포괄적 IT 자산관리의 자동화에 관한 연구

• 영문명: Study on Automation of Comprehensive IT Asset Management
• 발행기관: 한국IT서비스학회
• 저자명: 황원섭(Wonseop Hwang) 민대환(Daihwan Min) 김정환(Junghwan Kim) 이한진(Hanjin Lee)
• 간행물 정보: 『한국IT서비스학회지』제23권 제1호, 1~10쪽, 전체 10쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2024.02.28

영문 초록

The IT environment is changing due to the acceleration of digital transformation in enterprises and organizations. This expansion of the digital space makes centralized cybersecurity controls more difficult. For this reason, cyberattacks are increasing in frequency and severity and are becoming more sophisticated, such as ransomware and digital supply chain attacks. Even in large organizations with numerous security personnel and systems, security incidents continue to occur due to unmanaged and unknown threats and vulnerabilities to IT assets. It’s time to move beyond the current focus on detecting and responding to security threats to managing the full range of cyber risks. This requires the implementation of asset Inventory for comprehensive management by collecting and integrating all IT assets of the enterprise and organization in a wide range. IT Asset Management(ITAM) systems exist to identify and manage various assets from a financial and administrative perspective. However, the asset information managed in this way is not complete, and there are problems with duplication of data. Also, it is insufficient to update of data-set, including Network Infrastructure, Active Directory, Virtualization Management, and Cloud Platforms. In this study, we, the researcher group propose a new framework for automated 'Comprehensive IT Asset Management(CITAM)' required for security operations by designing a process to automatically collect asset data-set. Such as the Hostname, IP, MAC address, Serial, OS, installed software information, last seen time, those are already distributed and stored in operating IT security systems. CITAM framwork could classify them into unique device units through analysis processes in term of aggregation, normalization, deduplication, validation, and integration.

목차

1. 서론

2. IT 자산관리의 개념과 분류

3. IT 자산관리 선행연구 검토

4. 포괄적 IT 자산관리 제안

5. 결론

참고문헌

키워드

IT Asset Management Asset Inventory Automation Cyber Security MITRE CVE