무기체계 개발을 위한 RMF A&A의 실증에 관한 연구

키워드

참고문헌 (79)

1. DoD, "Risk Management Framework(RMF)for DoD Information Technology(IT)", DoDI 8510.01, ~ (2014)
2. 조현석, "국내 무기체계에 대한 RMF 적용 실 사례 연구", 정보보호학회논문지, 29(6), pp.1463~1475 (2019), 한국정보보호학회[DOI]
3. 이지섭, "무기체계의 사이버보안 시험평가체계 구축방안 연구", 정보보호학회논문지, 28(3), pp.765~774 (2018), 한국정보보호학회[DOI]
4. M. Bendel, "An Introduction to Department of Defense IA Certification and Accreditation Process(DIACAP)", ~ (2006)
5. NIST, "Standards for Security Categorization of Federal Information and Information Systems", FIPS 199, ~ (2004)
6. NIST, "Guide for Conducting Risk Assessments", NIST SP 800-30, ~ (2012)
7. M. A. Amutio, "MAGERIT-version 3.0Methodology for Information Systems Risk Analysis and Management" (2014), Ministry of Finance and Public Administration
8. J. Wynn, "Threat Assessment &Remediation Analysis (TARA)" (2011), MITRE
9. B. Naqvi, "A methodology for aligning usability and security in systems and services", 2018 3rd International Conference on Information Systems Engineering (ICISE), pp.61~66 (2018)
10. A. Sanchez-Gomez, "Combining usability and privacy protection in free-access public cloud storage servers : review of the main threats and challenges", arXiv preprint arXiv:1610.08727, ~ (2016)
11. V. K. Mishra, "Blockchain for Cybersecurity-Standards &Implications", Cybernomics, 1(5), pp.11~15 (2019)
12. E. Venson, "Costing secure software development : A systematic mapping study", Proceedings of the 14th International Conference on Availability, Reliability and Security, pp.1~11 (2019)
13. J. Jaskolka, "Recommendations for Effective Security Assurance of Software-Dependent Systems", Science and Information Conference, pp.511~531 (2020)
14. J. Nguyen, "Closing the Feedback Loop Between UX Design, Software Development, Security Engineering, and Operations", Proceedings of the 20th Annual SIG Conference on Information Technology Education, pp.93~98 (2019)
15. E. Venson, "The Impact of Software Security Practices on Development Effort: An Initial Survey", 2019 ACM, 2019, 1~12
16. E. Venson, "The effects of required security on software development effort", Proceedings of the ACM, 2020, 166~169
17. S. Harrison, "A security evaluation framework for UK e-goverment services agile software development", arXiv preprint arXiv:1604.02368, ~ (2016)
18. R. Kumar, "Assurance of data security and privacy in the cloud: A three-dimensional perspective", Software Quality Professional, 21(2), pp.7~26 (2019)
19. A. Jurcut, "Security Considerations for Internet of Things:A Survey", SN Computer Science, 1(193), pp.1~19 (2020)
20. M. Zarour, "Software Security Specifications and Design: How Software Engineers and Practitioners Are Mixing Things up", Proceedings of the Evaluation and Assessment in Software Engineering, pp.451~456 (2020)
21. S. Evangelou, "Security Assessment in IoT Ecosystems", ~ (2020)
22. S. A. Ehikioya, "A critical assessment of the design issues in e‐commerce systems development", Engineering Reports, 2(4) (2020)
23. A. Kott, "Assessing mission impact of cyberattacks: toward a model-driven paradigm", IEEE Security & Privacy, 15(5), pp.65~74 (2017)
24. M. M. Jakeri, "A Review of Factors Influencing the Implementation of Secure Framework for in-House Web Application Development in Malaysian Public Sector", 2018 IEEE Conference on Application, Information and Network Security (AINS), pp.99~104 (2018)
25. H. F. Atlam, "Internet of Things Forensics: A Review", Internet of Things, 11 (2020)
26. J. Heilmann, "Application Security Review Criteria for DevSecOps Processes", MS, pp.2020
27. E. A. Wanniarachchi, "Program security evaluation using dynamic disassembly of machine instructions in virtualized environments", PhD, pp.2016
28. Sungyong Cha, "Security evaluation framework for military iot devices", Security and Communication Networks, 2018, pp.1~12 (2018)
29. R. Egan, "Cyber operational risk scenarios for insurance companies", British Actuarial Journal, 24 (2019)
30. M. Kern, "A Cybersecurity Risk Assessment Process for Model-Based Industry 4.0 Development", 23th World Multi-Conferebce on Systemics, Cybernetics and Informatics (WMSCI) (2019)
31. M. W. Meersman, "Developing a Cloud Computing Risk Assessment Instrument for Small to Medium Sized Enterprises: A Qualitative Case Study Using a Delphi Technique", PhD, pp.2019
32. T. Pavleska, "Cybersecurity Evaluation of Enterprise Architectures: The e-SENS Case", IFIP Working Conference on The Practice of Enterprise Modeling, pp.226~241 (2019)
33. A. Hudic, "Towards a unified secure cloud service development and deployment life-cycle", 2016 11th International Conference on Availability, Reliability and Security (ARES), pp.428~436 (2016)
34. C. J. D'Orazio, "A Markov adversary model to detect vulnerable iOS devices and vulnerabilities in iOS apps", Applied Mathematics and Computation, 293, pp.523~544 (2017)
35. H. Rygge, "Threat poker: solving security and privacy threats in agile software development", Nordic Conference on Secure IT Systems, pp.468~483 (2018)
36. L. Sion, "Solution-aware data flow diagrams for security threat modeling", Proceedings of the 33rd Annual ACM Symposium on Applied Computing, pp.1425~1432 (2018)
37. P. Frijns, "Reframing security in contemporary software development life cycle", 2018 IEEE International Conference on Technology Management, Operations and Decisions (ICTMOD), pp.230~236 (2018)
38. H. Aranha, "Securing Mobile e-Health Environments by Design: A Holistic Architectural Approach", 2019International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), pp.1~6 (2019)
39. K. M. Kaariainen, "Improving security in software development process:Case Tieto AS", MS, pp.2019
40. M. T. Baldassarre, "Privacy oriented software development", International Conference on the Quality of Information and Communications Technology, pp.18~32 (2019)
41. P. Siddhanti, "Cybersecurity by Design for Smart Home Environments", Proceedings of the 21st International Conference on Enterprise Information Systems (ICEIS),, pp.587~595 (2019)
42. P. De Cremer, "Sensei:Enforcing secure coding guidelines in the integrated development environment", Software: Practice and Experience, 50(9), pp.1682~1718 (2020)
43. S. Ramalingan, "A Holistic Systems Security Approach Featuring Thin Secure Elements for Resilient IoT Deployments", Sensors, 20(18), pp.5252~ (2020)
44. S. Evangelou, "Auditing and extending security features of IoT platforms", pp.2020
45. M. Howard, "The Security Development Lifecycle –SDL: A Process for Developing Demonstrably More Secure Software" (2006), Microsoft Press
46. T. M. MIR, "Threat analysis and modeling during a software development lifecycle of a software applicat", U.S. Patent No 8,091,065, ~ (2012)
47. E. Chen, "Designing security into software during the development lifecycle", U.S. Patent Application No 13, 2013
48. W. Douglas, "Applying Secure Software Engineering (SSE)Practices to Critical Space System Infrastructure Development", 14th International Conference on Space Operations, pp.2392~ (2016)
49. B. J. Greer, "Cybersecurity For Healthcare Medical Devices", PhD, pp.2018
50. A. Sanchez-Gomez, "Computer and Network Security Essentials", pp.263~281 (2018), Springer
51. N. Alhirabi, "Designing Security and Privacy Requirements in Internet of Things:A Survey", arXiv preprint arXiv:1910.09911, ~ (2019)
52. K. Chermana, "Cleansing Legacy Data for GDPR Compliance: A Case Study", PhD, pp.2019
53. W. Hassan, "Latest trends, challenges and solutions in security in the era of cloud computing and software defined networks", Int J Inf & Commun Technol ISSN, 2252(8776) (2019)
54. 홍진근, "Component Analysis of DevOps and DevSecOps", 한국융합학회논문지, 10(9), pp.47~53 (2019), 한국융합학회[DOI]
55. J. Geismann, "A systematic literature review of model-driven security engineering for cyber–physical systems", Journal of Systems and Software, 169 (2020)
56. M. Alenezi, "Essential activities for Secure Software Development", International Journal of Software Engineering &Applications (IJSEA),, 11(2) (2020)
57. F. Y. Akeel, "Secure data integration systems", PhD, pp.2017
58. S. Lipke, "Building a secure software supply chain using docker", MS, pp.2017
59. A. Schaad, "Open Weakness and Vulnerability Modeler(OVVL)–An Updated Approach to Threat Modeling", Proceedings of the 16th International Joint Conference on e-Business and Telecommunications, pp.417~424 (2019)
60. F. Nabi, "Classification of logical vulnerability based on group attacking method", Journal of Ubiquitous Systems &Pervasive Networks, 14(1), pp.19~26 (2021)
61. 강수영, "CIA-Level 기반 보안내재화 개발 프레임워크", 정보보호학회논문지, 30(5), pp.909~928 (2020), 한국정보보호학회[DOI]
62. Sungyong Cha, "Blockchain Based Sensitive Data Management by Using Key Escrow Encryption System From the Perspective of Supply Chain", IEEE Access, 8, pp.154269~154280 (2020)
63. T. Pavleska, "Drafting a Cybersecurity Framework Profile for Smart Grids in EU : A Goal-Based Methodology", European Dependable Computing Conference, pp.143~155 (2020)
64. V. Casola, "A novel Security-by-Design methodology:Modeling and assessing security by SLAs with a quantitative approach", Journal of Systems and Software, 163 (2020)
65. L. David, "DREADful" (2007), Microsoft
66. E. Zheng, "Automated secure software development management, risk assessment, and risk remediation", U.S. Patent No 10,740,469, ~ (2020)
67. A. Van den Berghe, "Design notations for secure software: a systematic literature review", Software & Systems Modeling, 16(3), pp.809~831 (2017)
68. R. Buijtenen, "Continuous Security Testing: A Case Study on the Challenges of Integrating Dynamic Security Testing Tools in CI", CD, 2019, ~
69. A. Johannsen, "Measuring IT security, compliance and data governance within small and medium-sized IT enterprises", Electronic Imaging, 252, pp.1~11 (2020)
70. ISO, "Evaluation criteria for IT security(CC)", ISO, 2009
71. CNSS, "Security Categorization and Control Selection for National Security Systems", CNSSI 1253, ~ (2009)
72. NIST, "Volume I : Guide for Mapping Types of Information and Information Systems to Security Categories", NIST SP 800-60, ~ (2008)
73. NIST, "Security and Privacy Controls for Information Systems and Organizations", NIST SP 800-53, ~ (2020)
74. DoD, "DoD Program Manager’s Guidebook for Integrating the Cyb-ersecurity Risk Management Framework into the System Acquisition Lifecycle", ~ (2015)
75. Microsoft, "Security Development Lifecycle – SDL Process Guidance Version 5.2", ~ (2012)
76. V. John, "Building Secure Software: How to Avoid Security Problems the Right Way" (2001), Addison-Wesley
77. NIST, "Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy", NIST SP 800-37, ~ (2018)
78. NIST, "Security Considerations in the System Development Life Cycle", NIST SP 800-64 Revision 2, ~ (2019)
79. L. J. Moukahal, "Vehicle Software Engineering (VSE): Research and Practice", IEEE Internet of Things Journal, 7(10), pp.10137~10149 (2020)

관련 논문AI추천