정보보호제품 품질 평가 모델에 관한 연구
Quality Evaluation Model on Information Protection Product
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
기업의 정보보호활동 예산 중 정보보호제품 구매가 가장 큰 비중을 차지하고 있다. 그러나 정보보호제품을 객관적으로 비교하기 위해 적용되어야 하는 평가요소와 평가모델이 없어 제품 선택에 어려움을 겪고 있다. 따라서 본 연구에서는 정보보호제품 고유의 품질 특성을 연구하고 그에 따른 평가 요소들을 선정한다. 선정된 평가 요소들을 분석하여 중요도에 따른 가중치를 부여한 품질 결정 모델을 제시한다. 대상은 네트워크 정보보호제품으로 제한하여 분석하였고 모든 정보보호제품으로 확대하여 적용할 수 있다.
Abstract
The purchase of information protection products accounts for the largest portion of corporate information protection activity budgets. However, there are no evaluation factors and evaluation models that should be applied to objectively compare information protection products, and therefore, product selection is difficult. Therefore, in this study, we study the inherent quality characteristics of information security products and select evaluation factors accordingly. The selected evaluation factors are analyzed and a quality determination model is given by weighting according to importance. The target is limited to the network information protection product and can be extended to all information protection products.
참고문헌 (35)
- Information security survey(Corporate sector), , Ministry of Science, ICT and Future Planning, ~ (2016)
- "National Information Protection White Paper", NIS, ~ (2016)
- Crosby, "Quality is free : The art of making quality certain" (1980), Signet
- Juran, Joseph, "Quality handbook", pp.173~178 (1999), McGraw-Hill
- Regulations for the evaluation and certification of information protection products, , Ministry of Science and ICT, ~ (2017)
- 이하용, "CC와 ISO 표준에 따른 침입방지시스템의 융합 성능평가 모델", 디지털융복합연구, 13(5), pp.251~257 (2015), 한국디지털정책학회[DOI]
- 이하용, "보안성과 성능에 따른 침입탐지시스템의 품질평가 모델", 디지털융복합연구, 12(6), pp.289~295 (2014), 한국디지털정책학회[DOI]
- ISO, "Information Technology-Security techniques-Evaluation criteria for IT security", ISO, 2012
- ISO, "Software engineering-Product quality", ISO, 2003
- Lee Jong-Min, "Investigation in Evaluation Matrix for Security Software Product", Proceedings of the Korean Information Science Society Conference, 33(2C), pp.427~432 (2006)
- 윤여웅, "정보보호제품 품질평가를 위한 품질 모델 및 메트릭에 관한 연구", 정보보호학회논문지, 19(5), pp.131~142 (2009), 한국정보보호학회
- ISO, "Systems and software engineering — Systems and software Quality Requirements and Evaluation(SQuaRE)— Measurement of system and software product quality", ISO, 2016
- Yong-Hee Jeon, "Technical analysis and evaluation of intrusion prevention system", REVIEW OF KIISC, 15(2), pp.63~73 (2005)
- Lee Chun Seong, "A Study on the Testing Methodology and Test Cases for DDoS Protection Appliance", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, pp.537~538 (2011)
- Hickman, B., "Benchmarking methodology for firewall performance. No. RFC 3511", ~ (2003)
- Performance Evaluation of netfilter : A Study on the Performance Loss When Using netfilter as a Firewall, "Niemann", ~ (2015)
- Sheth, Chirag, "Performance evaluation and comparative analysis of network firewalls", ICDeCom, International Conference on. IEEE, pp.1~5 (2011)
- Lyu, Michael R., "Firewall security : Policies, testing and performance evaluation", Computer Software and Applications Conference, COMPSAC 2000. The 24th Annual International (2000), IEEE
- Tae-In Jung, "Analysis of information protection product performance test trend", REVIEW OF KIISC, 12(5), pp.62~69 (2002)
- TTA, "How to measure performance for network security appliances", TTAS.KO-12.0044, ~ (2006)
- T. L. Saaty, "The Analytic Hierarchy Process" (1980), McGraw Hill
- T. L. Saaty, "How to Make a Decision : The Analytic Hierarchy Process", European Journal of Operation Research (1990)
- 이석원, "금융회사 서버 Privilege 계정 운영방식 결정 모델", 정보보호학회논문지, 25(6), pp.1607~1620 (2015), 한국정보보호학회[DOI]
- 윤석웅, "AHP를 이용한 VoIP 정보보호 점검항목의 중요도 분석", 정보보호학회논문지, 22(5), pp.1115~1122 (2012), 한국정보보호학회
- NIS, "Firewall Protection Profile V1.0", ~ (2016)
- NIS, "VoIP Firewall Protection Profile V1.0", ~ (2016)
- NIS, "Virtual Private Network Protection Profile V1.0", ~ (2016)
- NIS, "Intrusion Prevention System Protection Profile V1.0", ~ (2017)
- NIS, "Network Device Protection Profile V1.0", ~ (2016)
- NIS, "Network Data outflow prevention Protection Profile V1.0", ~ (2017)
- National Intelligence Service, "Wireless intrusion prevention system Protection Profile V1.0", ~ (2017)
- ISO, "Information technology — Service management —", ISO, 2012
- ISO, "Information technology-Security techniques-Methodology for IT security evaluation", ISO, 2012