국가주요기반시설대상안전한클라우드분석에관한연구
A Study on Secure Cloud Analysis for National Infrastructure
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
최근 발달되고 있는 클라우드는 AI, 블록체인을 비롯한 타 기술 및 산업과 융합되고 있으며, 온·오프라인의 대부분의 서비스가 클라우드로 구성되고 있다. 이는 민간분야를 넘어 국가 주요기관 및 공공기관에서 많이 활용되고 있다. 하지만 클라우드 환경에서, 데이터 활용 시, 데이터 유출, 손실 등 다수의 보안 위협이 발생할 수 있다. 만약 클라우드에 활용되는 데이터가 사용자들의 민감한 정보나, 혹은 주요기관에 의해 중요한정보라면, 노출시 다양한 보안 위협으로 인해 상당한 피해가 예상된다. 본 논문은 국가 주요 기반시설을 대상으로 안전한 클라우드 아키텍쳐 솔루션를 위한 기술 동향 및 조사에 관한 것으로, 각 주요국의 클라우드 정책에 대한 조사와 국내에서 추진 중인 클라우드 정책에 대해 설명한다. 그리고 조사한 자료를 기반으로, 국가주요 기반 시설에 사용될 클라우드를 안전하게 구성하기 위해 고려해야할 방향이나 기술, 요구사항 등을 제언한다.
Abstract
The recently developed cloud is converging with other technologies and industries including AI and blockchain, and most online and offline services are composed of the cloud. It is widely used in major national and public institutions beyond the private sector. However, there are various security threats such as data leakage and loss when using data in a cloud environment. If sensitive information of users or important information is shared in the cloud, significant damage is expected when exposed to security threats. This paper is about technology trends and research for secure cloud architecture solutions for major national infrastructures. A survey on cloud policies in each major country and cloud policies being promoted in Korea will be explained. And based on the researched data, we suggest the direction, technology, and requirements to consider to securely configure the cloud to be used for major national infrastructure.
참고문헌 (22)
- "3rd Cloud Computing Master Plan(‘22~24’)" (2021)[URL]
- Promising Market Issue Report Cloud Computing, "INNOPOLIS", Korea Innovation Foundation, ~ (2021)
- Prospects Report on Future Prospective Information Security Technology for Strengthening National Cybersecurity, "NSR", ~ (2022)
- Cloud Computing Concepts and Industry Trends, "FSI", Security Research Department, ~ (2016)
- Core Infrastructure of Digital New Deal, Cloud Industry Ecosystem Trend, "Y. J. J.", KDB Future Strategy Research Center Industrial Technology Research Center, ~ (2021)
- Science and Technology Job Promotion Agency S&T Market Report, 66, "W. H. Kang", Science and Technology Job Promotion Agency, ~, pp.S&T Market Report, 66 (2018)
- AI SW Self-Driving Vehicle Report, "H. C. Kim", ICT R&D Technical Roadmap 2025, ~ (2020)
- "Guide to Japanese Cloud Computing Gip Global ICT Portal, 2019" (2019)[URL]
- 2022 China Cloud Computing White Paper Announced, "KOSTEC", Korea-China Science and Technology Cooperation Center, ~ (2022)
- "Gartner Top 10 Strategic Technology Trends For 2020" (2019)[URL]
- 2018 ICT technology level evaluation results, "IITP", ~ (2019)
- 2021-01 Cloud Service Overseas Trends, "S. K. Han", KDI Economic Information Center, ~ (2021)
- "Digital service issue report" (2022)[URL]
- Cloud Computing Key Statistical Manual, "C. B. Lee", Ministry of Science and ICT&NIPA. Government of the Republic of Koreanipa, ~ (2017)
- "Administrative/Public Institutions Private Cloud Usage Guidelines" (2019)[URL]
- "Cloud Service Security Certification System (IaaS/SaaS/DaaS) Evaluation Criteria" (2020)[URL]
- L. Colonna, "Article 4 of the EU Data Protection Directive and the irrelevance of the EU–US Safe Harbor Program?", International Data Privacy Law, 4(3), pp.203~221 (2014)[DOI]
- Izzat Alsmadi, "IT Risk and Security Management", The NICE Cyber Security Framework, pp.55~78 (2020), Springer International Publishing[DOI]
- "The Army Cloud Plan" (2020)[URL]
- Cloud Security Authentication System(FedRAMP) Process Analysis and Government Policy Research, "B. H. Lee", Korean Standards Association, ~ (2013)
- "Guidelines for Cloud Usage of Major Information and Communication Infrastructure in the Private Sector" (2021)[URL]
- Cloud Service Security Certification FedRAMP VS CSAP, Digital service issue report, "T. K. Yoon", ~ (2022)