산업기술 유출방지를 위한 보안시스템 평가 탐색적 연구

Abstract

The value of information increases, crimes threatening this has also risen. especially crimes related to the information increased at an alarming rate. In 1990s, attacks sniffing information against enterprises, bank, and public institutions which contain the valuable information have prevailed. To prevent these attacks, enterprises have utilized anti-virus, anti-spyware and firewall to protect themselves. As the technologies were also developed and they could prevent external attacks, outside hacking have become impossible hence concerns of enterprises relived. But, at the beginning of 2000 another threat emerged. It is 'inside data leakage'. The leakages from inside are actions that was made by staff in the enterprises or collaborative workers to outflow. These new threats were inevitable for enterprises which have concentrated themselves to external hacking. They couldn't follow up to leakages made by internal stake holders with ordinary firewall. Thus, the enterprises were exposed to the inside data leakage without any proper precautions, so there appeared movements which stimulate the development of data loss preventing solutions and they are used by many enterprises. But there doesn't exist any appropriate concept of inside data leakage which features differences with outside hacking, Despite of the appearance of a variety of solutions, anyone can not assure that newly developed solutions provide satisfactory effects. Thus in this paper, selected prevailing solutions are used to evaluate whether they meet enterprises' needs for data security.