정보보안을 위한 망분리 구축에 대한 연구

초록

Purpose: The purpose of this research paper is to study the mandatory partitioned network regulated by Information Network Act and Financial security’s mandated guidelines for information security. With respect to the physical and logical separation of network approaches, the advantages and disadvantages of those two methods were compared. In addition, by analysing the problems of partitioned network from a theoretical and a realistic of view, the issues about how to construct and to save the cost is proposed. Composition/Logic: This paper consists of four chapters. Chapter 1 describes the background and purpose of the study as research. Chapter 2 is to learn about the cyber attack and the resulting damageand to study the legal regulation of government regarding information security. Chapter 3 is to learn about partitioned network which is mandatory for security and define physical and logical partitioned networks with their advantages and disadvantages. In addition, the economic analysis was through a real case study. Finally, we describe the implications for partitioned network with the conclusions of the study in Chapter 4. Findings: In the case of important government agencies and financial institutions, they enhanced security by constructing physical partitined-network for IT center and logical partitioned-network for other part of network. However, the partitioned-network is difficult to maintain practically and contains a number of problems. Also turned out to be not perfectly in network security and attacked by the latest malware such as APT. Accordingly, this paper propose the network security for intranet and internet should be enhanced with building partitioned-network and the implications of the choice of the type of partitioned-network. Originality/Value: Subjects this study are partitioned-network as a method for network security systems mandatory in many organizations and businesses by the law or regulatory recommendations. However, even in developed countries such as the United States, the research on this subject is almost none and only a few about technical comparison studies in Korea. So, by identifying realistic problems on the partitioned-network, this study suggest a basis for identifying the most appropriate partitioned-network for companies.

키워드