DSDC-MAC 모델의 구현 시스템 설계 및 정확성 검사 = An Implementation System Design and Correctness Checking of DSDC-MAC Model

다국어 초록 (Multilingual Abstract)

In earlier study, the DSDC (Duties Separation & Data Coloring) -MAC model that applied the separation of duty (SoD) and data-coloring security techniques as a unified policy was provided. For practical use of this model, the implementation system must be designed and the model corrected. To do this, this paper proposes to design an architecture for an implementation system based on the DSDC-MAC model and check the accuracy of this model. First of all, the design for the implementation system identifies the necessary functional modules based on the DSDC-MAC model and structure them into design the architecture. Subsequently, the operating process of how the module-to-module access interactions are made during execution was designed. As a case study, the design of the actual implementation system is shown by applying the proposed architectural model for the MAC model of the HRMS (Human Resources Management System). Next, to verify the accuracy of the model, the model is formalized using the Z language and examined through the Z/EVES tool. This enables the system implementation of the data security access model using the DSDC-MAC model. Furthermore the accuracy of the DSDC-MAC model structure was checked to confirm that the model is correct.

참고문헌 (Reference)

1 조은숙, "협력형 수집및분석 프레임워크 개발을 위한 메타모델과 정형명세" 한국컴퓨터정보학회 24 (24): 85-92, 2019

2 조은숙, "임베디드 시스템의 재사용 프레임워크에 대한 정형명세" 한국정보처리학회 17 (17): 431-442, 2010

3 윤영선, "사이버안전에 대한 국민인식 조사 연구" 한국소프트웨어감정평가학회 15 (15): 87-95, 2019

4 조은숙, "모바일 앱 개발 프로세스 메타모델 설계" 한국산학기술학회 15 (15): 5248-5255, 2014

5 M. Shroff, "Towards formalization of UML class structures" 11-15, 1997

6 M. Saaltink, "The Z/EVES 2.0 users guide, TR-99-5493-06A"

7 J. M. Spivey, "The Z notation-a reference manual" Prentice-Hall 1989

8 S. Pearson, "Taking account of privacy when designing cloud computing services"

9 김현하, "SOA를 위한 모델기반 취약점 분석" 한국소프트웨어감정평가학회 8 (8): 45-51, 2012

10 정현미, "SCADA(Supervisory Control and Data Acquisition)시스템 사이버 보안 통제 지원을 위한 스키마 설계" 한국지식정보기술학회 7 (7): 173-179, 2012

11 N. Elmrabit, "Insider threat risk prediction based on bayesian network" 2020

12 L. Liu, "Insider threat identification using the simultaneous neural learning of multi-source logs" 2019

13 Y. Wang, "Game analysis of access control based on user behavior trust" MDPI 2019 : 2019

14 L. Xue, "Efficient attribute-based encryption with attribute revocation for assured data deletion" 2019

15 Samjong KPMG, "Analyzing domestic cloud adoption issues: Focusing on the policy of major countries" Economic Research Institute

16 C-Y. Song, "A service-oriented cloud modeling method and process" 10 (10): 962-977, 2020

17 C-Y. Song, "A metamodel-based modeling mechanism for hierarchical design in UML" 2003

18 S-B. Lee, "A design of MAC model based on the separation of duties and data coloring : DSDC-MAC" 16 (16): 72-91, 2020

19 송치양, "A Software Modeling Method for Integrating Functional and Security Design" 한국지식정보기술학회 12 (12): 131-155, 2017