IT 외주개발의 보안 SLA 설정방안에 관한 연구

Abstract

The increasing of information security vulnerability due to the Internet spread is one of the biggest problems in Information technology (IT) domain. The threats such as an information system failure and an information spill by hacking have been rapidly increasing recently. In order to cope with these threats, diverse information security systems including firewall, intrusion detection system (IDS), intrusion prevention system (IPS), and web application firewall (WAF) have been built and operated; however, they only focus on the security against an attack from an outside. As a result, it is defenceless against the attack occurred by an insider who can access the internal system. Hence, in order to handle this problem in this paper, we propose the information security SLA which is indispensable to IT outsourcing companies or institutions.