사물인터넷(IoT) 환경에서의 개인정보 위험 분석 프레임워크

• 영문명: Risk Analysis for Protecting Personal Information in IoT Environments
• 발행기관: 한국IT서비스학회
• 저자명: 이애리(Ae Ri Lee) 김범수(Beom soo Kim) 장재영(Jae young Jang)
• 간행물 정보: 『한국IT서비스학회지』한국IT서비스학회지 제15권 제4호, 41~62쪽, 전체 22쪽
• 주제분류: 경제경영 > 경영학
• 파일형태: PDF
• 발행일자: 2016.12.30

영문 초록

In Internet of Things (IoT) era, more diverse types of information are collected and the environment of information usage, distribution, and processing is changing. Recently, there have been a growing number of cases involving breach and infringement of personal information in IoT services, for examples, including data breach incidents of Web cam service or drone and hacking cases of smart connected car or individual monitoring service. With the evolution of IoT, concerns on personal information protection has become a crucial issue and thus the risk analysis and management method of personal information should be systematically prepared. This study shows risk factors in IoT regarding possible breach of personal information and infringement of privacy. We propose “a risk analysis framework of protecting personal information in IoT environments” consisting of asset (personal information-type and sensitivity) subject to risk, threats of infringement (device, network, and server points), and social impact caused from the privacy incident. To verify this proposed framework, we conducted risk analysis of IoT services (smart communication device, connected car, smart healthcare, smart home, and smart infra) using this framework. Based on the analysis results, we identified the level of risk to personal information in IoT services and suggested measures to protect personal information and appropriately use it.

목차

1. 서 론

2. IoT 활용 분야와 개인정보

3. 개인정보 위험 분석

4. IoT 환경에서의 개인정보 위험분석 프레임워크

5. 신규 프레임워크를 활용한 IoT 위험 분석 결과

6. 결 론

References

Detailed Risk Analysis using Proposed Framework

키워드

IoT Personal Information Personal Data Risk Analysis Privacy Infringement Security