국내외 IT제품 도입제도 동향 분석 및 국내 제도 개선방안 도출
Analysis of the Trends of Domestic/International IT Product Introduction Policy and Deduce Improvement Plan of Domestic Policy
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
정보통신기술이 발전함에 따라 정부의 행정전산화가 추진되었고, 이의 역기능으로 IT제품을 대상으로 한 사이버공격이 전 세계적으로 확산되고 있다. 이에 따라 각국의 정부는 정보보호를 위하여 국가․공공기관의 IT제품 도입에있어 보안성검증을 의무화하기 시작하였으며 도입 과정에서 요구되는 제도를 정립하였다. 본 연구는 현 국내 IT제품도입제도를 분석하여 보완점을 파악한다. 또한 주요 선진국 미국, 영국, 일본, 캐나다, 호주 5개국의 IT제품 도입제도 동향을 분석하며, 최종적으로 국내 도입제도와의 비교 분석을 통하여 국내 도입제도의 개선방안을 제안한다.
Abstract
As the Information and Communication Technology developed, the administration computerization of the government waspromoted, and cyber attacks targeting IT products are spreading all over the world due to the reverse functions. Accordingly,governments in each country have begun to verify the security in the introduction of IT products by national and publicinstitutions in order to protect information, and established the policy required in the introduction process. This researchanalyzes the introduction policy of domestic IT products to identify the supplement point. In addition, we analyze trends ofintroduction of IT products in the major developed countries such as USA, UK, Japan, Canada, and Australia. Finally, wepropose the improvement method of domestic introduction policy through comparison analysis with domestic introductionpolicy.
참고문헌 (24)
- "Administration Computerization" (2019)[URL]
- "Cyber-threat intelligence network and ‘2017 seven Cyber attack forecast’" (2016)[URL]
- Nam-Kyun Baik, "Analysis of security evaluation & certification scheme for CCRA CAP", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, 2009(06), pp.1670~1673 (2009)
- Myeonggil Choi, "Analysis of international evaluation certification scheme", Korea Institute Of Information Security And Cryptology, 23(5), pp.29~35 (2013)
- Nam-Kyun Baik, "Foreign certificate issuing country CC-based information protection product evaluation trend", Korea Institute Of Information Security And Cryptology, 19(6), pp.49~67 (2009)
- Lee Dae Seob, "Status and future direction of domestic evaluation and certification policy", Korea Institute Of Information Security And Cryptology, 17(6), pp.20~24 (2007)
- Choi, Myeong-Gil, "A study on domestic and foreign policy trends of CMVP", Proceedings of Symposium of the Korean Academy Industrial Cooperation Society, pp.471~474 (2010)
- 최명길, "암호모듈 검증 정책에 관한 연구", 한국산학기술학회논문지, 12(1), pp.255~262 (2011), 한국산학기술학회
- "Security Conformance" (2019)[URL]
- "Security function test result" (2019)[URL]
- "What is NIAP/CCEVS?" (2019)[URL]
- Committee on National Security System, "CNSSP Policy No.11 -National Policy Governing the Acquisition of Information Assurance (IA) and IA-Enabled Information Technology Products", ~ (2013)
- "Government Security Classifications" (2018)[URL]
- "Information Technology Promotion Agency" (2019)[URL]
- "Japan Cryptographic Module Validation Program" (2019)[URL]
- "Japan Information Technology Security Evaluation and Certification Scheme" (2019)[URL]
- "Cryptographic Module Validation Program" (2019)[URL]
- "EVALUATION OF CRYPTOGRAPHIC FUNCTIONALITY" (2016)[URL]
- "Canadian Common Criteria Program" (2019)[URL]
- "Protection Profiles" (2019)[URL]
- "ARRANGEMENT on the Recognition of Common Criteria Certificates" (2014)[URL]
- "COMSEC" (2019)[URL]
- "Evaluated Products List" (2019)[URL]
- "Australian Government Information Security Manual" (2019)[URL]