전자상거래환경에서 위험분석방법론의 타당성에 대한 연구
A Empirical Validation of Risk Analysis Model in Electronic Commerce
0
조회
0
다운로드
1
인용
0
참고문헌
초록
위험분석모델은 정보시스템 보안과 관련된 위험을 자산, 위협, 취약성, 보안통제의 관계를 통해서 설명하는 체계화된 방법이다. 그러나 위험분석모델의 실증적인 연구가 이루어진 경우는 상당히 드물며, 특히 위험분석모델의 타당성 논의는 거의 없는 실정이다. 구조방정식모델을 적용하여 전자상거래 환경에서 위험분석모델의 타당성에 대한 실증적 분석을 한 결과, 위험의 수준에 영향을 미치는 요인으로 언급되는 위협과 보안통제는 통계적으로 유의한 것으로 나타났다. 본 연구는 전자상거래 이용자의 위험인지에 영향을 미치는 요인을 위험분석 접근법을 이용하여 모델화하여 검증함으로써 전자상거래 위험에 영향을 미치는 선행요인을 규명할 뿐만 아니라 위험분석접근법을 통한 전자상거래에 대한 새로운 관점에서의 접근을 가능하게 한다.
Abstract
Risk analysis model is systematic and structural process that considers internal security problems and threat factors of the information systems to find optimal level of security control. But, the risk analysis model is just only defined conceptually and there are not so many empirical studies. This research used structural equation modeling(SEM) research methodology with rigorously validated research instrument. Based on results of this study, risk analysis methodology was proved to be practically useful in e-commerce environment. Factors like threat and control were significantly related to risk. In conclusion, the results of this study can be applied to general situation or environment of information security for analyzing and managing the risk and providing new approach to comprehend concept of risk in e-commerce environment.
참고문헌 (32)
- "Guidelines for the management of IT security-Part 1", pp.~1 (2000)
- "Information technology-Code of practice for information security management" (2000)
- "정보시스템의 위험도 분석에 대한 연구 통합적 분석 틀을 중심으로 경영정보학연구", 8(2), pp.37~53 (1998)
- "An Integrative Model of Organizational Trust", 20(3), pp.709~734 (1995)
- "An Investigation of Consumer-perceived Risk on Electronic Commerce Transactions", pp.335~337 (1998)
- "Consumer trust in an Internet store", 1(1), pp.45~71 (2000)
- "Initial Trust, Perceived Risk, and the Adoption of Internet Banking", pp.537~543 (2000)
- "Institution-based trust in interorganizational exchange relationships", 11(3), pp.215~243 (2002)
- "해외의 보안위험분석 방법론 현황 및 분석", 4(1), pp.316~323 (1994)
- "BS7799" (1999)
- "United Kingdom Government CRAMM User Guide" (2001)
- "Vulnerability Assessment Framework 1.1" (1998)
- "Guide to Security Risk Management for IT Systems Government of Canada" (1996), Communications Security Establishment
- "Information Security Risk Assessment-Practices of Leading Organizations"
- "Information Security Risk Analysis"
- "Threats to Information Systems", 16(2), pp.173~186 (1992)
- "The Role of Vulnerability in Risk Management", pp.32~38 (1989)
- "Measuring Factors the Influence the Sucess of Internet Commerce", 13(2), pp.187~204 (2002)
- "A B-To-C Trust Model for On-Line Exchange", pp.784~787 (2001)
- "Risk Management Guide for Information Technology Systems- Recommendations of the National Institute of Standards and Technology" (1998)
- "Operationally Critical Threat, Asset, Vulnerability Evaluation Framework, Version 1.0"
- "Employing Structural Equation Modeling to Test for Construct Validity Journal of Business Logistics", 20(1), pp.33~57 (1999)
- "Interpretational Confounding of Unobserved Variables in Structural Equation Models", 5, pp.3~52 (1976)
- "An Updated Paradigm for Scale Development Incorporating Unidimensionality and Its Assessment", 25, pp.186~192 (1988)
- "E-Commerce", 28(6), pp.725~737 (2000)
- "Trust and TAM in Online Shopping", 27(1), pp.51~90 (2003)
- "On the use of construct reliability in MIS research", 35(4), pp.217~228 (1999)
- "A Review of Psychometric Basics and Recent Marketing Practices Journal of Marketing Research", pp.6~17 (1979)
- "Evaluating Structural Equation Models with Unobservable Variables and Measurement Error", 18, pp.39~50 (1981)
- "사회과학 조사방법론 2판" (1995), 학현사
- "Assessing Unidimensionality through LISREL", 12, pp.23~47 (2003)
- "An Approach for Confirmatory Measurement and Structural Equation Modeling of Organizational Properties", 33, pp.525~541 (1987)