차세대 보안관제 플랫폼 기반의 정보보안 관제
Information security control based on next-generation security control platform
2
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
사이버공격은 기업과 기관의 비즈니스 연속성에 큰 위협을 주고 있다. 최근에는 특정 조직을 대상으로 하는 지능형 지속 공격(Advanced Persistent Threat: APT)과 애플리케이션 개발 과정에서 라이브러리의 취약점을 악용하는 신종 위협 등이 속속 등장하면서 기존의 정보보안 관제의 한계와 문제점에 대한 우려가 크다. 이러한 배경 속에 정보보안 관제의 실패 위험 증가, 비용 부담, 업무 피로감, 효율성 저하 등을 극복하고 일원화, 자동화, 지능화를 구현할 수 있는 차세대 보안관제 플랫폼 SOAR(Security Orchestration Automation and Response)의 등장과 확산이 진행되고 있다. 본 논문에서 차세대 보안관제 플랫폼 기반의 활용 방안과 발전 방향에 대해 알아본다.
Abstract
Cyberattacks pose a great threat to the business continuity of companies and institutions. Recently, as Advanced Persistent Threat (APT) targeting specific organizations and new threats that exploit library vulnerabilities in the application development process have emerged one after another, concerns about the limitations and problems of existing information security control are growing.Against this background, the emergence and spread of SOAR (Security Orchestration Automation and Response), a next-generation security control platform that can overcome the increased risk of information security control failure, cost burden, work fatigue, and reduced efficiency, and realize unification, automation, and intelligence.In this paper, we look at the utilization method and development direction of the next-generation security control platform.
참고문헌 (19)
- S. Choe, "A Study on the Activation of Sharing Cyber-Threat Information among Businesses", Korean Information Processing Society CCS, 12(4), pp.143~156 (2023)
- The Worldwide Security Orchestration, Automation and Response Industry is Expected to Reach $2.3 Billion by 2027, "Research and Markets", Business Wire, ~ (2022)
- Survey for Information Security Industry in Korea 2022, "Korea Information Security Industry Association", ~ (2022)
- An Empirical Study on Factors Affecting the Introduction of AI-Based Security Control Syste ms in Government, "S. Jans", ~ (2022)
- Develop a Security Operations Strategy, "Info Tech Research Group", ~ (2018)
- Security Orchestration, Automation and Response Demand Set to Grow, "Kerner and Sean Michael", Demisto Enterprise eWeek, ~ (2018)
- Research on XDR platform application for next-generation security threat control, "K. Jang", ~ (2023)
- J. Kinyua, "AI", ML in Security Orchestration, Automation and Response: Future Research Directions, 2021, pp.28(2), 527~545
- Security Operation Strategy Based on the Change of Security Paradigm, "IGLOO Security", ~ (2019)
- Preparing Your Security Operation for Orchestration and Automation Tools, "Gartner", Gartner Research, ~ (2018)
- A methodology for Internal Security Response Process Automation Base on SOAR in SIEM, "J. Choe", ~ (2022)
- K. Ko, "Application of Integrated Security Control of Artificial Intelligence Technology and Improvement of Cyber-Threat Response Proces", The Korea Contents Association, 21(10) (2021)
- Upendra Bartwal, "Security Orchestration, Au tomation, and Response Engine for Deployment of Behavioural Honeypots", 2022 IEEE Conference on Dependable and Secure Computing(DSC) (2022)
- J. Yoon, "A Case Study of Building a Next Generation Security System Using AI Platform", pp.87~96 (2020), Korea Institute of Information & Telecommunication Facilities Engineering
- Rahul Vast, "Artificial Intelligence based Security Orchestration, Automation and Response System", 2021 IEEE 6th International Conference for Convergence in Technology (I2CT) (2021)
- J. Hong, "Artificial Intelligence-based Security Control Construction and Countermeasures", The Korea Contents Association, 21(1) (2021)
- "BLOG_SIEM을 통한 경보설정과 이벤트 대응"[URL]
- 김규일, "보안관제 효율성 제고를 위한 실증적 분석기반 보안이벤트 자동검증 방법" (2014), 한국과학기술정보연구원
- D. Lee, "The Trends of Next Generation Cyber Security", Korea Institute of information and Communication Engineering, 23(11), pp.1478~1481 (2019)