산업보안 위기경보 프레임워크 설계 -기술적 시스템을 중심으로-

Abstract

Along with the 4th industrial revolution, the convergence of ICT and industry improved the ICT utilization degree. Various ICT systems that are used for this purpose have shared various information such as key information and sensitive information of the company within the enterprise and between the enterprises. However, the various way to utilization information has made it difficult to manage the internal information, which has been exposed to external cyber attacks and internal information leakage. In addition, it is difficult to recognize the security threats and vulnerabilities of the industry, making it difficult to design countermeasures against the risk situation and what kind of response should be prepared. As a result, it has a problem about long time to detect a security incident and return to normal business after an accident. Along with the crisis alarm systems that represent national disasters such as terrorism, wildfire disaster, livestock disease, earthquake, and infectious diseases, companies in our industry are able to visualize the effects of publicity, The need for an industrial security crisis alert system that can provide a preventative effect. Therefore, this study discussed the design method of the industrial security crisis alert framework as a way to raise the awareness of industrial security of domestic companies and to increase the response power. The core elements are industrial classification(existence of core technology/defense technology), classification of leakage information and scale of technology according to each industry, internal technology leakage(domestic leakage, arrest status and social issue subject to foreign leakage), external cyber attack, and internal detection.