사물인터넷 환경에서 보안 액세스 서비스 에지 교육과정 모델에 관한 연구
A Study on Curriculum Model for Secure Access Service Edge in IoT Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
사물인터넷 환경에서 새로운 보안에 대한 요구사항은 빠르게 변화하고 있다. 이러한 빠른 변화에서 보안 위협을통한 침해사고가 발생하면 큰 피해가 발생한다. SASE(Secure Access Service Edge) 환경은 보안 위협에 매우 취약하며, 침해가 발생하면 심각한 피해가 발생한다. SASE 환경의 보안을 강화하려면 SASE의 고유한 특성과 문제 해결을다루는 전문 커리큘럼이 필요하다. 본 논문에서는 SASE 환경 내에서 보안 사고에 대응하기 위한 커리큘럼 모델을 제안한다. 제안된 커리큘럼 모델은 위협 유형, 위반 시나리오 및 대응 절차를 포함하여 SASE 보안의 다양한 측면을 다루는교육과정으로 설계하였다. 이 모델의 목표는 보안 인식을 향상하고 전문가가 SASE 프레임워크 내에서 보안 사고를 효과적으로 처리할 수 있도록 준비하는 것에 목적을 두고 있다.
Abstract
In the Internet of Things environment, new security requirements are changing rapidly. In this rapid change, if a breach occurs due to a security threat, great damage will occur. The SASE (Secure Access Service Edge) environment is highly vulnerable to security threats, and if a breach occurs, serious damage will occur. In order to strengthen the security of the SASE environment, a specialized curriculum that covers the unique characteristics and problem solving of SASE is required. In this paper, we propose a curriculum model for responding to security incidents in the SASE environment. The proposed curriculum model is designed to cover various aspects of SASE security, including threat types, breach scenarios, and response procedures. The goal of this model is to increase security awareness and prepare professionals to effectively handle security incidents within a SASE framework.
참고문헌 (16)
- No More Chewy Centers: TheZero Trust Model Of Information Security, "John Kindervag", Forrester, ~ (2016)
- "Zero Trust Architecture, NIST SP 800-207" (2020)[URL]
- Y.J.Choi, "Zero Trust Standard Model Checklist Based on NIST 7 Tenets", Review of KIISC, 34(3), pp.5~12
- Zero Trust Adoption Report, "Vasu Jakkal", Microsoft Security, ~ (2021)
- "What is Zero Trust and Zero TrustExtended (ZTX)"[URL]
- W. H. Yoon, "2023 Second Cybersecurity Coalition Report", pp.28~43 (2023)
- Implementing a Zero Trust Architecture, "National Institute of Standards and Technology", ~, pp.NISTSP 1800-35 (2022)
- K. H. Le, "IA Study on the Infringement Incident Response Curriculum Model in IoT Environmentt", Journal of Internet of Things and Convergence, 9(3), pp.55~60 (2023)
- H. W. Kim, "Intrusion response methods in the Internet of Things(IoT)environment", Journal of the Korea Institute of Information Security and Cryptology, 28(4), pp.739~749 (2018)
- J. H. Lee, "Security threats and response methods in the Internet of Things(IoT)environment", Journal of the Korea Institute of Information Security and Cryptology, 27(4), pp.697~706 (2017)
- Y. M. Park, "Training program model for intrusion response in the Internet of Things(IoT)environment", Journal of the Korea Institute of Information Security and Cryptology, 29(4), pp.795~804 (2019)
- Andrew S. Tanenbaum, "The New Internet" (2010)
- Richard E. Smith, "The Internet of Things: A Systems Perspective" (2015)
- K.H.Lee, "A Study on a Project-based Blockchain Web Developer Education Model Customized for Companies", Journal of Internet of Things and Convergence, 8(4), pp.77~83 (2022)
- M. G. Lee, "A Development of Curriculum for Information Security Professional Manpower Training", Journal of the Institute of Electronics and Information Engineers, 54(1), pp.46~52 (2017)