품질과 비용을 고려한 프로세스 기반의 보안공학방법론에 관한 연구

A Study on a Security Engineering Methodology for Information Security Systems Considering Quality and Cost

For reliability and confidentiality of information security systems, the security engineering methodologies are accepted in many organizations. To improve the effectiveness of security engineering, this paper suggests a security methodology ISEM, which considers both product assurance and production processes, takes advantages in terms of quality and cost. To verify the effectiveness of ISEM, this paper introduces the concepts of quality loss, and compares the development costs and quality losses between ISEM and CC through the development of VPN system.