정보보호 사전진단제도의 경제적 효과에 대한 사례 분석
Economic Effects of Advance Diagnosis forInformation Security: A Case Study
0
조회
0
다운로드
3
인용
0
참고문헌
키워드
초록
As the information society changes into the ubiquitous computing society, the importance of information security has increased. Governments and enterprises are carrying out various information security activities to operate their information asset effectively. Since 2006, the Korean government has implemented ‘Advance Diagnosis' policy to analyze the vulnerability of the information security from the early stage of the information system development to secure the information stability. This study proposes an analyzing framework for the economic effects of Advance Diagnosis for Information Security and presents an illustrative application on a real Advance Diagnosis case. The results of this study can be applied to secure the economic justification of government policies for the security of information systems.
Abstract
As the information society changes into the ubiquitous computing society, the importance of information security has increased. Governments and enterprises are carrying out various information security activities to operate their information asset effectively. Since 2006, the Korean government has implemented ‘Advance Diagnosis' policy to analyze the vulnerability of the information security from the early stage of the information system development to secure the information stability. This study proposes an analyzing framework for the economic effects of Advance Diagnosis for Information Security and presents an illustrative application on a real Advance Diagnosis case. The results of this study can be applied to secure the economic justification of government policies for the security of information systems.
참고문헌 (14)
- 김준섭, "캐나다 정보기술보안 제품 사전 검증 제도에 관한 분석", 한국정보보호학회지, 19(2), pp.87~98 (2009)
- Security Considerations in the Information System Development Life Cycle, "NIST", ~, pp.SP 800-64 Revision 2 (2008)
- K.J.Soo Hoo, "Tangible ROI through secure software engineering", Secure Business Quarterly, 1(2), pp.1~3 (2001)
- 이은동, "사전 예방적 보안과 사후 대응적 보안의 상관관계를 이용한 보안투자 최적화 방안", 한국경영정보학회 춘계학술대회, pp.588~593 (2009)
- 연구보고서, "KISA,정보보호 사전진단 효과분석 및 활성화 방안 연구", 3~, pp.연구보고서 (2008)
- 공희경, "정보보호 투자효과에 대한 연구 동향", 정보보호학회지, 17(4), pp.12~19 (2007)
- R.Anderson, "Why information security is hard-An economic perspective", Computer Security Application Conference, pp.358~365 (2001)
- K.J.Soo Hoo, "How much is enough? A Risk-Management Approach to Computer Security", Stanford University, ~ (2000)
- L.A.Gordon, "The economics of information security investment", ACM Transactions on Information and System Security, 5(4), pp.438~457 (2002)
- R.S.Kaplan, "The balanced scorecard-Measures that drive", Harvard Business Review, pp.71~79 (1992)
- R.S.Kaplan, "Having trouble with your strategy? Then map it", Harvard Business Review, pp.167~176 (2000)
- "An analysis on effects of information security investments: A BSC perspective, Journal of Intelligent Manufacturing"[URL]
- 한국정보보호진흥원, "오픈소스 보안성 관련 이슈 및 대응방안", CSO Briefing, ~ (2008)
- 정보보호 투자 추이분석 및 성과연구, "한국정보사회진흥원", ~, pp.연구보고서 (2007)