Journal of the Korea Institute of Information and Communication Engineering (한국정보통신학회논문지)

The Korea Institute of Information and Commucation Engineering (한국정보통신학회)
권호 표지
DOI QR코드

DOI QR Code

Web Document Analysis based Personal Information Hazard Classification System

웹 문서 분석 기반 개인정보 위험도 분류 시스템

  • Lee, Hyoungseon (Department of Computer Engineering, Paichai University) ;
  • Lim, Jaedon (Department of Computer Engineering, Paichai University) ;
  • Jung, Hoekyung (Department of Computer Engineering, Paichai University)
  • Received : 2017.12.18
  • Accepted : 2017.12.31
  • Published : 2018.01.31
Download PDF
⟨ Previous Next ⟩

Abstract

Recently, personal information leakage has caused phishing and spam. Previously developed systems focus on preventing personal information leakage. Therefore, there is a problem that the leakage of personal information can not be discriminated if there is already leaked personal information. In this paper, we propose a personal information hazard classification system based on web document analysis that calculates the hazard. The system collects web documents from the Twitter server and checks whether there are any user-entered search terms in the web documents. And we calculate the hazard classification weighting of the personal information leaked in the web documents and confirm the authority of the Twitter account that distributed the personal information. Based on this, the hazard can be derived and the user can be informed of the leakage of personal information of the web document.

최근 개인정보 유출로 인해 피싱이나 스팸 등이 발생하고 있다. 기존에 시스템들은 개인정보 유출의 사전 예방에 중점을 두고 있다. 이로 인해 이미 유출된 개인정보가 있을 경우 개인정보 유출판별을 할 수 없는 문제점이 있었다. 이에 본 논문에서는 웹 문서 분석 기반 개인정보 위험도 분류 시스템을 제안한다. 이를 위해 트위터 서버로부터 웹 문서를 수집하고 해당 웹 문서 내에 사용자가 입력한 검색어가 있는지 확인한다. 또한 웹 문서 내에 유출된 개인정보들의 위험도 분류 가중치를 계산하고 개인정보를 유포한 트위터 계정의 권위를 확인한다. 이를 기반으로 위험도를 도출하여 해당 웹 문서의 개인정보 유출여부 판별을 확인할 수 있다.

Keywords

References

  1. J. H. Eom, M. J. Kim, "Effect of Information Security Incident on Outcome of Investment by Type of Investors: Case of Personal Information Leakage Incident," Journal of The Korea Institute of Information Security & Cryptology, vol. 26, no. 2, pp. 463-474, Apr. 2016. https://doi.org/10.13089/JKIISC.2016.26.2.463
  2. Y. H. Kim, I. H. Cho, K. H. Lee, "A Decision-Making Model for Handling Personal Information Using Metadata," Journal of The Korea Institute of Information Security & Cryptology, vol. 26, no. 1, Feb. 2016.
  3. C. S. Lee, Y. H. Kim, "An Analysis of Relationship between Industry Security Education and Capability: Case Centric on Insider Leakage," The Journal of Society for e-Business Studies, vol. 20, no. 2, pp. 27-36, May 2015. https://doi.org/10.7838/jsebs.2015.20.2.027
  4. G. H. Song, and K. S. Shim, "Privacy-Preserving Big Data Publication using MapReduce." Journal of KIISE, pp. 175-177, Oct. 2016.
  5. D. Vatsalan, Z. Sehili, P. Christen, E. Rahm, "Privacy-Preserving Record Linkage for Big Data : Current Approaches and Research Challenges," Privacy-Preserving Record Linkage for Big Data, Feb. 2017.
  6. Y. Li, L. Zhou, H. Zhu, "Privacy-Preserving Location Proof for Securing Large-Scale Database-Driven Cognitive Radio Networks," IEEE Internet of Things Journal, vol. 3. no. 4, pp. 563-571, Apr. 2016. https://doi.org/10.1109/JIOT.2015.2481926
  7. D. W, Park, "Analysis of Mobile Smishing Hacking Trends and Security Measures," Journal of the Korea Institute of Information and Communication Engineering, vol. 19, no. 11, pp. 2615-2622, Nov. 2015. https://doi.org/10.6109/jkiice.2015.19.11.2615