Improvement of the Defense Planning and Management System to Implement ROK’s National Cybersecurity Strategy
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
With the development of the Internet, cyberspace has expanded, which has ushered in several changes. These changes have significantly impacted the defense sector. The defense sector is changing from an existing weapon system-centered operation to a network-centered operation, and cyberspace is now recognized as the fifth strategic space, land, sea, air, and space. However, this expansion of cyberspace paradoxically increases its vulnerability to cyberattacks. Hacking groups have been causing damage through cyberattacks in many countries. Therefore, severalcountries are preparing countermeasures for cybersecurity at the national level. In 2019, the ROK announced its national cybersecurity strategy. However, in the case of the defense field, there are limitations in implementing the cybersecurity policy of the higher concept because it is closed and has specificity. Accordingly, this paper proposes the secure defense planning and management system (SPPBEES) so that the cybersecurity policy of the high concept is materialized as a strategy and leads to force reinforcement.
Abstract
With the development of the Internet, cyberspace has expanded, which has ushered in several changes. These changes have significantly impacted the defense sector. The defense sector is changing from an existing weapon system-centered operation to a network-centered operation, and cyberspace is now recognized as the fifth strategic space, land, sea, air, and space. However, this expansion of cyberspace paradoxically increases its vulnerability to cyberattacks. Hacking groups have been causing damage through cyberattacks in many countries. Therefore, severalcountries are preparing countermeasures for cybersecurity at the national level. In 2019, the ROK announced its national cybersecurity strategy. However, in the case of the defense field, there are limitations in implementing the cybersecurity policy of the higher concept because it is closed and has specificity. Accordingly, this paper proposes the secure defense planning and management system (SPPBEES) so that the cybersecurity policy of the high concept is materialized as a strategy and leads to force reinforcement.
참고문헌 (26)
- Herbert Lin, "Russian Cyber Operations in the Invasion of Ukraine", The Cyber Defense Review, 7(4), pp.31~46 (2022)
- Min-hyung Kim, "North Korea’s Cyber Capabilities and Their Implications for International Security", Sustainability, 14(3), pp.1744~ (2022)
- National Security Strategy, "The White House", ~ (2022)
- National Cybersecurity Strategy, "National Security Office", ~ (2019)
- The Rise of North Korean Cyber Threats in the Kim Jong Un Era:How Can We Respond?, "Bomi Kim", Institute for National Security Strategy, 1~, pp.Institute for National Security Strategy 147 (2021)
- 2022 Defense White Paper, "Ministry of National Defense", 25~ (2022)
- 김인수, "북한 사이버전 수행능력의 평가와 전망", 통일정책연구, 24(1), pp.117~148 (2015), 통일연구원
- Annual Threat Assessment of the U. S. Intelligence Community, "Dennis C. Blair", Office of the Director of National Intelligence, ~ (2010)
- North Korean Cyberattacks: A Dangerous and Evolving Threat, "Bruce Klingner", The Heritage Foundation, 6~ (2021)
- 2023 National Cybersecurity White Paper, "National Intelligence Service", ~ (2022)
- The Korean Way with Data, "Jang GyeHyun", Carnegie Endowment for International Peace, 16~17 (2021)
- 2010 Defense White Paper, "Ministry of National Defense", 54~ (2010)
- 2022 National Cybersecurity White Paper, "National Intelligence Service", ~ (2022)
- 2014 Defense White Paper, "Ministry of National Defense", ~ (2014)
- 2022 Annual Report, "National Cyber Security Center", 12~ (2022)
- DoD Planning, Programming, Budgeting, and Execution (PPBE):Overview and Selected Issues for Congress, "Brandon W. McGarry", Congressional Research SVC, 5~7 (2022)
- Michael J. Mazarr, "The U.S. Department of Defense’s Planning Process: Components and Challenges" (2019), RAND Corporation
- DoD CIO Cybersecurity Architecture Division, Department of Defense (DoD), "Cybersecurity Reference Architecture", ~ (2023)
- "DoD Cybersecurity Policy Chart" (2023)[URL]
- Ministry of National Defense, "National Defense Force Development Directive", 40~41 (2022)
- U.S. Department of Defense, "Department of Defense DIRECTIVE 7045.14-The Planning, Programming, Budgeting, and Execution (PPBE) Process", U.S. Department of Defense, ~ (2017)
- Ministry of National Defense, "Defense Planning and Management Basic Directive", 3~44 (2022)
- Thomas-Durell Young, "Capabilities-Based “Confusion”: Why Capabilities-Based Planning Systems Struggle", The Korean Journal of Defense Analysis, 33(1), pp.95~118 (2021), 한국국방연구원[DOI]
- Paul K. Davis, "Defense Planning When Major Changes Are Needed", Defence Studies, 18(3), pp.375~ (2018)
- U.S. Department of Defense, "DoD Instruction 8510.01-Risk Management Framework for DoD Systems", ~ (2022)
- 조현석, "국내 무기체계에 대한 RMF 적용 실 사례 연구", 정보보호학회논문지, 29(6), pp.1463~1475 (2019), 한국정보보호학회[DOI]