보안 인지 및 실천 현황 분석을 통한 대학 연구정보보안 수준 제고 방안
Improving Research Information Security in Academic Institutes through the Analysis of Security Awareness and Activities
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
Universities are one of leading R&D institutes, however, their scarce security investment allows research information to leak outside. This paper proposes methods for improving security level of academic institutes to protect research information by analyzing security awareness and activities. To do that, we verified the current status of information security and awareness level by analyzing the survey which was conducted for a member of Seoul National University. As a result of statistical analysis using correlation, analysis of variance, multi regression and so on, we concluded that it is essential to improve security awareness, activities, professor's security level and management process for research labs. Thus, we suggest the following methods, security awareness and knowledge development through education, security management for research labs through provision, introduction of data protection softwares and physical control of visitors which are to be adopted to improve security level.
Abstract
Universities are one of leading R&D institutes, however, their scarce security investment allows research information to leak outside. This paper proposes methods for improving security level of academic institutes to protect research information by analyzing security awareness and activities. To do that, we verified the current status of information security and awareness level by analyzing the survey which was conducted for a member of Seoul National University. As a result of statistical analysis using correlation, analysis of variance, multi regression and so on, we concluded that it is essential to improve security awareness, activities, professor's security level and management process for research labs. Thus, we suggest the following methods, security awareness and knowledge development through education, security management for research labs through provision, introduction of data protection softwares and physical control of visitors which are to be adopted to improve security level.
참고문헌 (21)
- 연합뉴스, "1천만명 정보유출 돈노린 내부자 소행", 2008년 9월, ~ (2008)
- 연합뉴스, "<연합시론> 기술유출 범국가적 대응 필요하다", 2008년 8월, ~ (2008)
- 국가정보원, "대학산업기술보호 매뉴얼", 2007년 8월, ~ (2007)
- G.V. Post, "Evaluating information security tradeoff: restricting access can interfere with user tasks", Computers & Security, 26(3), pp.229~237 (2007)
- ISACA, "CISA review manual", ~ (2008)
- S.M.Lee, "An empirical study of the relationships among end-user information systems acceptance,training,and effectiveness", Journal of Management Information Systems, 12(2), pp.189~202 (1995)
- D.L.Goodhue, "Security concerns of system users:a study of perception of the adequacy of security", Information & Management, 20(1), pp.13~27 (1991)
- 임채호, "효과적인 정보보호인식제고 방안", 정보보호학회지, 16(2), pp.30~36 (2006)
- 방송통신위원회, "2008년 정보보호 실태조사 결과", 2009년 2월, ~ (2009)
- 국가정보원, "2009 국가정보보호 백서", 2009년 4월, ~ (2009)
- 방송통신위원회, "방송통신위원회고시 제2008- 11호 정보보호관리체계 인증 등에 관한 고시", 2008년 5월, ~ (2008)
- ISO, "ISO", IEC 13335-1:2004, 2004
- 한국정보화진흥원, "정보보호 가이드북", 2003년 4월, ~ (2003)
- 국가사이버안전센터, "정보보호생활수칙", ~ (2008)
- S. Harris, "CISSP certification all-in-one exam guide" (2007), McGraw-Hill Osborne Media
- 김종기, "패스워드의 정보시스템 보안효과에 영향을 미치는 요인에 관한 연구", Asia Pacific Journal of Information Systems, 18(4), pp.1~26 (2008), 한국경영정보학회
- 서울대학교 중앙전산원, "서울대학교 정보보안 현황 및 대책에 관한 연구", 102~139 (2009)
- P. Gutmann, "Secure deletion of data from magnetic and solid-state memory", 6th USENIX Security Symposium, pp.77~90 (1996)
- S.Garfinkel, "Remembrance of data passed:a study of disk sanitization practices", IEEE Security & Privacy, pp.17~27 (2003)
- 서의훈, "SPSS 12.0 한글판을 이용한 SPSS 통계분석" (2005), 자유아카데미
- PC WINDOWS 12.0), "사회통계방법론(SPSS", pp.2007, 최현철