보안이벤트 사이의 상관분석 기법을 이용한 조기위험경보시스템의 설계

Abstract

Looking at the type of security-related information incidents in the recent days most of the accidents are associated with disclosure of personal information. Looking at the cause of the leakage of personal information, there are some cases which are caused by malicious outside hacking, but the proportion of leakage due to mistakes inside the organization or intentional disclosure becomes much higher. In this study, it was attempted to suggest the measures of the early detection of personal information being leaked by insiders who work for organizations and coping with the accident in advance. To this end, user-accessible personal information is classified as assets, the assets were given the importance, and then the correlation between the security events which occurs when the user accesses to personal information. It was tried to describe the implementation plan of the warning alarm system that can early detect abuse and misuse of personal information and the abnormal signs of disclosure and inform the risks to administrators by this.