보안경제성 연구동향 분석 = WEIS 발표 논문을 중심으로

국문 초록 (Abstract)

정보보호 침해사고로 인한 피해를 예방하거나 감소시키기 위해 많은 관심과 투자가 검토되고 있지만, 투자, 관리등의 정보보호 의사결정을 경제적으로 합리적으로 하기 위한 연구에 대해서는 국내에 본격적으로 소개되지 않았다. 정보보호의 경제적 의사결정에 대한 연구자들은 보안경제성워크샵(Workshop on the Economics of Information Security, WEIS)을 중심으로 활동하고 있으며, 본 연구는 WEIS에 2002년부터 2014년까지 발표된 논문들의 연구주제와 연구방법을 분석하였다. 연구결과는 국내의 관련 연구 활성화에 도움이 될 수 있고, 기업과 정부의 경제적 정보보호 의사결정에 참고가 될 수 있을 것이다.

다국어 초록 (Multilingual Abstract)

Even though much investment to prevent or mitigate damage from information security breaches have been considered, researches on economically rational information security decision-making such as investment, management, etc. are not introduced in Korea. This study analyzes research themes and methodologies of articles presented at the Workshop on the Economics of Information Security (WEIS) for 2002 - 2014. Results of the study can suggest future research topics for researchers, and help make rational information security decision-making for practitioners.

목차 (Table of Contents)

• 요약
• ABSTRACT
• Ⅰ. 서론
• Ⅱ. 이론적 배경
• Ⅲ. 연구범위 및 연구방법
• Ⅳ. 연구동향 분석결과
• Ⅴ. 결론
• References

참고문헌 (Reference)

1 전효정, "정보보호 분야 직무별 필요 지식 및 기술 분석" 한국경영정보학회 10 (10): 253-267, 2008

2 "Wikipedia"

3 R. Anderson, "Why information security is hard - an economic perspective" 358-365, 2001

4 "WEIS 2014"

5 "WEIS 2013"

6 "WEIS 2012"

7 "WEIS 2011"

8 "WEIS 2010"

9 "WEIS 2009"

10 "WEIS 2008"

11 "WEIS 2007"

12 "WEIS 2006"

13 "WEIS 2005"

14 "WEIS 2004"

15 "WEIS 2003"

16 "WEIS 2002"

17 Maeil Business Newspaper, "Three card companies which disclosed personal information would make a loss of over 160billion"

18 R. D. Banker, "The evolution of research on information systems : A fiftieth-year survey of the literature in management science" 50 (50): 281-298, 2004

19 R. Anderson, "The economics of information security" 314 (314): 610-613, 2006

20 T. Moore, "The economics of cybersecurity : Principles and policy options" 3 (3): 103-117, 2010

21 Digital Times, "Stock price of credit card companies, 'joy and sorrow'"

22 "Standard Korean Dictionary of The Natio nal Institute of The Korean Language"

23 Korean Bar Newspaper, "Privacy, now when you need to invest"

24 F. Belanger, "Privacy in the digital age : A review of information privacy research in information systems" 35 (35): 1017-1042, 2011

25 R. Anderson, "Managing Information Risk and the Economics of Security" Springer US 55-80, 2009

26 E. B. Swanson, "Information systems research thematics : Submissions to a new journal, 1987–1992" 4 (4): 299-330, 1993

27 J. R. Córdoba, "Information systems as a discipline in the making : comparing EJIS and MISQ between 1995 and 2008" 21 (21): 479-495, 2012

28 H. J. Smith, "Information privacy research : An interdisciplinary review" 35 (35): 989-1016, 2011

29 N. Mustafee, "Evolution of IS research based on literature published in two leading IS journals-EJIS and MISQ" 2658-2668, 2011

30 A. Odlyzko, "Economics, psychology, and sociology of security" SpringerBerlin Heidelberg 182-189, 2003

31 T. Moore, "Economics and internet security: A survey of recent analytical, empirical and behavioral research" Harvard University Computer Science Group 2011

32 K. Davies, "Content analysis of research articles in information systems(LIS)journals" 36 (36): 16-28, 2012

33 Ministry of Knowledge Economy, "By 2013, Knowledge Information Security Industry 18 trillion won Market Creation"

34 P. Palvia, "A profile of information systems research published in Information &Management" 44 (44): 1-11, 2007

35 M. Siponen, "A critical assessment of IS security research between 1990-2004" Copenhagen Business School 2007