주요기반시설 서비스의 안정적 운영을 위한 보안 프레임워크 설계에 관한 연구

• 영문명: A Study on the Security Framework Design for Stable Operation of Critical Infrastructure Service
• 발행기관: 한국IT서비스학회
• 저자명: 이수연(Su yeon Lee) 유지연(Ji yeon Yoo) 임종인(Jong in Lim)
• 간행물 정보: 『한국IT서비스학회지』한국IT서비스학회지 제15권 제4호, 63~72쪽, 전체 10쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2016.12.30

영문 초록

Critical infrastructure has been operating in a closed environment with a completely separate information system and in the private area. However, with the current ICT environment changes due to convergence and open platforms it has increased the threats and risks to critical infrastructure. The importance of cyber security is increasing in the infrastructure control system, such as the outbreak of Ukraine blackout in 2015 by a malicious code called black energy . This thesis aims to recognize the importance and necessity of protecting the critical infrastructure service, designing a security framework reflecting environmental and characteristic changes, and analyzing the management system suitable for a security framework. We also propose a theoretical basis for constructing a new security framework by comparing and analyzing seven international security management system standards, such as NIST 800-82 and IEC 62443-2-1, which are used in the control system. As a result, the environment surrounding critical infrastructure changes with the characteristics of connectivity, openness, and finality was studied, and as a response to this, many scholars and institutions present critical infrastructure security frameworks as cycle enhancement type structures, risk management structures, and management domain expansion structures. In response, the security framework encompassing these structures, CISF (Critical Infrastructure Security Framework), was designed. Additionally, through the security related international standard and criterion analysis, as a newly designed security standard suitable for CISF, IEC 62443-2-1 is reviewed and suggestions are made.

목차

1. 서 론

2. 주요기반시설 보호의 정의 및 관리 체계의 소개

3. 주요기반시설 보호를 위한 프레임 워크 설계

4. 주요기반시설 보호를 위한 국제 표준 및 기준 비교 분석

5. 결 론

References

키워드

CISF(Critical Infrastructure Security Framework) Critical Infrastructure IEC(International Electrotechnical Commission) 62443-2-1 Security Framework