다기능 주변기기에 대한 보호프로파일에 관한 연구

국문 초록 (Abstract)

다기능 주변기기는 원래 이미지 처리 작업을 중심으로 수행하는 장치였지만 팩스 기능이 결합하여 전자화된 이미지 데이터를 전송하는 기능과 네트워크 기능이 추가되어 비약적으로 발전하였다. 또한, 다기능 주변기기는 인터넷 응용, 애플리케이션 확장, 원격 공유, 이미지 처리의 기능이 추가되었다. 하지만 다기능 주변기기는 네트워크 연결로 인한 위협으로 발생하는 데이터 노출 및 도청 등의 보안 취약점이 발생할 수 있다. 따라서 다기능 주변기기에 대한 평가 기준이 필요하지만, 현재는 다기능 주변기기에 대한 공통된 보호프로파일이 존재하지 않아서 제품에 대한 안전성을 평가하는데 구체적인 평가 기준을 적용하지 않아 평가 품질의 균일성을 유지하는 것이 어려웠다. 따라서 본 논문에서는 다기능 주변기기에 대한 위협을 분석하여 안전한 다기능 주변기기를 사용하기 위해서 공통평가기준을 기반으로 다기능 주변기기에 대한 보호프로파일을 개발하였다.

다국어 초록 (Multilingual Abstract)

Multi-functional devices was originally an equipment performing image processing, but function transmitting image data digitized by combining fax function and function of network are added and it was rapidly developed. Also, functions of internet application, application expansion, remote sharing and image treatment were added to multi-functional devices. But, multi-functional devices can cause security vulnerability such as data exposure, eavesdropping, etc. because of the threatening by network connection. Therefore, common criteria of multi-functional devices are necessary, but there is no protection profile for multi-functional devices now. Therefore, concrete standards of evaluation are not applied to evaluate secure for products, so it was difficult to maintain uniformity of evaluation quality. Therefore, this paper developed protection profile for multi-functional devices based on common criteria of evaluation so as to analyze threats of multi-functional devices and use secure multi-functional devices.

목차 (Table of Contents)

• 요약
• ABSTRACT
• I. 서론
• II. 관련 연구
• III. 다기능 주변기기
• IV. 다기능 주변기기를 위한 보호프로파일
• V. 결론
• References

참고문헌 (Reference)

1 "https://www.niap-ccevs.org/ccra/"

2 "http://www.commoncriteriaportal.org/iccc/"

3 "http://www.commoncriteriaportal.org"

4 TOSHIBA, "e-STUDIO 2555c/3055c. 3555c/4555c/5055c/2555cse/3055cse/3555cse /4555cse/5055cse Multifunctional Digita l Systems Security Target"

5 KONICA MINOLTA, "bizhub C554e/bizhub C454e/bizhub C364e/bizhub C284e/bizhub C224e PKI Card System Control Software Security Target"

6 KONICA MINOLTA, "bizhub C253/bizhub C203/ineo+253/ineo+203Control Software Security Target"

7 FUJI XEROX, "Xerox Work Centre 7232/7242 Security Target"

8 FUJI XEROX, "Xerox Multi-Function Device Security Target"

9 FUJI XEROX, "Xerox D136Copier/Printer Security Target"

10 CCRA, "Vision statement for the future direction of the application of the CC and the CCRA"

11 IEEE, "US Government Protection Profile for Hardcopy Devices"

12 National Cyber Security Center, "Software-based Secure USB System Protection Profile"

13 National Cyber Security Center, "Smart Card Open Platform Protection Profile"

14 IPA, "Research Report on the Security of MFPs" 20-32, 2013

15 RICOH, "RICOH MP 1601/1301 Security Target"

16 Xu, L., "Providing Users with Suitable Services of Information Security Engineering Cloud based on ISO/IEC 15408" 321-325, 2013

17 National Cyber Security Center, "Network Intrusion Prevention System Protection Profile"

18 RICOH, "MP C4503/C4503G/C5503/C5503G/C6003G, MP C4503A/C5503A, MP C6003(Ricoh/Savin/Lanier/nashuatec/Re x-Rotary/Gestetner/infotec)Security Ta rget"

19 RICOH, "MP 2001/2501 series Security Target"

20 RICOH, "MP 1601/1301 Security Target"

21 TOSHIBA, "Loops/e-STUDIO306LP Multifunctional Digital Systems Security Target"

22 Hewlett-Packard, "LaserJet Enterprise MFP M525, M725, and M830 Series and Color LaserJet Enterprise MFP M575, M775, and M880 Series Firmware with Jetdirect Inside Security Target"

23 IEEE, "IEEE Standard for a Protection Profile in Operational Environment A"

24 IEEE, "IEEE Standard Protection Profile for Hardcopy Devices in IEEE Std. Operational Environment B"

25 CCRA, "Common Criteria for Information Technology Security Evaluation, Part 3 : Security assurance components"

26 CCRA, "Common Criteria for Information Technology Security Evaluation, Part 2 : Security functional components"

27 CCRA, "Common Criteria for Information Technology Security Evaluation, Part 1 : Introduction and general model"

28 RICOH, "Canon image RUNNER ADVANCE C9200 PRO Series/C7200Series 2600. 1 model Security Target"

29 Canon, "Canon image RUNNER ADVANCE C5200 Series 2600. 1 model Security Target"

30 Cannon, "Canon image RUNNER ADVANCE C2200 Series 2600. 1 model Security Target"

31 Cannon, "Canon image RUNNER ADVANCE 8200 Series 2600. 1 model Security Target"

32 Cannon, "Canon image RUNNER ADVANCE 6200 Series 2600. 1 model Security Target"

33 Taguchi, K., "Aligning security requirements and security assurance using the common criteria" 69-77, 2010