Framework for assessing...(JMIS 2020, 2020.09) > 자유게시판

• 목록

논문명

Framework for assessing responsiveness to personal data breaches based on Capture-the-Flag 

Abstract

​Many state agencies and companies collect personal data for the purpose of providing public services and marketing activities and use it for the benefit and results of the organization. In order to prevent the spread of COVID-19 recently, personal data is being collected to understand the movements of individuals. However, due to the lack of technical and administrative measures and internal controls on collected personal information, errors and leakage of personal data have become a major social issue, and the government is aware of the importance of personal data and is promoting the protection of personal information. However, theory-based training and document-based intrusion prevention training are not effective in improving the capabilities of the privacy officer. This study analyzes the processing steps and types of accidents of personal data managed by the organization and describes measures against personal data leakage and misuse in advance. In particular, using Capture the Flag (CTF) scenarios, an evaluation platform design is proposed to respond to personal data breaches. This design was proposed as a troubleshooting method to apply ISMS-P and ISO29151 indicators to reflect the factors and solutions to personal data operational defects and to make objective measurements.

논문 정보 

Sangik Oh1, Byung-Gyu Kim2, Namje Park1* 

Manuscript received September 09, 2020; Revised September 15, 2020; Accepted September 22, 2020. (ID No. JMIS-20M-09-025)

Corresponding Author (*): Namje Park, 61 Iljudong-ro, Jeju-si, Jeju Special Self-Governing Province, Korea, +82-64-754-4914, namjepark@jejunu.ac.kr

1Dept. of Convergence Information Security, Graduate School, Jeju National University, Jeju, Republic of Korea, raitsu58@jejunu.ac.kr

2Dept. of IT Engineering, Sookmyung Women’s University, Seoul, Republic of Korea, bg.kim@sm.ac.kr

Journal of Multimedia Information System VOL. 7, NO. 3, September 2020 (pp. 215-220): ISSN 2383-7632(Online)

http://doi.org/10.33851/JMIS.2020.7.3.215