Search

As the number of social media users is being higher, many people are sharing various opinions andeach country’s real-time situation by online. Also, the influence of online information is increasingto such an extent that the individual’s actual behavior or situation can be estimated. In this situation,researches to analyze through social media are being actively carried out in order to identify problemsin real life. In this research, we proved that we can infer actual behavior or situation based onindividual social media activities. This research focused on the Twitter platform that is actively usedto express individual emotions in social media platforms. We analyzed tweets of Donald Trump andHillary Clinton who were the 45th presidential candidates of the United States of America. Severalmethodologies like sentiment analysis, topic modeling, and machine learning were used to provecorrelation between Donald Trump’s tweets and his behavior. Through experiment, it proved notonly we can adjust classification and clustering algorithms but also Decision Tree was the most accuratealgorithm. Finally, we proposed the possibility of applying the above method to a system fordetecting anomaly symptoms by concentrating on negative messages. It is expected to provide socialmedia users with sufficient awareness of online activities.

As the penetration rate of smart mobile devices has increased, threats targeting the Android platform, which accounts for the majority of mobile operating systems, have increased. As a typical example, a fake Korea Financial Supervisory Service application(app) appeared at the end of 2017. When users installed this app and called the Financial Supervisory Service, there was a case of fake loan consultation, which resulted in financial loss and leakage of personal information. There have been a variety of malicious apps targeting mobile devices. As a result, it became necessary to detect the risks to such malicious apps and to make decisions about the apps. In this paper, we created a model to evaluate the risk of apps in Android and define the characteristics of each element. In addition, the risk from the model is used to make a risk map for decision making using unsupervised algorithms. To make the risk map in this paper uses the data of 2970 apps that is malicious or benign. As a result of the experiment, some of the benign apps were classified as very high risk. They had a lot of high-risk permissions, and there was a need for users to be careful. The results of this study can help users know the exact risk of Android apps and help detect unknown malicious apps.

The importance of information security has increased gradually. Initially, the notion of information security was limited to only a few areas. Now, it has expanded to cover a variety of areas. For example, critical infrastructure facilities such as power plants are operated online using industrial control systems so that the facilities are exposed to cyber threats. This is also the case with the other fields that are operated online. Each field requires appropriate information security management. Thus, this paper proposes an advanced security measurement system that reflects the characteristics of each field to achieve effective information security management.

As cyber attacks on national critical infrastructure have increased, researches are actively conducted to protect industrial control systems(ICS). Compared with existing IT systems, research on special attributes of ICS has been performed mainly, and based on this, many security requirements for ICSs have been derived. However, there is insufficient research on security control to understand and improve the security status of target ICS. To the best of our knowledge, only a comprehensive guide to applying existing security controls to ICSs is being presented. Therefore, this study suggests implications for the current security control items from the ICS point of view. For this purpose, each viewpoint for categorizing and analyzing information security control items was established and based on this, an integrated matrix of ICS security control was derived. Through the ICS security control matrix, the information security control items currently being guided are analyzed from the viewpoint of the ICS, and the present status and implications are derived. The findings can be used as an indicator to effectively apply appropriate controls to appropriate locations where security is required. It is also expected to be a useful reference for improving and supplementing security control items currently being used and used.

Nowadays, as IT becomes a key element in most business models, it is very important for countries and corporations to create effective business / IT value from IT-related investments. To do so, the process and structure for business / IT value creation must be designed appropriately for the organization's goals and context. For this, the IT governance models that organizations can use typically include COBIT(Control Objectives for Information and Related Technologies) 5, ITIL (IT Infrastructure Library), and TOGAF (The Open Group Architecture Framework). This research helps to use the COBIT 5 Goals Cascade when companies use COBIT 5 to design processes for business / IT value creation. The COBIT 5 Goals Cascade is a mechanism that translates the needs of stakeholders into actionable and customized enterprise goals, IT-related goals and enabler goals. However, this mechanism does not give priority to what goals should be prioritized. According to the COBIT 5 Enterprise Goals to IT-related Goals Mapping table, multiple IT-related goals must be fulfilled to achieve a single enterprise goal. As a result, the IT-related goals for some enterprise goals will be much larger, confusing which goals should be undertaken. To contribute to this problem, this research presents a prioritized methodology that determines the IT-related goals that are more relevant to the organization's goals in realizing IT-related goals. This prioritization methodology is based on the AHP(Analytic Hierarchy Process) using the 'Balanced Scorecard' and 'Governance Objectives' as indicators.

Industrial control systems (ICS) are computer-controlled systems that monitor and control industrial processes that exist in the physical world. ICS monitors and controls the national infrastructure or industrial process including transportation facilities, water treatment and distribution, electrical power transmission and distribution, and gas pipelines. If a SCADA system is stationary, disaster is inevitable. But, many ICSes were not built to withstand security incidents, such as accidental cyber-related incidents, DoS attacks, and malware infiltrations. Vulnerability of ICS information system becomes clear, security evaluation of the system began to be implemented. Security evaluation for ICS information system has been implemented for all areas, it is performed without considering the characteristics of each field. Control to be applied to all areas, all the same, but the importance of the control is different. This paper has offered the reader a correlation analysis approach which will allow them to grade importance their defensive efforts. Once a prioritized list has been created, a risk management approach to addressing system vulnerabilities may occur. Furthermore, this result based on real data of power generation companies.

Starting with the discovery of Stuxnet SCADA systems have been the target of cyber threats. Original SCADA system is operating in closed-independent structure is safe from outside attacks, but by the development of IT industry With the advent of the Internet as a connection point is always exposed to hacking threats. As a result, if cyber attacks occur in the SCADA system as a national major economic and social problems will occur. So in this study, Accurate and concise risk calculation propose. And this formula is can be that indicator of new system's efficiency

Initially, the field only dealt with sensitive security information. However, as operations on cyber space increases, the need for security in internet also increased. Thus, areas that requires security assessment also increased. But, to date, a security evaluation for each area is performed partially. Since security assessment does not reflect the characteristics of each area, the correct security level is difficult to determine. Therefore, new security indicator is required for the effective and efficient management. In this paper, we provide an advanced security assessment using edited indicators and common indicators.