사이버무기 분류체계에 관한 시론
A Study on the Cyber Weapons Classification System
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
주권국가는 외국으로부터 영토에 대한 침해를 받으면 자위권을 발동하거나 안보리 승인을 받아 전쟁을 할 수 있는권리를 가진다, 전쟁은 자위권의 필요성과 비례성의 원칙하에 진행된다. 사이버공격 발생 시 공격수단과 효과 분석을통해서 비례적 대응을 하여야 하며, 이를 위하여 사이버무기에 대한 분류가 필요하다. 따라서 본 연구는 사이버무기에대한 정의와 분류기준을 제시함으로써 자위권 조치를 위한 필요성과 비례성에 따라 합리적이며 합법적인 대응을 가능케 하고자 한다. 본 연구에서는 사이버무기를 『군이 작전목적에 따라 사이버공간에서 사이버기술을 사용하여 정보수집, 공격, 방호활동 등을 하는 수단』으로 정의하였다. 또한 기존의 무기체계 현황과 공개된 사이버무기 사용 사례를바탕으로 사이버무기를 ① 정보수집(획득)용 사이버무기, ② 공격(제압)용 사이버무기, ③ 방호용 사이버무기로 분류하였다. 이러한 기능적 분류에 따라 비례적 대응을 적용하기 위한 고려사항을 제시하였다. 향후에는 사이버공격에 대한 비례성 원칙을 보장하기 위해서 사이버무기 효과에 기반 한 등급화 연구가 이루어져야 하며, 본 연구는 비례성 원칙의 한 축을 이루는 사이버무기의 분류에 관한 탐색적 연구를 하였다는데 그 의의가 있을 것이다.
Abstract
The sovereign state has the right to engage in self-defense or war with the approval of the Security Council when itreceives an invasion of territory from a foreign country. War is conducted under the principle of the necessity andproportionality of self-defense. In case of cyber attack, proportional countermeasure must be made through attack means andeffect analysis, and cyber weapons need to be classified for this purpose. Therefore, this study aims to provide a rationaland legitimate response according to the necessity and proportionality of the self - defense right by suggesting definition andclassification criteria of cyber weapons. In this study, cyber weapons were defined as "means of collecting, attacking, andprotecting information using cyber technology in the cyber space according to military objectives. Based on existing weaponsystems and public cyber weapons cases, cyber weapons were classified as ① cyber weapons for information gathering, ②cyber weapons for attack, and ③ cyber weapons for protection. We suggest the considerations for applying the proportionalresponse according to this functional classification. In order to guarantee the principle of proportionality to cyber attacks inthe future, the classification study based on the cyber weapon effect should be conducted. This study has conducted anexploratory study on the classification of cyber clusters which constitutes one axis of the proportionality principle.
참고문헌 (30)
- "Joint FM 3-24, Joint Cyber Operation, the characteristics of cyber weapons system are classified into non-formation, ease of development, speed and destructiveness, broadness, and non-killing", 4~5
- MND, Seoul, "Article 14 (Classification of Weapon System) Refer to MND Ord No. 1975", ~ (2016)
- "Law No. 14182 ('16. 5.29.) See Article 3 (Definitions) of the Defense Business Act", ~
- "Presidential Decree No. 27618 ('16.11.29.) See Article 2 of the Enforcement Decree of the Defense Business Act", ~
- Ahn Seung-bum, "The Korean Armed Forces Yearbook 2016-2017" (2016)
- "Article 1059 Charter of the UN (entered into force on Sep 18,1991), see Article 51", ~
- Michael N. Schmidt, "Tallinn Manual", pp.99~101 (2014), Written and Thought
- Michael N. Schmidt, "Tallinn Manual", pp.89~98 (2014), Written and Thought
- Dorothy E. Denning, "Some argue that cyber space should not be militarized, Part-II-CH-6", ~
- Kenneth Anderson, "Why the Hurry to Regulate the Auto Weapon System? But Not Cyber - Weapons?", Temple Int. l & Comp. L.J. (2016)
- "Cyber attack procedure: Information gathering (Vulnerability identification) - System", network intrusion (ID, PW acquisition) - Obtain administrator authority (Check system internal vulnerability) - Delete attack trail and install backdoor Version Introduction, 2012, pp.34~35
- Nick Ebner, "Cyber Space, Cyber Attack and Cyber Weapons", IFSH, 2~ (2015)
- Thomas Rid, "Cyber weapon", The RUSI journal, 157, pp.6~13 (2012)
- Cyberspace Policy Report, "DoD", 2~ (2011)
- "Joint FM 3-24, Joint Cyber Operation", JCS, ~ (2016)
- "Refer to the MND Ord No. 1862 (Dec 30,2015), Defense Cyber Security Directive", MND, ~ (2015)
- "The characteristics of the interim version are (1) low investment cost (2) propaganda (3) difficult to identify the subject (4) unilateral attack is possible (5) defense is always post-war (6) 24-hour exhibition system ⑦ damage assessment is difficult. Son Yeongdong, "Endless War of 0 and 1"", 154~156 (2013)
- "On Jan 16, 1991, after the desert storm command, the EC-130H electronic electricity neutralized the Iraqi network and the war began, and the war ended at a time when Iraq could not carry out the proper defense operations, Wikipedia, Gulf War"[URL]
- "Cyber Kill Chain Step 7: (1) Reconnaissance (find out the name of the company's employees, identify key business contacts, and send malicious code to email", attached) (Establishing a database of pdf files that are thought to be infected) (3) Forwarding (sending malware via email or an infected USB drive) (4) Taking (finding zeroday vulnerability) (5) Installing (6) Command and control (7) Execution. Sein Harris, Translated by Jin Seon Mi, "Invisible War @ War", 2015
- 김인수, "북한 사이버전 수행능력의 평가와 전망", 통일정책연구, 24(1), pp.117~148 (2015), 통일연구원
- 이용석, "독일 연방 사이버군 창설 계획과 한국군 적용방향", 국방정책연구, 33(1), pp.203~244 (2017), 한국국방연구원[DOI]
- Um Jung Ho, "Introduction to Sai Version", Hongleung Science Publishers
- Park, Sangseo, "Perspectives of Major Countries on Cyber Warfare", Journal of Korea Institute of Information Security, 14(6), pp.70~74 (2004)
- Lee, Ho-Gyun, "Development Trends and Development Trends between National Defense Version", Defense and Technology, (422) (2014)
- "Refer to the Ministry of National Defense Ordinance No. 2114 (Dec. 2017), the Defense Power Generation Directive, Article 14 (Weapon System Classification), and Refer to Attachment 2 (Detailed classification of weapon systems)", ~
- 이호균, "국방 사이버 무기체계와 기존 재래식 무기체계의 핵심기술 수준 및 특성 비교 연구", 정보보호학회논문지, 26(4), pp.985~994 (2016), 한국정보보호학회[DOI]
- Seo, Dong-il, "Current status and prospect of security technologies for interim version", Journal of Korea Institute of Information Security, 21(6), pp.42~45 (2011)
- DAMO-AV, "US Army calls for units to discontinue use of DJI equipment" (2017)
- "North Korea's hacking technology, the world's highest level ... Get rid of computer data that is not connected to the Internet" (2014)[URL]
- KISA, "Internet & Security weekly", Korea Internet & Security Agency, 6~ (2013)