개인정보보호 관련 법령의 내용과 보안제품 분포간의 연관성 분석
Study on the Association between Personal Information Protection Legislation and Information Security Product
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 몇 년간 크고 작은 개인정보 유출 사고가 끊이지 않고 있다. 그에 따라 개인정보보호 관련 법령이 지속적으로제·개정 되고 있으며, 정보보호 제품도 발전하고 있다. 또한 보안 적합성 검증인 CC인증, 국정원 검증 암호모듈(KCMVP) 등 정보보호 제품에 대한 인증체계도 엄격히 이뤄지고 있다. 본 논문에서는 개인정보보호 관련 법령인 개인정보보호법, 정보통신망 이용촉진 및 정보보호 등에 관한 법률, 위치정보의 보호 및 이용 등에 관한 법률과 신용정보의 이용 및 보호에관한 법률, 전자금융거래법의 5개 법령의 물리적, 기술적, 관리적 보호조치 중 기술적 보호조치의 키워드를 분석 및 분류하였다. 그리고 법령상 기술적 보호조치와 CC인증 및 KCMVP 제품군과 지식정보보안산업협회(KISIA) 회원사의 정보보호 제품 분포와의 연관성을 분석하였다.
Abstract
For the past few years, personal information breach incidents, great and small, occurred constantly. Accordingly, the Personal Information Protection related Ordinances are enacted and amended persistently, and the information security products also keep advancing and developing in the same way. There are the certification systems such as Common Criteria Evaluation and Validation(CC) and Korea Cryptographic Module Validation Program(KCMVP) for the information security products. These are also strictly carried out. This paper analyzes and categorizes the 5 Personal Information Protection related Ordinances in the aspects of technical protection measures by using key words. Here are the 5 related ordinances; ‘the Personal Information Protection Act’, ‘the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc’, ‘the Act on the Protection, Use, Etc, of Location Information’, ‘the Use and Protection of Credit Information Act’, and ‘the Electronic Financial Transactions Act.’ Moreover, this study analyzes the association between the technical protection measures in the 5 relevant laws and the information security products that are obtaining the CC Evaluation & Validation(CC) and the products that are now produced at KISIA’s member companies.
참고문헌 (23)
- "Actual condition of cyber warfare and latest hacking trend" (2013)[URL]
- Shin Young Jin, "A study on the improvement of technological protection measures for responding to privacy breaches", Proceeding of Autumn Annual Conference of The Korean Association for Policy Studies, pp.465~488 (2013)
- 김영희, "개인정보의 관리적․기술적 보호조치 기준의 상대적 중요도에 관한 연구", 한국전자거래학회지, 19(4), pp.135~150 (2014), 한국전자거래학회[DOI]
- 홍영란, "CC인증이 정보보호 솔루션의 보안성에 미치는 영향 분석", 한국전자거래학회지, 17(4), pp.57~68 (2012), 한국전자거래학회[DOI]
- "Personal Information Protection Act", ~
- "Standards on Measures for Securing the Safety of Personal Information", ~
- "Standard Personal Information Guide", ~
- "Act on Promotion of Information and Communications Network Utilization and Information Protection, etc", ~
- "Enforcement Decree of the Act on Promotion of Information and Communications Network Utilization and Information Protection, etc", ~
- "Guidelines for Information Security Measures", ~
- "Standards on Technical and Administrative Protection Measures for Personal Information", ~
- Enforcement Decree of the Act on Protection & Utilization of Location Information, etc,
- "Manual on Administrative and Technical Protection Measures Recommendation of Location Information", ~
- "Use and Protection of Credit Information Act", ~
- "Enforcement Decree of Use and Protection of Credit Information Act", ~
- "Regulation of Credit Information Business Supervision", ~
- "Electronic Financial Transactions Act", ~
- "Regulation of Electronic Financial Supervision", ~
- "Rules for Regulation of Electronic Financial Supervision", ~
- "National Cyber Security Center"[URL]
- Ji Sun Kim, "A Study of CC for Privacy Management System", 석사, pp.2011
- "IT Security Certification Center"[URL]
- "KISIA"[URL]