, National Institute of Standards and Technology, ~ (2009)
  20. Krueger, Richard A., "Focus Groups: A Practical Guide for Applied Research" (1994), Sage Publications
  21. Kitzinger, Jenny, "The Importance of Interaction between Research Participants", Sociology of Health and Illness, 16(1), pp.103~121 (1994)
  22. Telework Planning Considerations : A Risk-based Approach for it Managers, "Microsoft", A Microsoft U.S. government, ~ (2011)
  23. Morgan, David L., "Paradigms Lost and Pragmatism Regained: Methodological Implications of Combining Qualitative and Quantitative Methods", Journal of Mixed Methods Research, 1(1), pp.48~76 (2007)
  24. Morrow, B., "BYOD security challenges: control and protect your most sensitive data", Network Security, 2012112(8), pp.5~8 (2012)
  25. Patricia Mayer Milligan, "Business Risks and Security Assessment for Mobile Devices", Proceedings of the 8th WSEAS Int. Conference on Mathematics and Computers in Business and Economics, pp.189~193 (2007)
  26. Paul Turpin, "Securing Telecommuters : Possible threats and Solutions", Global Information Assurance Certification Paper (2004)
  27. Peacey, A., "eleworkers - extending security beyond the office", Network Security Journal, 2006(11), pp.14~16 (2006)
  28. Peltier, T. R., "Remote Access Security Issue", Information Systems Security, 10(6), pp.31~36 (2013)
  29. Pyöriä, P., "Managing telework: risks, fears and rules", Management Research Review, 34(4), pp.386~399 (2011)
  30. The Dark Side of Telecommuting - Is a Tipping Point Approaching?, "Ruth, S.", GMU School of Public Policy Research, ~, pp.Paper No. 2012-02 (2011)
  31. Sale, Joanna E. M., "Revisiting the Quantitative-Qualitative Debate: Implications for Mixed-Methods Research", Quality & Quantity, 36, pp.43~53 (2002)
  32. Saint-Germain, "Surveys and Focus Groups in Health Research with Older Hispanic Women", Qualitative Health Research, 3(3), pp.341~367 (1993)
  33. Guide to enterprise telework and remote access security:recommendations of the national institute of standards and technology, "Scarfone, K.", National Institute of Standards and Technology, ~ (2009)
  34. Shedden, P., "Incorporating a knowledge perspective into security risk assessments", The journal of information and knowledge management systems, 41(2), pp.152~166 (2011)
  35. Singleton, R. A., "Approaches to social research (4th edition)" (2005), Oxford University Press
  36. Tashakkori, Abbas, "The New Era of Mixed Methods", Journal of Mixed Methods Research, 1(1), pp.3~7 (2007)
  37. Tim Godlove, "Telework and Mobile Computing :Security Concerns and Risks", The security Journal, 30, pp.5~11 (2010)
  38. Von Bergen C. W., "Safety and Workers' Compensation Considerations in Telework", Regional Business Review, 27 (2009)
  39. William M. Fitzgerald, "Automated Smartphone Security Configuration", Data Privacy Management and Autonomous Spontaneous Security Lecture Notes in Computer Science Volume, 7731(242), pp.227~242 (2013)
  40. Wolcott, Harry F., "Writing up Qualitative Research. Better", Qualitative Health Research, 12(1), pp.91~103 (2002)
  41. Zhi Peng Shao, "Risk Analysis of Smart Terminals in Mobile Application of Power System and the Protection Solution Design", Applied Mechanics and Materials, 260, pp.397~401 (2012)
  42. Zernand, M., "The Risks and Management of Telework", EBS Review, (16), pp.101~104 (2003)
  43. Zimmerman, M., "Assessing the Acceptability of Norplant Implants in Four Countries; Findings from Focus Group Research", Studies in Family Planning, 21(2), pp.92~103 (1990)

관련 논문AI추천

이 간행물의 다른 논문 (9건)