@article{ART003364218},
author={Gyeongsu Kim and Hyunsu Yoo and Hanjin Lee},
title={Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601},
journal={Journal of The Korea Society of Computer and Information},
issn={1598-849X},
year={2026},
volume={31},
number={7},
pages={107-116}
TY - JOUR
AU - Gyeongsu Kim
AU - Hyunsu Yoo
AU - Hanjin Lee
TI - Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601
JO - Journal of The Korea Society of Computer and Information
PY - 2026
VL - 31
IS - 7
PB - The Korean Society Of Computer And Information
SP - 107
EP - 116
SN - 1598-849X
AB - As financial institutions increasingly adopt hybrid and multi-cloud environments, the complexity of security architecture design has risen due to unclear boundaries and multi-layered data flows. Existing approaches rely heavily on expert experience and manual processes, causing inconsistencies and limited reproducibility. This study proposes a structured and quantitative methodology for deriving security requirements and mapping them to architecture design based on a unified Security Technology Reference Model (STRM) integrating standards such as ITU-T X.805 and X.1601. The model introduces a formalized Security Requirement Code (SEC) data model, a matrix-based mapping structure (Protection Object x Security Function), and a quantitative coverage metric for evaluating completeness. This proposed model improves coverage, reduces omission, and enhances design consistency.
KW - Security Architecture;Cloud Computing;Financial Information Security;Security Technology Reference Model;Regulatory Compliance
DO -
UR -
ER -
Gyeongsu Kim, Hyunsu Yoo and Hanjin Lee. (2026). Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601. Journal of The Korea Society of Computer and Information, 31(7), 107-116.
Gyeongsu Kim, Hyunsu Yoo and Hanjin Lee. 2026, "Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601", Journal of The Korea Society of Computer and Information, vol.31, no.7 pp.107-116.
Gyeongsu Kim, Hyunsu Yoo, Hanjin Lee "Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601" Journal of The Korea Society of Computer and Information 31.7 pp.107-116 (2026) : 107.
Gyeongsu Kim, Hyunsu Yoo, Hanjin Lee. Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601. 2026; 31(7), 107-116.
Gyeongsu Kim, Hyunsu Yoo and Hanjin Lee. "Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601" Journal of The Korea Society of Computer and Information 31, no.7 (2026) : 107-116.
Gyeongsu Kim; Hyunsu Yoo; Hanjin Lee. Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601. Journal of The Korea Society of Computer and Information, 31(7), 107-116.
Gyeongsu Kim; Hyunsu Yoo; Hanjin Lee. Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601. Journal of The Korea Society of Computer and Information. 2026; 31(7) 107-116.
Gyeongsu Kim, Hyunsu Yoo, Hanjin Lee. Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601. 2026; 31(7), 107-116.
Gyeongsu Kim, Hyunsu Yoo and Hanjin Lee. "Research on Quantitative Security Requirements Modeling and STRM-based Architecture Mapping in ITU-T X.805 & X.1601" Journal of The Korea Society of Computer and Information 31, no.7 (2026) : 107-116.
2