게임을 통한 정보보안인식 향상에 관한 연구: 개별 정보보안정책에 대한 인식변화를 중심으로
A Study on Improvement of Information Security awareness through Game: Focusing on Changes in Awareness of Information Security Policies
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
조직의 정보보안을 강화하기 위해서는 정보보안설비에 대한 투자도 중요하지만 조직구성원들의 정보보안인식 역시 매우 중요하다. 이러한 정보보안인식을 높이기 위해서는 효과적인 교육이 필요하다. 하지만 대부분의 조직에서활용하는 집체교육방식은 그다지 효과적이지 못하다. 기능성 게임을 이용한 교육 방식은 이에 대해 좋은 대안이 될수 있다. 기능성 게임을 이용한 교육 방식은 이미 다양한 사례 및 연구를 통해 효과성이 입증되었고 많은 분야에서활용되고 있다. 본 논문에서는 개별 정보보안정책 중요도에 대한 조직원들의 인식을 향상시키기 위하여 게임 프로그램을 설계 및 구현하였다. 조직원들을 대상으로 교육을 수행하였으며 교육 전 후 평가 데이터 분석을 통해 개별 정보보안정책 중요도에 대한 인식 변화 여부를 조사하였다.
Abstract
In order to strengthen the information security of the organization, it is important to invest in the information securityfacility, but the information security awareness of the organization members is also very important. Effective education isneeded to raise awareness of this information security. However, the method of collective education utilized by mostorganizations is not very effective. Educational methods using serious games can be a good alternative. Educational methodsusing serious games have already proved effective through various cases and researches and are used in many fields. In thispaper, we design and implement a game program to improve the awareness of individual information security policyimportance. The training was conducted for the members of the organization and the change of awareness about theimportance of individual information security policy was examined through analysis of evaluation data before and after thetraining.
참고문헌 (26)
- "Results of the survey on the status of information security in 2017"[URL]
- Amitava Dutta, "Management's role in information security in a cyber economy", California Management Review, 45(1), pp.67~87 (2002)[DOI]
- "Is not it a good time to s pend your company's security training time?"[URL]
- Karina Korpela, "Improving cyber security awareness and training programs with data analytics", Information Security Journal: A Global Perspective, 24(1-3), pp.72~77 (2015)[DOI]
- Clark C. Abt, "Serious Games", pp.5~6 (1970), Viking Press
- Jesse Schell, "The art of game design", pp.96~ (2008), ELSEVIER
- S.J. Brown, "Educational video games for juvenile diabetes: result of a controlled trial", Medical informatics, 22(1), pp.77~89 (1997)[DOI]
- B.D. Coller, "Video game-based education in mechanical engineering: a look at student engagement", International Journal of Engineering Education, 25(2), pp.308~317 (2009)
- Bilal Khan, "Effectiveness of information security awareness method based on psychological theories", African Journal of Business Management, 5(26), pp.10862~10868 (2011)
- Jeffrey M. Stanton, "An analysis of end user security behaviors", Computers and Security, 24(2), pp.124~133 (2005)[DOI]
- Carrie Mccoy, "You are the key to security: establishing a successful security awareness program", SIGUCCS '04 Proceedings of the 32nd annual ACM SIGUCCS conference on User service, pp.346~349 (2004)
- Mete Eminagaoglu, "The positive outcomes of information security awareness training in company - a case study", Information Security Technical Report, 14(4), pp.223~229 (2010)
- Basie Von Solms, "Information security - a multidimensional discipline", computers & security, 20(6), pp.504~508 (2001)[DOI]
- P.S. Dowland, "Computer crime and abuse: a survey of public attitudes and awareness", Computers and Security, 18(8), pp.715~726 (1999)[DOI]
- Chang-gyu Oh, "Development of a framework for effective information protection education and training", Korea Institute Of Information Security And Cryptology, 13(2), pp.59~69 (2003)
- Karl M. Kapp, "The gamification of learning and instruction: game-based methods and education", pp.49~ (2012), Wiley
- Kil-sang Yoo, "A design of functional game contents and analysis of power spectrum", Journal of The Korean Society for Computer Game, 4(6), pp.25~31 (2005)
- Konstantin Mitgutsch, "Purposeful by design?:a serious game design assessment framework", FDG '12 Proceedings of the International Conference on the Foundations of Digital Games, pp.121~128 (2012)
- Randel J.M., "The effectiveness of games for educational purposes: a review of recent research", Simulation & Gaming, 23(3), pp.261~276 (1992)[DOI]
- D.S. Vogel, "Computer gaming and interative simulations for learning: a meta-analysis", Journal of Educational Computing Research, 34(4), pp.229~243 (2006)[DOI]
- Sitzmann. T, "A meta-analytic examination of the instructional effectiveness of computerbased simulation games", Personnel Psychology, 64(2), pp.489~528 (2011)[DOI]
- 이동혁, "게이미피케이션 메커니즘을 이용한 초등 네트워크 정보보안 학습교재 및 교구 개발", 정보보호학회논문지, 26(3), pp.787~797 (2016), 한국정보보호학회[DOI]
- "Gamification Examples and Case Studies"[URL]
- Chae-ho Lim, "Effective information protection awareness improvement plan", Journal of Information Security, 16(2), pp.30~36 (2006)
- 백민정, "중소규모 조직구성원의 정보보안인식과 행동이 정보보안성과에 미치는 영향에 관한 연구", 중소기업연구, 33(2), pp.113~132 (2011), 한국중소기업학회
- Anne Adams, "Users are not the enemy", COMMUNICATIONS OF THE ACM, 42(12), pp.40~46 (1999)