시스템 접근관리에 대한 의사결정 프로세스 연구
A Study on Decision Making Process of System Access Management
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 정보보호인증 및 보안감사의 감독과 절차가 강화되고 있지만 내부자에 의한 정보유출 및 보안사고는 지속적으로 늘어나고 있다. 2011 Cyber Security Watch Survey에 의하면 2010년 한 해 동안 발생한 보안사고 중 21%가내부자에 의해 발생한 것으로 조사되었다. 기업들은 대외서비스와 달리 내부시스템 보안사고의 경우 즉각적으로 인지하지 못하거나 발생 시 비용증가, 신용도하락 등의 이유로 외부에 공시하지 않고 일시적 미봉책으로 해결하는 경우가 많았다. 본 논문은 시스템 접근관리에 대한 문제점을 실증적으로 연구하였으며, 타 시스템 또는 사업장에서 활용이 가능한 표준 프로세스를 제시하였다. 이를 통해 기업들이 쉽고 체계적으로 시스템 접근관리에 대한 문제점을 조사하고 분석하며 개선하는데 도움을 줄 것이다.
Abstract
Recently, the administration and supervision of Information Security Certification and Security Inspection has been enforcedbut information leakage and security accidents by insiders are increasing consistently. The security accidents by insiders ran to21% in 2010, by the 2011 Cyber Security Watch Survey. The problem is that immediate recognition is difficult and stopgapmeasure is mostly adopted without company’s external notice apprehensive for cost increase or credit drop in case of internalsecurity accidents. In the paper, we conducted the regression study on security access management then proposed the standardprocess available for other systems and businesses sites. It can be very useful for many companies to investigate, analyze andimprove the problem of security management conveniently.
참고문헌 (14)
- "2011 Cyber Security Watch Survey", CERT, ~ (2011)
- Ji-hoon Song, "The study of customized internal insider security model based on insider security accident", Korean Society For Internet Information, 1(12), pp.71~82 (2011)
- "SECVIZ"[URL]
- Baek-ho Sung, "A Study of the EAM based on the xml for e-Commerce", Korea Institute of Infor mation Security and Cryptology, 13(2) (2003)
- "E-business and extended ERP", Mana gement and Information technology of MIT, ~ (2000)
- Tae-myeong Chung, "A study on gen eralization of security policies for ent erprise security management system", Korea Information Processing Society, 9(6) (2002)
- "Priorities for ERP SECURITY", Ele ctrical Wholesaling, ~ (2013)
- "JD Edwards, System Foundation", JD Edwards Enterprise software, 743~753 (1999)
- Jung-man Son, "PMI based User Authentication Mana gement for ERP", Korea Industrial And Systems Engineering, (56), pp.108~111 (2003)
- A study on the Inside Security of Enterprise Resource Plan ning, "Chi-sung Won", Korea Institute of Industrial Engineers, 1041~1043, pp.Korea Institute of Industrial Engineers, no. C11-5 (2005)
- David A, "ERP Critical Success Factors : An Exploration of the Contextual Factors in Public Sector Institutions", Proceed ings of the 35th Hawaii International Conference on System Sciences (2002)
- Mark Denning, "using SAP R", 3, 2003, pp.743~753
- Sang-hwan Leem, "UML with ERP Security Framework implementation", International Journal of Management Science & Financial Engineering, (SA01-5), pp.664~667 (2005)
- Eun Kim, "A scheme of Permission Trac king based on RBAC and DAC from Digital Forensics Point of view", The Korean Institute of Communications and Information Sciences, pp.675~676 (2011)