주요기반시설에 대한 주요국 사이버보안 수준 비교ㆍ분석 연구
A Study on Major Countries’s Level of Cybersecurity for Critical Infrastructure
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
최근 주요기반시설은 기존의 폐쇄적인 환경에서 개방적인 환경으로 변화하고, 사이버공간으로 범위가 확장되면서 사이버위협의 새로운 대상이 되고 있다. 또한 정보통신기술의 발전으로 주요기반시설 간의 상호의존성이 증가하고 있다. 그러나 기존 연구는 동향조사 및 보호정책 논의 수준에 머물러, 정책의 효율적 추진을 위한 현황 진단 및 적절성 판단등의 연구는 별도로 진행되고 있지 않다. 이에 본 연구는 기존에 국가별 사이버보안 수준을 측정하는 국제지표 3가지를 비교·분석하여 주요기반시설의 보호수준을 측정하기 위한 새로운 지표를 개발하고, 해당 지표를 통하여 미국과 일본, 영국, 독일, 노르웨이로 대표되는 주요국과 한국의 현재 주요기반시설의 보호수준을 측정한다. 이를 통하여 미래 사이버공간에서 한국의 영향력을 확대하고국가 간 신뢰를 구축할 근거자료가 되기를 기대한다.
Abstract
Recently, the critical infrastructure is changing from the existing closed environment to an open environment, and it is becoming a new target of cyber-threats by expanding into cyberspace. In addition, due to the development of information and communications technology(ICT), the interdependence among critical infrastructure is increasing. Previous studies ranged from trend investigation and policy discussions to protection, but separate studies on the diagnosis of the current status and appropriateness judgment for efficient policy implementation were not performed. Therefore, this study compares and analyzes three international indicators that measure the level of cyber security in each country in order to build a new index to measure the level of cyber security of critical infrastructure in the USA, Japan, UK, Germany, Norway, and Korea. It is hoped that this study will serve as a basis for expanding Korean influence and building trust among countries in future cyberspace.
참고문헌 (37)
- Akcaraz, Cristina, "Critical Infrastructure Protection : Requirements and Challenges for the 21st Century", International Journal of Critical Infrastructure Protection, 8 (2015)
- ASPI, "Cyber Maturity in the Asia-Pacific Region", ~ (2014)
- ASPI, "Cyber Maturity in the Asia-Pacific Region", ~ (2015)
- ASPI, "Cyber Maturity in the Asia-Pacific Region", ~ (2016)
- BSA, "EU Cybersecurity Dashboard", ~ (2015)
- BSA, "APAC Cybersecurity Dashboard", ~ (2015)
- Cavelty, Myriam Dunn, "Critical Infrastructure Protection", pp.15~38 (2012), Springer Berlin Heidelberg
- Cho-rom Ham, "A Proposal on Improvement of the Countermeasures to Protect Critical Information Infrastructure", pp.2016
- Critical Information Infrastructure Protection(CIIP)Emerging Challenges for Developing Countries, "CTO", ~ (2015)
- NIPP 2013: Partnering for Critical Infrastructure Security and Resilience, "DHS", ~ (2013)
- Dong-Yeon Park, "A Study on Improvement of Evaluation Criteria of Managerial · Physical Vulnerability Analysis", pp.2014
- Do-seok Han, "A Comparative Study on Domestic Act on the Protection of Information and Communications Infrastructure and Japanese Cyber Security Basic Law", Journal of the Korea Institute Of Information Security & Cryptology, 25(3), pp.44~51 (2015)
- 김도연, "산업제어시스템의 사이버보안을 위한 취약점 분석", 한국전자통신학회 논문지, 9(1), pp.137~142 (2014), 한국전자통신학회
- Norway Country Report, "ENISA", ~ (2010)
- National Strategy for Critical Infrastructure Protection, "Federal Republic of Germany", ~ (2009)
- Hyang-mi, Park, "A Study on Developing International Level Measure Index for Strengthening Cybersecurity Capability of Critical Infrastructure", pp.2017
- 배효빈, "주요정보통신기반시설에 대한 사이버 위협을 예방하기 위한 맞춤형 보호체계 구축", 보안공학연구논문지, 10(6), pp.643~654 (2013), 보안공학연구지원센터[DOI]
- Hyun-ju Lee, "The Study On Security Enhancement of National Control System For Critical Infrastructure-Focusing On Comparison About Policy Of Major Countries And Domestic-", pp.2016
- "Urgency of social infrastructure security management" (2016)[URL]
- Project SHINE Finding Report, "Infracritical", ~ (2014)
- ITU and ABI Research, "Global Cybersecurity Index & Cyberwellness Profiles", ~ (2015)
- ITU, "Cybersecurity Index of Indices", ~ (2015)
- "Serious situation of safety management on critica l infrastructure ... 97 of the Board of Audit" (2016)[URL]
- Kil-hwan Im, "Control system security vulnerabilities and countermeasures", pp.2011
- 2014 National Information Protection White Paper, "Korea Internet & Security Agency(KISA)", ~
- 2015 National Information Protection White Paper, "Korea Internet & Security Agency(KISA)", ~
- 2016 National Information Protection White Paper, "Korea Internet & Security Agency(KISA)", ~
- A Study on the Infrastructure Protection Law System in the United States, UK and Germany, "Korea Internet & Security Agency(KISA)", ~, pp.KISA-RP-2010,0054 (2010)
- 최명길, "제어시스템 보안성 평가 방법에 관한 연구", 정보보호학회논문지, 23(2), pp.287~298 (2013), 한국정보보호학회
- National Law Information Center, "Act on the Protection of Information and Communications Infrastructure", ~
- NIST, "Framework for Improving Critical Infrastructure Cybersecurity", ~ (2014)
- Norwegian Ministries, "Cyber Security Strategy for Norway", ~ (2013)
- Positive Technologies, "SCADA Safety in Numbers", ~ (2014)
- Sang-hyun Jang, "A Study on the Critical Infrastructure Information Security Level Assessment Improvements", pp.2015
- Stefan Brem, "Critical Infrastructure Protection from a National Perspective", Symposium on Critical Infrastructures, pp.191~ (2015)
- 배선하, "국가 사이버보안 역량 평가를 위한 평가항목 연구", 정보보호학회논문지, 25(5), pp.1293~1314 (2015), 한국정보보호학회[DOI]
- Public-Private Partnership for Critical Infrastructure Protection, "UP KRITIS", ~ (2014)