오픈소스 기반 분산원장기술 시스템을 위한 보안 강화 방안
Security Enhancements for Distributed Ledger Technology Systems Based on Open Source
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
4차 산업 혁명 관련 신흥 기술로 주목받고 있는 분산원장기술은 오픈소스 기반 분산원장기술 시스템(또는 분산원장기술 플랫폼)으로 구현되어 다양한 애플리케이션(또는 서비스) 개발 시 널리 활용되고 있으나, 오픈소스 기반 분산원장기술 시스템에서 제공하는 보안 기능은 매우 미흡한 실정이다. 본 논문에서는 오픈소스 기반 분산원장기술 시스템 운용 시 발생할 수 있는 잠재적인 보안 위협을 식별하고, 국내 법규 및 보안 인증 기준(ISMS-P, InformationSecurity Management System-Privacy)을 분석하여 보안 위협에 대응할 수 있는 보안기능 요구사항을 도출한다. 그리고 국제 표준인 공통평가기준(CC, Common Criteria)의 보안기능 컴포넌트 분석을 통하여 오픈소스 기반분산원장기술 시스템에 필요한 보안 기능을 구현할 수 있는 방안을 제안함으로서 보안을 강화하고자 한다.
Abstract
Distributed ledger technology, which is attracting attention as an emerging technology related to the 4th IndustrialRevolution, is implemented as an open source based distributed ledger technology system and widely used for developmentwith various applications (or services), but the security functions provided by the distributed general ledger system are veryinsufficient. This paper proposes security enhancements for distributed ledger technology systems based on open source. Todo so, potential security threats that may occur under running an open source based distributed ledger technology systemsare identified and security functional requirements against the security threats identified are provided by analyzing legislationand security certification criteria (ISMS-P). In addition, it proposes a method to implement the security functions required foran open source based distributed ledger technology systems through analysis of security functional components of CommonCriteria (CC), an international standard.
참고문헌 (14)
- Korea Communications Commission, "Act on promotion of information and communications network utilization and information protection, etc", ~ (2018)
- Ministry of the Interior and Safety, "Personal information protection act", ~ (2017)
- Korea Communications Commission, "Criteria on technical and administrative security measures of personal information(Korea Communications Commission Notice No. 2015-3)", ~ (2015)
- Ministry of the Interior and Safety, "Criteria on measures ensuring the safety of personal information(Ministry of the Interior and Safety Notice No. 2017-1)", ~ (2017)
- Financial Services Commission, "Electronic Financial Supervisory Regulations(Financial Services Commission Notice No. 2018-36)", ~ (2018)
- Ministry of the Interior and Safety, "Electronic government act", ~ (2017)
- Ministry of the Interior and Safety, "Enforcement Decree of Electronic Government Act", ~ (2018)
- Korea Internet & Security Agency, "Personal Information & Information Security Management System (ISMS-P) Certification Criteria", ~ (2019)
- National Security Research Institute, "Common Criteria for Information Technology Security Evaluation, Part 2: Security functional components, April 2017, Version 3.1 Revision 5, CCMB-2017-04-002", 21~180 (2017)
- "Internet homepage of Hyperledger Fabric" (2019)[URL]
- Hyperledger Architecture Working Group, "Hyperledger Architecture Volume 1", ~ (2017)
- "Internet homepage of Hyperledger Fabric" (2019)[URL]
- "Internet homepage of Ethereum" (2019)[URL]
- "Internet homepage of Ethereum Homeste ad Documentation" (2019)[URL]