AHP기법을 활용한 망 분리 방식 선정 절차 개선에 관한 연구
Improvement of Selection Procedure for Network Separation Method by Using AHP
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
관련 법 개정에 따라 망 분리가 법적 의무화되었다. 다수의 공공기관을 비롯하여 금융기관 및 민간 기업에서 망 분리를 도입 하였거나 도입을 적극 검토하고 있다. 망 분리에 대한 다양한 연구가 진행되었으나, 대다수 연구가 개별 망 분리 기술 자체에만 한정되어 있다. 망 분리 방식 선정 및 도입과 관련된 구체적인 기준이나 절차가 없어서, 많은 기관에서 망 분리 추진에 어려움을 겪고 있다. 본 논문에서는 망 분리방식별 특성 분석, 망 분리 관련 국내외 제품의 특성 분석, 관련 분야 전문가의 연구결과 분석 등을 통하여 망 분리 방식 선정 시 고려할 요인들을 도출하였다. 또한, AHP기법을 통해 이들 요인들의 중요도를 산정하고 우선순위를 선정하는 방법을 제시하였다. 제안방법은 실제 망 분리를 도입 준비 중인 기관에 적용하여 해당 기관에 가장 적합한 망 분리 방식 선정이 가능함을 확인하였고, 그를 통해 논문의 타당성을 검증하였다. 본 논문에서 제안한 방법은 망 분리 방식 선정 외에 일반적인 보안제품 선정 등에도 응용가능하다.
Abstract
As a result of the amendment of the relevant laws, the network separation has become legally mandatory. Many public institutions, financial institutions and private companies have adopted or are actively considering the network separation. Various studies have been carried out on network separation, but most studies are limited to individual network separation technology itself. Since there are no specific standards or procedures related to the selection and introduction of network separation methods, many organizations are having difficulty in network separating. In this paper, the factors to be considered in selecting the network separation method are derived by analyzing the characteristics of each network separation method, analyzing the characteristics of domestic and foreign products related to network separation, and analyzing the research results of related experts. In addition, AHP method was used to estimate the importance of these factors and to determine the priorities. The proposed method is applied to the organizations preparing to introduce the actual network separation, and it is verified that this method can be used to select the most suitable network separation method for the relevant organizations. In addition to selecting the network separation method, the proposed method can also be applied to general security product selection.
참고문헌 (21)
- "Technical and administrative protection measures of personal information(No. 2015-3)" (2017)[URL]
- D. K. Kim, "Integrated approval system for enterprise security enhancement of the isolated network", Department of Interdisciplinary Program of Information Security, pp.2015
- "A Standard proposal of AhnLab Truszone" (2017)[URL]
- "IT World" (2017)[URL]
- "IGLOO SECURITY" (2016)[URL]
- H. S. Lee, "Research of security enhancement using VDI-based network separation architecture", Information Security, pp.2015
- W. J. Shim, "A study on considerations for effective network partition", Information Sciences, pp.2015
- J. S. Lee, "(A) Study on designating the solution for deployment of an efficient partitioned network", Information and Media Technology, pp.2013
- S. H. Lee, "A study on separate plan of efficient information system network in partitioned network environment", pp.2011
- R. W. Saaty, "The Analytic Hierarchy Process - what it is and how it is used", Mathematical Modelling, 9(3–5), pp.161~176 (1987)
- "Decision-making using the analytic hierarchy process(AHP) and SAS/IML" (2012)[URL]
- 이현정, "Client Base Computing기반 논리적 망분리 보안 요구사항연구", 예술인문사회 융합 멀티미디어 논문지, 5(5), pp.439~448 (2015), 사단법인 인문사회과학기술융합학회[DOI]
- T. H. Im, "A study on network disconnect technology for information leakage protection", The Korea Association For Industrial Security, 5(1), pp.97~109 (2015)
- "DAOU Tech" (2017)[URL]
- "Logical Network Partition Solution VMFort" (2017)[URL]
- "JETRO COCKPIT4" (2017)[URL]
- Y. T. Kim, "(A) Study on compliance evaluation indicators of corporate information security and personal data protection", Department of Interdisciplinary Program of Information Security, pp.2012
- B. G. No, "Higher rating methodology based on Common Criteria v3.1", Korean Society For Internet Information, 9(3), pp.66~77 (2008)