본문 바로가기
KERD
논문KCI 등재

국내 사이버위협 정보 공유에 영향을 미치는 요인

Factors that Affect Sharing Cyber Threat Information in South Korea

0

조회

0

다운로드

2

인용

0

참고문헌

키워드

주제분류컴퓨터학

초록

본 연구는 우리나라 사이버위협 정보 공유의 활성화를 위해 사이버위협 정보를 제공하는 데에 영향을 미치는 요인들을 연구하였으며, 특히 제공하는 정보의 중요도에 따른 제공의도를 비교해보았다. 연구방법은 정보보호 관련 실무자들을 대상으로 정보공유시스템의 이용자 측면에서 온라인 설문 및 실증분석을 실행하였다. 연구 결과, 간단한정보에 대해서는 오로지 최고경영자의 태도만이 정보 제공의도에 영향을 미쳤다. 반면 중요한 정보에 대해서는 최고경영자의 태도뿐만 아니라 정보평가체계, 민간화, 법적처벌 완화의 순으로 유의미한 영향을 미쳤다. 본 연구의 결과를 통해 국내 사이버위협 정보공유시스템의 문제점을 파악할 수 있으며, 개선사항의 우선순위와 정보 공유 시스템의 개선 전후 정보 제공의도의 변화를 확인할 수 있다.

Abstract

The purpose of this study is to investigate the factors affecting cyber threat information provision in order to activate cyber threat information sharing in Korea. In particular, we looked at the intention to provide simple information and important information according to the importance of information. The research method was conducted on the information security practitioners' online survey in terms of users of information sharing system. And empirical analysis was conducted. As a result of the study, only the CEO's attitude influenced the intention to provide simple information. On the other hand, important information was influenced not only by the CEO's attitude but also by the information evaluation system, privatization, and mitigating legal penalties. The results of this study can identify the problems of the cyber threat information sharing system in Korea. And we can confirm the priority of improvement and the change of information providing intention before and after improvement of information sharing system.

참고문헌 (83)

  1. G.B. White, "Information sharing needs for national security", Proceedings of Hawaii International Conference on System Sciences (2005), IEEE
  2. L. A. Gordon, "Sharing information on computer systems security : An economic analysis", Journal of Accounting and Public Policy, 22(6), pp.461~485 (2003)
  3. E. Gal-Or, "Economics of Information Security", pp.95~104 (2004), Springer US
  4. E. Gal-Or, "The economic incentives for sharing security information", Information Systems Research, 16(2), pp.186~208 (2005)
  5. Chul-soo Lee, "National security system for countering information incidents", Review of Korea Institute of Information Security and Cryptology, 15(1), pp.33~40 (2005)
  6. Dong-jin Kim, "An analysis of domestic and foreign security vulnerability management systems based on a national vulnerability databases", Internet and Information Security, 1(2), pp.130~147 (2010)
  7. 윤오준, "사이버공격 대응 분석을 통한 사이버안보 강화 방안 연구", 융합보안 논문지, 15(4), pp.65~72 (2015), 한국융합보안학회
  8. D. F. Vázquez, "Conceptual framework for cyber defense information sharing within trust relationships", Proceedings of International Conference on Cyber Conflict (2012), IEEE
  9. Boannews, "Just talk about a lot of information, why it is not working properly", ~ (2016)
  10. Duke-hoon Jeong, "A study on information sharing system for information application on the public institutions", Journal of Finance & Knowledge Studies, 3(1), pp.223~235 (2005)
  11. 김구, "계층적 분석과정을 통한 정보공유 의도의 중요도 산정에 관한 연구―광주광역시청 공무원을 중심으로―", 한국사회와 행정연구, 15(3) (2004), 서울행정학회
  12. 한상연, "지방정부 부서간 정보공유 활성화 방안에 관한 연구", 지방행정연구, 21(1), pp.97~122 (2007), 한국지방행정연구원
  13. 김동욱, "정보공유에 관한 연구: CCL(Creative Commons License) 논의를 중심으로", 한국지역정보화학회지, 13(4), pp.53~74 (2010), 한국지역정보화학회
  14. Information Sharing between & within Governments, "L. Caffrey", The International Council for Technology in Government Administration, ~ (1998)
  15. S. S. Dawes, "Understanding new models of collaboration for delivering government services", Communications of the ACM, 46(1), pp.40~42 (2003)
  16. J. R. Gil-Garcia, "Interorganizational information integration in the criminal justice enterprise: preliminary lessons from state and county initiatives", Proceedings of Hawaii International Conference on System Sciences (2005), IEEE
  17. R. M. Grant, "Toward a knowledge-based theory of the firm", Strategic Management Review, 17(52), pp.109~122 (1996)
  18. Proposal for Cyber Threat Information Sharing Act, "Cheol-u Lee", ~ (2015)
  19. 이재은, "국가안전관리 정보시스템의 정보공유 영향요인 분석", 현대사회와 행정, 17(1), pp.155~185 (2007), 한국국정관리학회
  20. Tong-hee Park, "Sharing and utilization of knowledge and information among nonprofit organizations through public web portal : case study of culture portal of national knowledge information system", Modern Society and Administration, 21(3), pp.1~33 (2011)
  21. D. Liu, "Knowledge sharing and investment decisions in information security", Decision Support Systems, 52(1), pp.95~107 (2011)
  22. G. W. Bock, "Breaking the myths of rewards: An exploratory study of attitudes about knowledge sharing", Proceedings of Pacific Asia Conference on Information Systems (2001)
  23. G. W. Bock, "Behavioral intention formation in knowledge sharing : examining the roles of extrinsic motivators, social-psychological forces, and organizational climate", MIS Quarterly, 29(1), pp.87~111 (2005)
  24. H. F. Lin, "Effects of extrinsic and intrinsic motivation on employee knowledge sharing intentions", Journal of Information Science, 33(2), pp.135~149 (2007)
  25. S. S. Chen, "Behavioral intention formation in knowledge sharing : examining the roles of KMS quality, KMS self-efficacy, and organizational climate", Knowledge-Based Systems, 31(1), pp.106~118 (2012)
  26. H. F. Lin, "Knowledge sharing and firm innovation capability : an empirical study", International Journal of Manpower, 28(3, pp.4) (2007), 315~332
  27. K. M. Bartol, "Encouraging knowledge sharing : The role of organizational reward systems", Journal of Leadership & Organizational Studies, 9(1), pp.64~76 (2002)
  28. 왕재선, "공공기관 간 정보공유에 대한 태도: 중앙부처 공무원의 인식을 중심으로", 한국지역정보화학회지, 16(1), pp.1~34 (2013), 한국지역정보화학회
  29. A. Aviram, "Overcoming impediments to information sharing", Alabama Law Review, 55, pp.231~ (2004)
  30. Boannews, "Truth and falsity of information sharing for malicious code and security vulnerability", ~ (2015)
  31. 서형준, "사이버위협정보 공유 활성화를 위한 관리적·기술적 개선모델 연구", 융합보안 논문지, 16(4), pp.25~34 (2016), 한국융합보안학회
  32. Ae-chan Kim, "A study on the priority of requirements for establishing effective cyber-threat information sharing system", Review of Korea Institute of Information Security and Cryptology, 26(1), pp.61~67 (2016)
  33. Hong-jong Jang, "A study on implementation of information sharing and analysis center for e-government", Proceeding of The 2001 Fall Conference of the Korea Information Processing Society (2001)
  34. Seong-hun Go, "A study on factors motivating cyber security information sharing for responding preemptively to cyber terror threat of national organizations", Doctor, pp.2015
  35. 권유중, "북한의 사이버전력 평가와 대북 사이버대응체제 연구", 석사, 정보보호학과, pp.2014
  36. L. Dandurand, "Towards improved cyber security information sharing", Proceedings of International Conference on Cyber Conflict, IEEE (2013)
  37. D. Tosh, "An evolutionary game-theoretic framework for cyber-threat information sharing", Proceedings of IEEE International Conference on Communications (2015)
  38. Boannews, "Sharing Security Threat Information ISAC, What is the most urgent reason for the medical field?", ~ (2016)
  39. "Information Sharing Analysis Center"[URL]
  40. KISA(Korea Internet & Security Agency), "Conference on information sharing of cyber incidents", ~ (2014)
  41. KISA(Korea Internet & Security Agency), "Conference on information sharing of cyber incidents", ~ (2015)
  42. HelloT Advanced News, "Pay attention to the fourth industrial revolution platform, 'security'", ~ (2016)
  43. "ISMS / PIMS / G-ISMS certification"[URL]
  44. Ministry of Science, ICT and Future Planning, "Key Policies for Information Protection", ~ (2016)
  45. Ministry of Government Administration and Home Affairs, "Understanding the Personal Information Protection Act:Focusing on What is Different from the Present", ~ (2011)
  46. "National Council of ISACs"[URL]
  47. "US-CERT(AIS)"[URL]
  48. "R-CISC"[URL]
  49. "Telecom-ISAC Japan"[URL]
  50. Cyber Information Sharing Initiative (J-CSIP) FY 2012 Activity Report, "IPA", IPA, ~ (2013)
  51. Cyber Information Sharing Initiative (J-CSIP) Operational Status, "IPA", IPA, ~ (2016)
  52. Jung-wook Moon, "Factors of success and failure of information sharing in the public sector : Focused on cognition survey of public officials", Korea Information Society Development Institute, 19(6), pp.1~17 (2007)
  53. 김은정, "구조방정식모형을 이용한 정보공동이용의 결정요인 연구", 한국행정학보, 38(4), pp.125~145 (2004), 한국행정학회
  54. R.E. Walton, "Up and Running:Integrating Information Technology and the Organization" (1989), Harvard Business School Press
  55. NIST, "Guide to Cyber Threat Information Sharing", ~ (2014)
  56. Info-sharing Final Report, "HSAC", HSAC, ~ (2005)
  57. 김민호, "공공서비스의 민간위탁과 공기업의 민영화", 토지공법연구, 25, pp.267~285 (2005), 한국토지공법학회
  58. S. Ransbotham, "Are markets for vulnerabilities effective?", MIS Quarterly, 36(1), pp.43~64 (2012)
  59. W. Zhao, "Designing a formal model facilitating collaborative information sharing for community cyber security", Proceedings of Hawaii International Conference on System Sciences. IEEE (2014)
  60. Cyber Security Information Sharing: An Overview of Regulatory and Non-regulatory Approaches, "ENISA(European Network and Information Security Agency)", ENISA(European Network and Information Security Agency), ~ (2015)
  61. MNE7(Multi-national Experiment 7), "Information sharing framework outcome 3", Cyber Domain Objective, ~ (2013)
  62. S. Li, "Accessing information sharing and information quality in supply chain management", Decision Support Systems, 42(3), pp.1641~1656 (2006)
  63. I. Ajzen, "The theory of planned behavior", Organizational Behavior and Human Decision Processes, 50(2), pp.179~211 (1991)
  64. I. Ajzen, "From Intentions to Actions: A theory of Planned Behavior" (1985), Springer
  65. Byeong-seon Choi, "Government-led economic and social administration and administrative ethics", Korean Journal of Public Administration, 39(4), pp.81~111 (2001)
  66. Etnews, "Cyber threat information 'Need to secure reliability'", ~ (2015)
  67. ITWorld Korea, "CSO wants to share cyber threat information, but does not want law", ~ (2015)
  68. 김팔술, "공급사슬관리를 위한 기업간 정보공유의 선행요인과 관계효과성에 관한 연구", 경영연구, 19(4), pp.273~307 (2004), 한국산업경영학회
  69. W. W. Chin, "The partial least squares approach to structural equation modeling", Modern Methods for Business Research, 295(2), pp.295~336 (1998)
  70. Jin-chun Lee, "Structural equation modelling for small samples : component-based SEM vs. covariance-based SEM", Journal of Decision Science, 16(1), pp.77~95 (2008)
  71. D. Gefen, "Structural equation modeling and regression : Guidelines for research practice", Communications of the AIS, 4(7), pp.1~79 (2000)
  72. C. Fornell, "Two structural equation models : LISREL and PLS applied to consumer exit-voice theory", Journal of Marketing Research, 19(4), pp.440~452 (1982)
  73. C. Fornell, "Evaluating structural equation models with unobservable variables and measurement error", Journal of Marketing Research, 18(1), pp.39~50 (1981)
  74. D. Barclay, "The Partial Least Squares(PLS)approach to causal modeling : Personal computer adoption and use as an illustration", Technology Studies, 2(2), pp.285~309 (1995)
  75. I. H. Bernstein, "Psychometric Theory" (1994), McGraw-Hill
  76. Seo-il Chae, "Social Science Research Methodology" (2005), B&M Books
  77. W. W. Chin, "Adoption intention in GSS : Relative importance of beliefs", ACM SigMIS Database, 26(2-3), pp.42~64 (1995)
  78. R. F. Falk, "A Primer for Soft Modeling" (1992), University of Akron Press
  79. 이동만, "소셜 미디어에서 개인의 심리 및 사회적 동기요인이 정보공유의도에 미치는 영향", 인터넷전자상거래연구, 11(2), pp.1~21 (2011), 한국인터넷전자상거래학회
  80. 김상오, "정보공유 선행요인, 정보공유, 리스크 정보공유가 공급사슬성과에 미치는 영향에 관한 연구", 한국생산관리학회지, 18(4), pp.117~146 (2007), 한국생산관리학회
  81. 송장근, "정보공유를 통한 성과형성모델: 자산전용성과 정보공유가 공급사슬 내 성과에 미치는 영향", 한국생산관리학회지, 21(1), pp.101~121 (2010), 한국생산관리학회
  82. 김문중, "정보교류체제, 지식공유와 지식활용이 성과에 미치는 영향", 기업경영연구, 22(5), pp.249~267 (2015), 한국기업경영학회
  83. M. H. M. Javadi, "Effect of motivation and trust on knowledge sharing and effect of knowledge sharing on employee's performance", International Journal of Human Resource Studies, 2(1), pp.210~221 (2012)

관련 논문AI추천

이 간행물의 다른 논문 (21건)