Security
Overview
Security is the totality of technical, managerial, and institutional activities aimed at protecting information, assets, systems, and people from threats. As digital transformation spreads, responses centered on network perimeters alone are no longer sufficient, and a multi-layered security system covering data, identity, and the supply chain is required. Today, security is not a single task for the IT department but a core capability across organizational management and everyday life.
Key Topics
Basic Principles of Information Security
Information security takes confidentiality, integrity, and availability as its core objectives. Confidentiality ensures that only authorized subjects can access information, integrity ensures that data has not been tampered with, and availability means that systems and information can be used when needed. Attributes such as accountability, non-repudiation, and reliability are sometimes added. Security policies are established based on risk assessment in the order of asset identification, vulnerability analysis, threat modeling, and selection of controls.
Types of Threats
Cyber threats are diverse, including malware, ransomware, phishing, social engineering, supply chain attacks, denial-of-service attacks, and insider threats. Recently, sophisticated phishing using generative AI, deepfake fraud, intrusions targeting cloud configuration errors, and attacks that implant malicious code in the software supply chain have been increasing. Threats are evolving into advanced persistent threat forms that combine multiple stages rather than a single technique, and the speed of detection and response determines the scale of damage.
Security Architecture and Zero Trust
Traditional perimeter security was a model that trusted the internal network through firewalls and VPNs. However, as remote work and cloud adoption have made perimeters disappear, Zero Trust has drawn attention. Zero Trust is the principle of trusting no one by default and continuously verifying all access. It evaluates user identity, device status, location, and behavioral context to grant least privilege, and combines microsegmentation with continuous monitoring. This requires a design that considers user experience and security together.
Cryptography and Authentication
Cryptographic technology is the foundation of data protection. Symmetric-key cryptography, public-key cryptography, hash functions, digital signatures, and key exchange protocols support secure communication and storage. In authentication, the use of passwords alone is decreasing, and multi-factor authentication, biometric authentication, and passkeys are spreading. For passwords, length and prohibition of reuse are important, and organizations must systematize privilege management, account lifecycle management, and protection of privileged accounts.
Cloud and Supply Chain Security
Cloud security begins with understanding the shared responsibility model. Service providers and users have different scopes of responsibility, and configuration errors and excessive privileges are major risks. Supply chain security extends the trust system to software components, open-source libraries, outsourced development, and hardware procurement. Software Bills of Materials (SBOM), code signing, and build pipeline integrity verification are becoming important.
Privacy Protection and Governance
Security and privacy protection overlap but are not the same. Privacy protection focuses on ensuring legal requirements and the rights of data subjects throughout the entire process of collection, use, storage, and destruction. Organizations must combine data classification, minimal collection, retention period management, pseudonymization and anonymization, access control, and encryption. On the governance side, responsibility of top management, security policies and guidelines, education and training, incident response systems, and third-party risk management are needed.
Incident Response and Resilience
Since security incidents cannot be prevented by prevention alone, a cyclical system of detection, response, recovery, and learning is needed. Security operations centers monitor logs and alerts, and incident response plans include roles and contact systems, evidence preservation, and legal reporting obligations. Backup and recovery exercises, business continuity plans, and review of cyber insurance also increase resilience. After the fact, root causes must be analyzed and measures to prevent recurrence must be prepared.
Latest Trends
The security environment in 2024-2025 is summarized by three axes: AI, regulation, and supply chain risk. Generative AI is used for security operations automation and threat detection, but at the same time it creates new challenges such as deepfakes, automated attacks, and protection of models, prompts, and training data. Countries are strengthening regulations on critical infrastructure, supply chains, and personal information, and the adoption of Zero Trust and passkeys, cloud security configuration management, and SBOM-based supply chain verification are spreading as practical standards. In addition, security is moving toward Secure by Design and DevSecOps, which reflect security in design from the early stages of development.
Related Topics
- [[정보보안]]
- [[사이버보안]]
- [[제로트러스트]]
- [[개인정보 보호]]
- [[클라우드 보안]]
- [[공급망 보안]]
- [[암호학]]