AHP를 이용한 SNS 정보보호 위협요인 분석
A Study on Threat factors of Information Security in Social Network Service by Analytic Hierarchy Process
0
조회
0
다운로드
13
인용
0
참고문헌
키워드
초록
As the usage of social network service(SNS) increases recently, great attention has been shown to the information security in SNS. However, there has been little investment in SNS environment for security while preferential investment to attract subscribers has been made so far. Moreover, there is still a lack of confidence for investment effect and an absence of framework to analyze the threat factors of information security in SNS. In this paper, we propose to model for decision-making standard of SNS information security investment by the AHP. The result shows that ‘service image' is the most important criterion for the decision of SNS information security. It also shows that ‘Profile-squatting and reputation slander through ID thefts' and ‘Corporate espionage' are important threat factors in SNS information security.
Abstract
As the usage of social network service(SNS) increases recently, great attention has been shown to the information security in SNS. However, there has been little investment in SNS environment for security while preferential investment to attract subscribers has been made so far. Moreover, there is still a lack of confidence for investment effect and an absence of framework to analyze the threat factors of information security in SNS. In this paper, we propose to model for decision-making standard of SNS information security investment by the AHP. The result shows that ‘service image' is the most important criterion for the decision of SNS information security. It also shows that ‘Profile-squatting and reputation slander through ID thefts' and ‘Corporate espionage' are important threat factors in SNS information security.
참고문헌 (21)
- The People's Revolution: Implications of Web 2.0 and Social Media Applications, "Martin Olausson", Strategy Analytics, ~ (2007)
- 인터넷이용자의 SNS이용실태조사, 연구보고서, "한국인터넷진흥원", ~ (2009)
- D.M.Boyd, "Social Network Sites:Definition,History,and Scholarship", Journal of Computer-Mediated Communication, 13(1), pp.210~230 (2007)
- comScore, "The comScore Data Passport - First Half 2010", Data Passport, ~ (2010)
- "Compete"[URL]
- "eMarketer"[URL]
- T.L.Saaty,The Analytic Hierarchy Process, "McGraw Hill" (1980), McGraw Hill
- T.L.Saaty, "How to Make a Decision:The Analytic Hierarchy Process", European Journal of Operation Research, 48, pp.9~26 (1990)
- T.L.Saaty, "Diagnosis with Dependent Symptoms:Bayes Theorem and the Analytic Hierarchy Process", Operations Research, 46(4), pp.491~502 (1998)
- 공희경, "AHP를 이용한 정보보호투자 의사결정에 대한 연구", Journal of Information Technology Applications & Management, 15(1), pp.139~152 (2008), 한국데이타베이스학회
- K.J.Soo Hoo, "How much is enough? A Risk-Management Approach to Computer Security", Stanford University, ~ (2000)
- L.A.Gordon, "The Economics of Information Security Investment", ACM Transactions on Information and System Security, 5(4), pp.438~457 (2002)
- C.Blatchford, "Information Security Controls-Are They Cost-effective", Computer Audit Journal, 3, pp.11~19 (1995)
- A.Davis, "Return on Security Investment-Proving It's Worth It", Network Security, 2, pp.8~10 (2005)
- H.Cavusoglu, "A Model for Evaluating IT Security Investments", Communications of the ACM, 47(7), pp.87~92 (2004)
- NIST, "An Introduction to Computer Security" (1996)
- Vincent C.S.Lee, "A Fuzzy Multi-criteria Decision Model for Information System Security Investment", LNCS 2690, pp.436~441 (2003)
- L.D.Bodin, "Evaluating Information Security Investments Using the Analytic Hierarchy Process", Communications of the ACM, 48, pp.79~83 (2005)
- 조찬식, "정보사회에서의 정보보안에 관한 연구", 한국문헌정보학회지, 34(1), pp.155~180 (2000)
- Security Issues and Recommendations for Online Social Networks, "ENISA", ~, pp.ENISA Position Paper No.1 (2007)
- 이기식, "인터넷시대 사이버보안(Cyber_Security)의 인식양태 및 정책대안", 한국공공관리학보, 22(4), pp.99~127 (2008), 한국공공관리학회