보안취약점 공개심의정책(VEP)의 법적 이해와 합리적 설계방안

키워드

참고문헌 (71)

1. 2021 연례보고서: 국가사이버안보센터, "국가정보원", ~ (2021)
2. 김창섭, "안보 목적의 해외정보 온라인 수집을 위한 법제도 연구", 국가정보연구, 14(1), pp.71~113 (2021), 한국국가정보학회
3. 김한균, "수사기관의 정보 수집·생산 기능 합리화 - 영국 국가범죄수사청 정보기능 분장 및 통제 사례를 중심으로", 형사소송 이론과 실무, 11(2), pp.151~174 (2019), 한국형사소송법학회[DOI]
4. 박광민, "글로벌 정보환경에서의 방첩업무 개선방안", 외법논집, 43(2), pp.195~224 (2019), 법학연구소[DOI]
5. 오일석, "미국 정보기관 제로데이 취약성 대응 활동의 법정책적 시사점", 미국헌법연구, 30(2), pp.143~185 (2019), 미국헌법학회
6. 윤상필, "보안취약점의 사회적 인식과 법･기술적 대응전략", 박사, pp.2021
7. 이원상, "형사법적 관점에서의 랜섬웨어 대응방안", 범죄수사학연구, 3(1) (2017), 경찰대학 수사과학연구센터
8. 이원우, "현대적 민주법치국가에 있어서 행정통제의 구조적 특징과 쟁점", 행정법연구, (29), pp.105~133 (2011), 행정법이론실무학회
9. 통신감청제도의 문제점과 개선방향, "이재일", 국회입법조사처, ~ (2015)
10. 장노순, "정보기관과 비국가 행위자의 이중관계: 사이버 위협의 공개지목과 사이버 공작을 중심으로", 국가안보와 전략, 21(4), pp.43~78 (2021), 국가안보전략연구원[DOI]
11. 전웅, "현대 국가정보학" (2015), 박영사
12. 한희원, "국가안보 패러다임의 변화와 정보·수사 융합에 대한 법규범적 연구 - 전쟁에서 국가안보사범과의 전투로 -", 법학연구, 17(2), pp.275~302 (2017), 한국법학회
13. Ablon, Lillian, "Zero Days, Thousands of Nights: The Life and Times of Zero-day Vulnerabilities and Their Exploits" (2017), RAND Corporation
14. Agresti, William W., "The Four Forces Shaping Cybersecurity", Computer, 43(2) (2010), IEEE
15. Arora, Ashish, "Impact of Vulnerability Disclosure and Patch Availability - An Empirical Analysis", The 3rd Workshop on the Economics of Information Security (2004)
16. ASD, "Responsible Release Principles for Cyber Security Vulnerabilities" (2019)
17. Black, Jr., William B., "Thinking Out Loud about Cyberspace" (1997), Cryptolog, National Security Agency
18. Bowsher, Charles A., "Testimony on the Establishment of an Inspector General at the Central Intelligence Agency" (1988), Government Accountability Office
19. Buchanan, Ben, "The Hacker and the State: Cyber Attacks and the New Normal of Geopolitics" (2020), Harvard University Press
20. Cybersicherheitsstrategie für Deutschland 2021, "Bundesministerium des Innern, für Bau und Heimat", ~ (2021)
21. Civiletti, Benjamin R., "Intelligence Gathering and the Law: Conflict or Compatibility?", Fordham Law Review, 48(6) (1980)
22. CISA, "NSA-CISA-FBI Joint Advisory on Russian SVR Targeting U.S., and Allied Networks", ~ (2021)
23. CISA, "Mitigating Log4Shell and Other Log4j-Related Vulnerabilities", Joint Cybersecurity Advisory, ~ (2021)
24. Clarke, Richard A., "Liberty and Security in a Changing World" (2013), The President’s Review Group on Intelligence and Communications Technologies
25. Global Threat Report 2019: Adversary Tradecraft and the Importance of Speed, "Crowd Strike", ~ (2019)
26. Crowd Strike, "OverWatch Exposes AQUATIC PANDA in Possession of Log4Shell Exploit Tools During Hands-on Intrusion Attempt", ~ (2021)
27. CSE., "CSE's Equities Management Framework", ~ (2019)
28. Deeks, Ashley S., "Confronting and Adapting: Intelligence Agencies and International Law", Virginia Law Review, 102(3) (2016)
29. Desai, Deven R., "Trust but Verify : A Guide to Algorithms and the Law", Harvard Journal of Law & Technology, 31(1) (2017)
30. Federal Ministry of the Interior, Building and Community, "Cyber Security Strategy for Germany 2021" (2021)
31. Franklin, Sharon B., "Strategies for Engagement Between Civil Society and Intelligence Oversight Bodies", New America, ~ (2018)
32. Garcha, Rupinder K., "NITs a No-Go: Disclosing Exploits and Technological Vulnerabilities in Criminal Cases", New York University Law Review, 93(4) (2018)
33. GCHQ, "The Equities Process" (2018)
34. Herpig, Sven, "Governmental Vulnerability Assessment and Management" (2018), Stiftung Neue Verantwortung
35. Heyman, Steven J., "The First Duty of Government: Protection, Liberty and the Fourteenth Amendment", Duke Law Journal, 41 (1991)
36. Jaikaran, Chris, "Vulnerabilities Equities Process", Congressional Research Service, ~ (2017)
37. Jasutis, Grazvydas, "Parliamentary Oversight of Military Intelligence, NATO Parliamentary Assembly" (2020), DCAF
38. Joyce, Rob, "Disrupting Nation State Hackers" (2016), USENIX Enigma
39. Kaplan, Fred, "Dark Territory: The Secret History of Cyber War" (2016), Simon & Schuster
40. Li, Zhen, "Harnessing Uncertainty in Vulnerability Market", Proceeding of the 2018 27th International Conference on Computer Communication and Networks(ICCCN) (2018), IEEE
41. Loleski, Steve, "From cold to cyber warriors: the origins and expansion of NSA’s Tailored Access Operations(TAO) to Shadow Brokers", Intelligence and National Security, 34(1) (2019)
42. Lowenthal, Mark M., "Intelligence: From Secret to Policy" (2012), CQ Press
43. NSA, "Chinese State-Sponsored Actors Exploit Publicly Known Vulnerabilities", ~ (2020)
44. NSA, "Transition 2001(declassified)", ~ (2001)
45. Matwyshyn, Andrea M., "Ethics in Security Vulnerability Research", IEEE Security &Privacy, 8(2) (2010)
46. ODNI, "Commercial and Government Information Technology and Industrial Control Product or System Vulnerabilities Equities Policy and Process" (2010)
47. Posner, Richard A., "Privacy, Surveillance, and Law", The University of Chicago Law Review, 75(1) (2008)
48. Reddick, Christopher G., "Public Opinion on National Security Agency Surveillance Programs:A Multi-Method Approach", Government Information Quarterly, 32(2) (2015)
49. Saltzman, Ilai, "Cyber Posturing and the Offense-Defense Balance", Contemporary Security Policy, 34(1) (2013)
50. Schneier, Bruce, "Class Breaks", Schneier on Security, ~ (2017)
51. Schwartz, Ari, "Government’s Role in Vulnerability Disclosure: Creating a Permanent and Accountable Vulnerability Equities Process" (2016), Harvard Kennedy School Belfer Center
52. Shirey, Rob, "“Vulnerability”. Internet Security Glossary(RFC 2828)" (2000), Internet Engineering Task Force(IETF), Internet Society(ISOC)
53. Tasheva, Iva, "DIGITAL EUROPE position paper on vulnerability stockpiling", DIGITAL EUROPE, ~ (2017)
54. U.S. President’s Commission on Critical Infrastructure Protection, "Critical Foundations: Protecting America’s Infrastructures" (1997)
55. Williams, Ian, "The Secrets We Keep…: Encryption and the Struggle for Software Vulnerability Disclosure Reform", Michigan Technology Law Review, 25(1) (2018)
56. Williams, Robert D., "(Spy) Game Change: Cyber Networks, Intelligence Collection, and Covert Action", The George Washington Law Review, 79(4) (2011)
57. Winner, Langdon, "Autonomous Technology: Technics-out-of-Control as a Theme in Political Thought" (1978), The MIT Press
58. Wu, Weimi, "Hacking Team Flash Zero-Day Tied To Attacks In Korea and Japan… on July 1", Trend Micro, ~ (2015)
59. Zhang, Daniel, "Vulnerabilities Equities Process Revisited", Georgetown Security Studies Review (2019)
60. 工业和信息化部, "网络产品安全漏洞管理规定", ~ (2021)
61. "GCHQ Has Disclosed Over 20 Vulnerabilities This Year, Including Ones in iOS(2016.04.30.)" (2016)[URL]
62. "Defensie slachtoffer van ernstige cyberaanval(2021.12.20.)" (2021)[URL]
63. "The NSA hacks other countries by buying millions of dollars’ worth of computer vulnerabilities(2013.08.31.)" (2013)[URL]
64. "Hacking Team hacked: firm sold spying tools to repressive regimes, documents claim(2015.07.06.)" (2015)[URL]
65. "NSO Group spyware used to hack at least nine US officials’ phones(2021.12.03.)" (2021)[URL]
66. "NSA found a dangerous Microsoft software flaw and alerted the firm-rather than weaponizing it(2020.01.14.)" (2020)[URL]
67. "What to do with cyber vulnerabilities?(2021.07.08.)" (2021)[URL]
68. "NSA Said to Have Used Heartbleed Bug, Exposing Consumers(2014.04.11.)" (2014)[URL]
69. "‘Almost every nation’ now has cyber vulnerability exploitation program, NSA official says(2021.09.29.)" (2021)[URL]
70. "Mozilla slings Firefox patches at flaw found by GCHQ's infosec arm(2016.04.28.)" (2016)[URL]
71. "Should the government stockpile zero-day software vulnerabilities?(2017.05.19.)" (2017)[URL]

관련 논문AI추천