침입차단서비스 보안기능 분석을 통한 보안SLA 등급화 지표 개발
Development of S-SLA's Grading Indicator based on the Analyses of IPS's Security Functions
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
Internet service providers provide various security services, such as firewall, intrusion detection, intrusion prevention, anti-virus, along with their main Internet services. Those security service users have no idea what kind of quality services they are guaranteed. And therefore, Internet users interest in Security Service Level Agreement(SLA) increases as their interest in secure Internet service increases. However, there wasn't any researches in the S-SLA area domestically and there are only limited SLA indexes related to system or service maintenances at the moment. Therefore, this paper analyses security functions in IPS services and categorize them into common and independent security functions. Finally to improve quality of security services, this paper proposes S-SLA indexes depending on the different security levels. This will be subdivide into agreement on security service.
Abstract
Internet service providers provide various security services, such as firewall, intrusion detection, intrusion prevention, anti-virus, along with their main Internet services. Those security service users have no idea what kind of quality services they are guaranteed. And therefore, Internet users interest in Security Service Level Agreement(SLA) increases as their interest in secure Internet service increases. However, there wasn't any researches in the S-SLA area domestically and there are only limited SLA indexes related to system or service maintenances at the moment. Therefore, this paper analyses security functions in IPS services and categorize them into common and independent security functions. Finally to improve quality of security services, this paper proposes S-SLA indexes depending on the different security levels. This will be subdivide into agreement on security service.
참고문헌 (18)
- 김대웅, "서비스수준협약(SLA) 기술동향", 전자통신동향분석, 19(6), pp.55~65 (2004)
- 한국정보화진흥원, "SLA를 강화한 정보시스템 운영계약 참조모델", ~ (2005)
- 조현정, "차세대 네트워크 보안기술 기반의 침입방지시스템(IPS)", 정보과학회지, 23(1), pp.21~26 (2005)
- LG CNS, "SafezoneIPS V4.0 보안목표명세서 V4.00.01", IT보안인증사무국, ~ (2010)
- 모보, "SecureGate-Ⅱ V1.0 보안목표명세서", IT보안인증사무국, ~ (2009)
- 나우콤, "SNIPER IPS V7.0e 보안목표명세서 v1.02", IT보안인증사무국, ~ (2009)
- 시큐아이닷컴, "SECUI NXG V2.2.0 보안목표명세서 v1.2", IT보안인증사무국, ~ (2008)
- 안철수연구소, "TrusGuard SCM 1.0 and TrusGuard SCM Manager 1.5 보안목표명세서", IT보안인증사무국, ~ (2008)
- 삼성네트웍스, "eXshield V1.0.1.R 보안목표명세서 V1.10", IT보안인증사무국, ~ (2008)
- 어울림정보기술, "SECUREWORKS SEPION V4.0 보안목표명세서 Version 1.3", IT보안인증사무국, ~ (2008)
- 퓨처시스템, "FutureUTM 6000 V1.0 보안목표명세서", IT보안인증사무국, ~ (2009)
- 정보보호기술, "TESS TMS V4.5 보안목표명세서 V19", IT보안인증사무국, ~ (2006)
- 어울림정보기술, "SECURE WORKS IPSWall 1000 V4.0 보안목표명세서 Version 1.23", IT보안인증사무국, ~ (2006)
- 안철수연구소, "Absolute IPS-NP v1.0 보안목표명세서", IT보안인증사무국, ~ (2010)
- "Common Criteria for Information Technology Security Evaluation version 3.1 Parts 1: Introduction and general model", ISO, 2007
- "Common Criteria for Information Technology Security Evaluation version 3.1 Parts 2: Security functional components", ISO, 2007
- "Common Criteria for Information Technology Security Evaluation version 3.1 Parts 3: Security assurance components", ISO, 2007
- Ganna Frankova, "Service Level Agreements:Web Services and Security", Lecture Notes in Computer Science, 4607, pp.556~562 (2007)