물리보안의 정의에 관한 연구- 위험평가이론을 중심으로 -
A Study on the Definition of Physical Security - With Focus on Risk Assessment Theories -
0
조회
0
다운로드
47
인용
0
참고문헌
키워드
초록
국내는 물리보안(physical security)에 대한 지식체계가 미흡하여 그 기본적인개념이 정립되어 있다고 보기 어렵다. 따라서 이 연구에서는 올바른‘물리보안의정의’를 도출하여 관련 연구의 발전을 위한 이론적 토대를 제공하고자 하였다. 이를 위한 방법으로‘위험평가(risk assessment)’이론을 적용하였는데, 위험의 크기를 결정하는 세 가지 요소인‘자산(asset), 위협(threat), 취약성(vulnerability)’을 통해서 물리보안의 통제범위를 분석 후 문제점을 파악하였다. 결과적으로 물리보안을 정의함에 있어서‘자산’의 범위는‘인명, 정보, 시설’ 을,‘위협’의 범위는‘고의성 여부’를 적용하였으며,‘취약성’에 있어서는 구조적(structural), 전자적(electronic), 인적(human) 요소를 모두 포함하여, 최종적으로 물리보안의 정의를 아래와 같이 도출하였다. “물리보안은 범죄 등 고의적 위협(threat)으로부터 인명, 정보, 시설 등 자산(asset)을 보호하기 위해 물리적 취약성(vulnerability)을 통제하는 활동이다. 그 통제수단은 건축물이나 보안 관련 설비 등의 구조적(structural) 요소, 보안시스템등의 전자적(electronic) 요소와 보안요원 등의 인적(human) 요소로 구성된다.”
Abstract
There is a lack of clear and systematic definition of physical security in Korea, so its basic concept has not been well-established. In an attempt to fill this gap, the purpose of this study is to investigate the ‘Definition of Physical Security’ and provide the theoretical basis for research conducted in the area. The ‘Risk Assessment’ theory is applied and based on the three determinants of the magnitude of risks (i.e. asset, threat, and vulnerability), the scope of physical security control and related problems are analyzed. In defining physical security, the scope of ‘Asset’ includes people, information, and property. In regard to ‘Threat’, intentionality is the main consideration. Additionally, structural, electronic, and human factors are taken into account for ‘Vulnerability’. After examining the scope of each determinant, the following definition of physical security is derived. “Physical security is defined as the efforts to control physical vulnerabilities in order to secure people, information, and property from intentional threats such as crimes. The control measures consist of structural components such as buildings or security-related facilities, electronic components including security systems, and human components like security officers.” Key words: Security
참고문헌 (19)
- 이창무, "산업보안의 개념적 정의에 관한 고찰", 한국산업보안연구, 2(1), pp.73~90 (2011), 한국산업보안연구학회
- 전산용어사전편찬위원회, "컴퓨터인터넷 IT용어대사전" (2011), 일진사
- 한국정보통신기술협회, "정보통신용어사전" (2017), TTA
- ASIS, "Facilities Physical Security Measures Guideline", ASIS International, ~ (2009)
- ASIS, "Protection of Assets", ASIS International, ~ (2009)
- ASIS, "Physical Security Principles" (2015), ASIS International
- Doss, K. T., "Physical Security Professional Study Guide, 2nd Edition", ASIS International, ~ (2015)
- Common Concepts Underlying Safety, Security and Survivability Engineering, "Firesmith, D. G.", Carnegie Mellon University, ~, pp.Technical Note CMU (2003), SEI-2003-TN-033
- Garcia, M. L., "The Design and Evaluation of Physical Protection System" (2007), Butterworth-Heinemann
- Headsquaters, United States Department of Army, "Field Manual 3-19.30:Physical Security", US Army, ~ (2001)
- Idsø, S., "Object and Information Security Method of Risk and Vulnerability", pp.2000
- ISC2, "Official Guide to the CISSP CBK. 4th Edition", ISC2, ~ (2015)
- ISECOM, "Open Source Security Testing Methodology Manual", ISECOM, ~ (2014)
- "ISO 31000. Risk management, Principle and Guideline", International Organization for Standardization, ~ (2009)
- Patterson, D. G., "Physical Security Professional Study Guide", ASIS International, ~ (2007)
- Patterson, D. G., "Physical Protection Systems : A Practical Guide, 2nd Edition", ASIS International, ~ (2013)
- 서울신문, "14분 만에 속수무책으로 뚫린 인천공항 보안문", 서울신문 (2016.1.27.), ~ (2016)
- 보안이란 무엇인가?, "보안뉴스 (2015.12.14.)", 2015
- Physical Security Market by Type (System (Access Control, Video Surveillance, PSIM, Perimeter Intrusion Detection & Prevention, Security Scanning, Imaging & Metal Detection, Fire & Life Safety), & Service), Vertical, and Region - Global Forecast to 2021, "Markets and Markets", ~ (2017)