전자금융기반시설 정보보호 수준강화 방안 (정보보호 관리수준 분석을 통한)
Improvements of Information Security Level in Electronic Financial Infrastructure(By Analyzing Information Security Management Level)
1
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
최근 몇 년 동안 금융회사(은행, 증권사, 신용카드사, 보험사 등)를 대상으로 한 개인정보 유출, 홈페이지 해킹, 분산서비스거부공격(DDoS) 등 보안사고가 꾸준히 증가하고 있다. 본 논문에서는 현행 전자금융기반시설의 정보보호 관리수준의 문제점을 법적 준거성과 정보보호 인증제도 관점에서 분석하고 금융 분야 특성에 적합한 종합적인 관리체계 하에서 높은 수준의 정보보호 활동이 지속 가능하도록 정보보호관리체계, 정보보호 준비도 평가 및 주요정보통신기반시설취약점 분석·평가 제도를 활용한 개선방안을 제시하고자 한다.
Abstract
In recent years, security incidents - such as personal information leakage, homepage hacking, DDoS and etc. – targeting finance companies(banks, securities companies, credit card companies, insurance companies and etc.) have increased steadily. In this paper, we analyze problems of information security management level in the existing electronic financial infrastructure from perspective of compliance and information security certification system and propose improvements to enable sustainable high level of information security activities under a comprehensive management system for the financial sector characteristics using ISMS, SECU-STAR and CNIVAM system.
참고문헌 (23)
- Financial Services Commission, "ELECTRONIC FINANCIAL TRANSACTIONS ACT", ~ (2016)
- Financial Services Commission, "ELECTRONIC FINANCIAL TRANSACTIONS ACT DECREE", ~ (2015)
- Financial Services Commission, "ELECTRONIC FINANCIAL SUPERVISORY REGULATIONS", Financial Services Commission Notice No. 2015-18, ~ (2015)
- Financial Supervisory Service, "ELECTRONIC FINANCIAL SUPERVISORY REGULATIONS DETAILED ENFORCEMENT REGULATIONS", ~ (2016)
- Korea Communications Commission, "ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC", ~ (2015)
- Korea Communications Commission, "ENFORCEMENT DECREE OF THE ACT ON PROMOTION OF INFORMATION AND COMMUNICATIONS NETWORK UTILIZATION AND INFORMATION PROTECTION, ETC", ~ (2016)
- Ministry of Science, ICT and Future Planning, "Notice Concerning Information Security Management System Certification, Etc", Ministry of Science, ICT and Future Planning Notice No. 2016-59, ~ (2016)
- Ministry of Science, ICT and Future Planning, "ACT ON THE PROTECTION OF INFORMATION AND COMMUNICATIONS INFRASTRUCTURE", ~ (2015)
- Ministry of Science, ICT and Future Planning, "ENFORCEMENT DECREE OF THE ACT ON THE PROTECTION OF INFORMATION AND COMMUNICATIONS INFRASTRUCTURE", ~ (2015)
- Ministry of Science, ICT and Future Planning, "Critical Network Infrastructure Vulnerability Analysis and Measurement Criteria", Ministry of Science, ICT and Future Planning Notice No. 2013-37, ~ (2013)
- Ministry of Science, ICT and Future Planning, "ACT ON PROMOTION OF INFORMATION SECURITY INDUSTRY", ~ (2015)
- Korea Internet & Security Agency, "ISMS Certification System Guide", 5~9 (2016)
- IBK Capital, "Request for Proposal of Electronic Financial Infrastructure Vulnerability Inspection", 11~23 (2014)
- "Korea Security Evaluation Laboratory Co., Ltd" (2016)[URL]
- "Korea Internet & Security Agency" (2016)[URL]
- Ministry of the Interior, "Ensure Safety Criteria of Personal Information", Ministry of the Interior Notice No. 2014-7, ~ (2014)
- "Qualys Inc" (2016)[URL]
- Keun-Dug Park, "Improved measurements of information security management based on compliance in financial companies", pp.2015
- "Korea Federation of Banks" (2016)[URL]
- "Korea Financial Investment Association" (2016)[URL]
- "Korea Life Insurance Association" (2016)[URL]
- "General Insurance Association of Korea" (2016)[URL]
- "The Credit Finance Association Of Korea" (2016)[URL]