Home > Explore Content > All Issues > Article View
The Integrated Cyber SRM(Security Risk Monitoring) System Based on the Patterns of Cyber Security Charts
Journal of The Korea Society of Computer and Information
Abbr :
JKSCI
2019, 24(11), pp.99-107
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
2019, 24(11), pp.99-107
Publisher : The Korean Society Of Computer And Information
Research Area : Computer Science
-
The "Risk management" and "Security monitoring" activities for cyber security are deeply correlated in that they prepare for future security threats and minimize security incidents. In addition, it is effective to apply a pattern model that visually demonstrates to an administrator the threat to that information asset in both the risk management and the security system areas. Validated pattern models have long-standing "control chart" models in the traditional quality control sector, but lack the use of information systems in cyber risk management and security systems. In this paper, a cyber Security Risk Monitoring (SRM) system that integrates risk management and a security system was designed. The SRM presents a strategy for applying 'security control' using the pattern of 'control charts'. The security measures were integrated with the existing set of standardized security measures, ISMS, NIST SP 800-53 and CC. Using this information, we analyzed the warning trends of the cyber crisis in Korea for four years from 2014 to 2018 and this enables us to establish more flexible security measures in the future.
137 Viewed
Print this page
Download PDF