코로나19 관련 사이버 공격 및 대응현황 분석

• 영문명: An Analysis of Cyber Attacks and Response Cases Related to COVID-19
• 발행기관: 한국IT서비스학회
• 저자명: 이용필(Yongpil Lee) 이동근(Dong-Geun Lee)
• 간행물 정보: 『한국IT서비스학회지』한국IT서비스학회지 제20권 제5호, 119~136쪽, 전체 18쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2021.10.31

영문 초록

Since the global spread of COVID-19, social distancing and untact service implementation have spread rapidly. With the transition to a non-face-to-face environment such as telework and remote classes, cyber security threats have increased, and a lot of cyber compromises have also occurred. In this study, cyber-attacks and response cases related to COVID-19 are summarized in four aspects: cyber fraud, cyber-attacks on companies related to COVID-19 and healthcare sector, cyber-attacks on untact services such as telework, and preparation of untact services security for post-covid 19. After the outbreak of the COVID-19 pandemic, related events such as vaccination information and payment of national disaster aid continued to be used as bait for smishing and phishing. In the aspect of cyber-attacks on companies related to COVID-19 and healthcare sector, we can see that the damage was rapidly increasing as state-supported hackers attack those companies to obtain research results related to the COVID-19, and hackers chose medical institutions as targets with an efficient ransomware attack approach by changing spray and pray strategy to big-game hunting . Companies using untact services such as telework are experiencing cyber breaches due to insufficient security settings, non-installation of security patches, and vulnerabilities in systems constituting untact services such as VPN. In response to these cyber incidents, as a case of cyber fraud countermeasures, security notices to preventing cyber fraud damage to the public was announced, and security guidelines and ransomware countermeasures were provided to organizations related to COVID-19 and medical institutions. In addition, for companies that use and provide untact services, security vulnerability finding and system development environment security inspection service were provided by Government funding programs. We also looked at the differences in the role of the government and the target of security notices between domestic and overseas response cases. Lastly, considering the development of untact services by industry in preparation for post-COVID-19, supply chain security, cloud security, development security, and IoT security were suggested as common security reinforcement measures.

목차

1. 서론

2. 문헌 연구

3. 보안위협 및 침해사고 사례

4. 보안강화 대책 사례 및 향후 제언

5. 결론

키워드

Cyber Incidents Cyber Security Response Covid-19 Post Covid-19 Untact Services Security