|
||
![]() |
![]() ![]()
Àúµµ À̹ø¿¡ ³î·¡¼ °ü¸®ÇÏ´Â ¼¹ö ÀӽðèÁ¤ »ç¿ë±â°£ ¸¸·á½ÃÄѳù´Ù´Â....
|
![]() |
![]() ![]()
I think they want to work it off as a man-made disater.
The source of the link is also chosun.com.... |
![]() |
![]() ![]()
Anyway, I don\'t care what is the reason. What I am really worried about now is
that we can infer with ease that the financial environment will be changed due to this accident. Needless to say that we could hardly get any advantage from this change. |
![]() |
![]() ![]()
Çæ ¤»¤»¤» ºñ¹Ð¹øÈ£°¡ 1 0000 À̶ó´Ï ¤»¤»¤»¤»
|
![]() |
![]() ![]()
In general, such systems are hard to get access itself.
As the access is hard, the complexity of password is not so important in general; just in my thought. |
![]() |
![]() ![]() ±×·¸Áö´Â ¾Ê¾Æ¿ä. È£½ºÆ®/½Ã½ºÅÛ ·¹º§ÀÇ º¸¾È°ú ³×Æ®¿÷ ·¹º§ÀÇ º¸¾È, ±×¸®°í ¹°¸®Àû Á¢±Ù µîµî ¿©·¯°¡Áö Ãà¸é¿¡¼ ¸ðµÎ ¿øÄ¢°ú °¡À̵å¶óÀÎÀ» ¼¼¿ì°í ±×°É ÁýÇàÇØ°¡¾ß Çϴµ¥, Àú·± ¼öÁØÀÇ °èÁ¤°ú ¾ÏÈ£°ü¸®´Â Çб³ ½Ç½À ½Ã½ºÅÛ¿¡¼µµ ±ÝÁöµÇ´Â °ÅÁÒ. ±ÝÀ¶½Ã½ºÅÛÀÌ¸é ´õ ¸»ÇÒ °Íµµ ¾ø±¸¿ä. ÀÌ°Ç Àü¹ÝÀûÀ¸·Î °æ¿µÁøÀÇ ¾Æ¹« »ý°¢ ¾øÀ½ÀÌ Àü»êÆÀÀÌ ±âº»ÀûÀÎ °Íµµ °ËÅäÇغ¼ ½Ã°£°ú ¿©À¯¸¦ ¾È ÁÙ ¸¸Å Ȥ»ç¸¦ ½ÃÅ°°Å³ª, ¾Æ´Ï¸é ÁøÂ¥ ¾Æ¹« °³³ä¾øÀÌ ¿î¿µÇß´Ù°í º¼¼ö ¹Û¿¡¿ä... ±â»ç¸¦ º¸¸é, ±¹È¸¿¡¼ ÁöÀûµÈ ±× °¨»ç º¸°í¼(ÁöÀû»çÇ×±îÁö ´ãÀº)°¡ ½ÇÁ¦·Î ¾÷¹«ÆÀ¿¡°Ô Àü´Þµµ µÇÁö ¾Ê¾Ò´Ù°¡ À̹ø¿¡ ÀÏÅÍÁö¸é¼ Àü´ÞµÇ¾ú´Ù°í ÇÏ´õ±º¿ä. ±â»ç ÀÚü´Â ´Ù¸¥ °÷¿¡¼µµ ³ª¿Â ±¹È¸¿¡¼ Áú¹®°úÁ¤¿¡¼ ³ªÅ¸³ »ç½ÇÀε¥ Á¶¼±¿¡¼ Á¶±Ý ´õ ÀÚ¼¼ÇÏ°Ô ¾ð±ÞµÇ¾ú±â¿¡ Á¶¼±ÀϺ¸ ±â»ç¸¦ ¸µÅ©ÇßÀ» »Ó. ±ÝÀ¶Àü»ê¸ÁÀº ÀÏ¹Ý Àü»ê¸Áº¸´Ù ´õ º¸¾È°ú ÀçÇغ¹±¸°¡ °Á¶µÇ´Â ±¹°¡ 5´ë±â°£¸Á¿¡ ¼ÓÇϴµ¥, Àú·± ¼öÁØÀÇ °ü¸®´Â ¾ÆÁÖ ½É°¢ÇÑ ¹®Á¦°¡ Àִ°ÅÁÒ. ½ÉÁö¾î ´Ù¸¥ ¿Ø¸¸ÇÑ Á¶Á÷¿¡µµ ÀÖ´Â CSO(º¸¾È ÃÖ°í Ã¥ÀÓÀÚ)µµ ³óÇù¿¡´Â ¾ø°í, Àü»ê ¿î¿ëÀ» ´ã´çÇÏ´Â »ç¶÷ÀÌ º¸¾Èü°è±îÁö ´ã´çÇÏ°í, °Ô´Ù°¡ Áã¾îÂ¥µíÀÌ ºýºýÇÏ°Ô ¿î¿µÀ» Çسª°¡´Ï, ¾Æ¹«·¡µµ ÀÏ´Ü µ¹¸®°í º¸ÀÚ, º¸¾ÈÀº °³»Ô À̶ó´Â ½ÄÀÇ »ç°í°¡ Á¶Á÷ Àüü¿¡ ÆÛÁ® ÀÖ¾ú´ø µí... Àú·±½ÄÀ¸·Î °èÁ¤ÀÌ °ü¸®µÇ´Â °æ¿ì´Â ¾÷¹«¸¦ ¼öÇàÇϱâ À§ÇÑ °èÁ¤À» °øµ¿°èÁ¤À¸·Î »ç¿ëÇÏ°í, ±× °èÁ¤°ú ¾ÏÈ£¸¦ ¸¹Àº »ç¶÷µéÀÌ °øÀ¯È÷°¡ À§Çؼ Àú·¸°Ô ÇÑ °Í °°Àºµ¥, °á±¹Àº ±×·¯¸é »ç°í¸¦ Ãĵµ ´©°¡ ÃÆ´ÂÁö¸¦ ¾Ë¼ö¾ø°í, ´ëºÎºÐ Àú·±½ÄÀÇ ºÐ»ê½Ã½ºÅÛ¿¡¼´Â °°Àº °èÁ¤/¾ÏÈ£¸¦ ¼ö¸¹Àº ½Ã½ºÅÛ¿¡ °°ÀÌ »ç¿ëÇÏ´Â °æ¿ì°¡ ´ëºÎºÐÀ̶ó¼, ±×·¡¼ »ç°í°¡ 275°³ÀÇ ½Ã½ºÅÛ¿¡ µ¥ÀÌŸ »èÁ¦°¡ ÀÌ·ç¾îÁö°í, ´Ù¸¥ ½Ã½ºÅÛÀº »ì¾Æ³µ´ø°Ô, ¾Æ¸¶µµ ±× ´Ù¸¥ ½Ã½ºÅÛÀº ±× °øÀ¯°èÁ¤/¾ÏÈ£°¡ ÀÛµ¿ÇÏÁö ¾ÊÀº °ÍÀÌÁö ¾Æ´Ï¾úÀ»±î ÇÏ´Â Á¦ °³ÀÎÀûÀÎ »ý°¢... ¾Æ¹«¸® ³×Æ®¿÷¿¡ ºÐ¸®µÈ µ¶¸³ ½Ã½ºÅÛÀÌ¶óµµ ºñ¹Ð¹øÈ£¸¦ Àú·¸°Ô ´Ü¼øÇÏ°Ô °ü¸®ÇÏ´Â °ÍÀº ½Ã½ºÅÛ °ü¸®ÀÇ ÇÇÇØ¾ß ÇÒ ±âÃÊ»çÇ× ÁßÀÇ ÇϳªÀÔ´Ï´Ù. |
![]() |
![]() ![]()
The main source of this disaster is on the failure of humane security.
I don\'t urge that the password like \'0000, 1\' is desirable. But this artile is glossing over that the main source. I think what is really important is that the most important security policy must stem from humane security, and that they should have improved the treatment of them, if not a red carpet. I think that this article has its own intension to avoid this point what I have said. And in reality, the real accident has happened not from the password, but from the failure of humane security. |
![]() |
![]() ![]()
It might be...
But to me, it is beyond the failure of human security issue. It is more likely caused by executive leadership issue. Because NH Executive group doesn\'t care much about computer system and security, they didn\'t allocate adequate resources for NH computing system. Since NH IT department doesn\'\'t have basic resources, they couldn\'t do much except running the system daily by patching from problem A to problem B. Managing user authentication is very basic for any system admistration or network administration. I don\'t think the guys from NH IT department is so stupid, or doesn\'t know it at all. It seems to me that they had no room to think about the issue from whole systemic viewpoint. They are barely running their system with the assistance from outsourcing company. I think that assumption is justified how NH IT department is handling the issues after this whole system failure. I guess NH IT department had no choice since they have no resource to run the system per other company\'s IT department standard. So I think it is caused by NH executive leadership issue, not by the result of IT department personal misbehaviors. |
![]() |
![]() ![]()
What I indicated \"security policy\" is exactly the same as
what you indicated \"IT mind of executives.\" I don\'t know why you can\'t agree with me. What I can\'t understand is this: This article(writer or editor) and the excutives really want avoid their responsibility. But you are quoting their opinion. Whether the password was \'1\', \'0000\', or \"@#$8dn47gf\" is not so important in this situation. That problem you\'re urging should be dealt with in later after they take the reasonable responsibility about this disater. |
![]() |
![]() ![]()
½½½½ Àü»ê ´ã´çÀÚµé À߸øÀ¸·Î ¸ô¾Æ°¡´Â°Íó·³ º¸À̴µ¥¿ä
ÀºÐ ¸»¾¸Ã³·³ Á¢±Ù ÀÚü°¡ ¹®Á¦¶ó¼ ºñ¹ø ¾È¹Ù²Û°Ç »ç½Ç Å« ¹®Á¦°¡ ¾Æ´Ò¼öµµ ÀÖ½À´Ï´Ù ±Ùµ¥ ±â»çº¸¸é ¸¶Ä¡ ÀÎÅÍ³Ý »çÀÌÆ® ·Î±×ÀÎÇÒ¶§ ºñ¹Ð¹øÈ£¸¦ ¾È¹Ù²Û°Íó·³ ¹¦»çµÇÁÒ |
![]() |
![]() ![]()
Á¦°Ô´Â Àü»ê´ã´çÀÚÀÇ À߸øÀ̶ó±â º¸´Ù´Â °æ¿µÁøÀÌ Ã¥ÀÓÁ®¾ßÇÒ »çÇ×À¸·Î º¸¿©Áý´Ï´Ù. Áï, ȸ»ç ±Ô¸ð¿¡ ¸Â´Â Àü»ê Á¶Á÷°ú ÀηÂÀ» °®ÃßÁö ¾Ê°í, ºñ¿ë Àý°¨¸¸À» °Á¶Çؼ ¿ÜÁÖ ¿ë¿ªÀ» ÁÖ¾ú±â ¶§¹®¿¡ ¹ú¾îÁø »ç°í¶ó°í º¸¿©Áý´Ï´Ù.
Àú·± ½ÄÀ¸·Î °ü¸®µÉ ¼ö ¹Û¿¡ ¾ø´Â ÀÌÀ¯°¡ Á¦ °æÇè¿¡ ÀÇÇÏ¸é ¿ÜÁÖ ¿ë¿ªÀÇ ºñÁßÀÌ Å©°í, °ü¸®ÇؾßÇÒ ½Ã½ºÅÛ¿¡ ºñÇØ ÀηÂÀÌ Àý´ë ºÎÁ·Çϱ⠶§¹®¿¡ º¸¾È¿¡ ½Å°æ¾µ ¿©·ÂÀÌ ¾ø¾î¼ ±×³É ¾÷¹« µ¹¾Æ°¡°Ô Çϱ⵵ ¸ðÀÚ¶ó¼ ¼·Î ÀÛ¾÷ÀÇ ÆíÀǼºÀ» À§Çؼ °£´ÜÇÏ°Ô °èÁ¤°ú ¾ÏÈ£¸¦ ¸¸µé¾î¼ °øÀ¯¸¦ ÇÑ°ÅÁÒ. ¿ÜÁÖ ¿ë¿ªµµ ÀÚÁÖ ¹Ù²î´Â »óȲÀÌ¸é ´õ ¸»ÇÒ °Íµµ ¾øÁÒ. ¾Æ¸¶µµ ³óÇù¿¡¼ º¸¾È ¿¹»êÀ» ÁÙÀÎ ÀÌÀ¯°¡ ¿ÜÁÖ ¿ë¿ªÀÌ IBMÀÌ°í,, IBM ÀÌ ÇÏ´Â °Çµ¥ ¹¹ º¸¾È¿¡ ¹®Á¦°¡ ÀÖ°Ú¾î ÇÏ´Â ½É¸®µµ ÀÖ¾ú°ÚÁÒ. ¹®Á¦´Â ¹æȺ®µµ ¿Ïº®ÇÏÁø ¾Ê´Ù´Â °ÅÁÒ. ±× ºÎºÐµµ ·çÇÁȦÀÌ ÀÖÀ» ¼ö°¡ ÀÖ°í, ¿ìȸÇÏ´Â ¹æ¹ýÀ» ã¾Æ³¾ ¼öµµ ÀÖÀ¸´Ï±î¿ä. ±×·¡¼, º¸¾È/³×Æ®¿÷/½Ã½ºÅÛ ¿î¿ëÇÏ´Â °æ¿ì, ÀÌÁß/»ïÁß/»çÁßÀ¸·Î ÀçÇغ¹±¸ ½Ã½ºÅÛÀ» ºñ·ÔÇؼ º¸¾È ¸ðµ¨À» °ã°ãÀÌ ¸¸µé¾î¼ ´Ù¸¥ °ÍµéÀÌ ¶Õ·Áµµ ¶Ç ´Ù¸¥ °ÍµéÀÌ ¸·À» ¼ö ÀÖ°Ô ¸¸µå´Âµ¥... ½Ã½ºÅÛ °èÁ¤À» Àú·¸°Ô °ü¸®Çϴµ¥, Àü»ê Ã¥ÀÓÀÚ°¡ ³ª¿Í¼ \"ÀÌÁß, »ïÁßÀ¸·Î ¹æȺ®ÀÌ ±¸ÃàµÇ¾î¼ ¶Õ¸±¸®°¡ ¾ø´Ù\"¶ó°í ÇѸ»À» ¾î¶»°Ô ¹ÏÀ» ¼ö°¡ ÀÖ³Ä ÇÏ´Â °ÅÁÒ. ¹æȺ®µµ Àú·¸°Ô ¾î¼³ÇÁ°Ô °ü¸®µÇÁö ¾Ê¾Ò´ÂÁö... Àú·± ¼öÁØÀÇ ºñ¹ø°ü¸®´Â ½Ç¹«ÀÚÀÇ ÀÔÀå¿¡¼´Â °æ¾ÇÇÒ ÀÏÀÔ´Ï´Ù. |
![]() |
![]() ![]()
ÀüÀûÀ¸·Î µ¿ÀÇÇÕ´Ï´Ù
ÃÖ¿ì¼±ÀûÀ¸·Î ºñ¿ëÀý°¨¸¸ ¿ì¼±½ÃÇÑ °æ¿µÁø Ã¥ÀÓÀÌÁÒ Á¦ ¾ê±â´Â ºñ¹ø°ü¸®¸¦ Á¦´ë·Î ¾ÈÇÑ°Ç ¹°·Ð À߸øÀÌÁö¸¸ ±×°Ô ¸ÞÀÎÀº ¾Æ´Ï¶õ°Å¿´½À´Ï´Ù. Àü»ê´ã´çÀڵ鿡°Ô Ã¥ÀÓÀ» µÚÁý¾î ¾º¿ì·Á´Â º¸µµÇàÅ°¡ º¸ÀÌ´Â°Í °°´Ù´Â ¶æÀÌÁÒ. |
![]() |
![]() ![]()
Á¦ °æÇè»óÀ¸·Î º¸¸é, Àü»ê ´ã´çÀÚµéÀÌ Àú·¸°Ô ºÎ½ÇÇÏ°Ô °ü¸®ÇÒ ¼ö ¾ø°Ô °æ¿µÁøµéÀÌ ¸¸µé¾úÀ¸¸é, ±×°Ç °æ¿µÁøÀÌ Ã¥ÀÓÁ®¾ßÇÒ ¹®Á¦ÀÌÁö Àü»ê ´ã´çÀÚ°¡ Ã¥ÀÓÁ®¾ßÇÒ »ç¾ÈÀº ¾Æ´Ï¶ó°í º¾´Ï´Ù.
±×µéÀº ÃÖ¼±À» ´ÙÇß°ÚÁÒ. ¾Æ¸¶µµ ¸ÅÀÏ ¸ÅÀÏ ½Ã½ºÅÛ ¹®Á¦ »ý±ä °Å³ª ¹Ù²î´Â ±ÔÁ¤, »õ·Î¿î »óÇ° °³¹ß µîµîÀ» ¹Ý¿µÇϱâ À§Çؼ º¸¾ÈÀ» ÀüüÀûÀ¸·Î °¨µ¶ÇÏ°í Æú¸®½Ã¸¦ ¼¼¿ì°í, ÇÁ·Î½ÃÁ®¸¦ ÀÛ¼ºÇÏ°í ±×°É ½ÇÁ¦·Î ÁýÇàÇÏ´Â ÀÏ¿¡ ÅõÀÔÇÒ ¿©·ÂÀÌ ¾ø¾ú´ø°ÔÁÒ. ±×·± »óȲ¿¡¼ ¹æȺ®ÀÌ Á¦´ë·Î °ü¸®µÇ¾úÀ»¸®°¡ ¾øÁÒ. Àú°Ç ³óÇù °æ¿µÁø¿¡¼ Àü»ê ¿î¿µÆÀ°ú Àü»ê½Ã¼³À» µ·¸¸ µé¾î°¡´Â ³¶ºñÀûÀÎ ¿ä¼Ò·Î »ý°¢ÇÏ°í ÀÖ¾ú´Ù´Â °É ¹Ý¿µÇÏ´Â µí ÇÕ´Ï´Ù. ¾Æ´Ï¸é Àú·¸°Ô ±âº»ÀûÀÎ °èÁ¤ °ü¸®¸¦ ¸øÇÒ¸®°¡ ¾øÁÒ. ÀÏ´Ü µ¹¸®°í º¸´Â°Ô Áß¿äÇϱ⠶§¹®¿¡ ´Ù¸¥ ¹®Á¦ - °èÁ¤°ü¸®³ª º¸¾È ÅëÁ¦ µî - ´Â ÀÏ´Ü µÞÀüÀ¸·Î ¹Ì·ïµÎ°í ±ÞÇÑ ÀϺÎÅÍ Ã³¸®ÇÏ´Ù º¸´Ï Àú·¸°Ô µÈ°ÅÁÒ. ±×·¯´Ï, Àü»ê»ç°í ÅÍÁö°í ³ª¼ º¹±¸µµ Æò¼Ò¿¡ ±×¿¡ ´ëºñÇÑ ÇÁ·Î½ÃÁ®³ª Ç÷£ÀÌ Á¦´ë·Î ¼ ÀÖÁöµµ ¾Ê°í, ÈƷõµ µÇÁö ¾Ê¾ÒÀ¸´Ï, ¿ì¿ÕÁ¿ÕÇÏ´Â °ÅÁÒ... Á¦°¡ º¸±â¿¡´Â Àú ±â»ç¸¦ º¸°í, ÀÌ°Ç ³óÇù °æ¿µÁøÀÌ ¾ó¸¶³ª Àü»ê ¿î¿µÆÀÀ» Ǫ´ëÁ¢ÇÏ°í ¿¾ÇÇÑ Àοøº¸Ãæ°ú ¿¹»êÀ» ÁÖ¾ú´ÂÁö ´À²¸Á®¼ ±ÛÀ» ¿Ã¸° °Å¿´½À´Ï´Ù. ½ÉÁö¾î´Â °¨»ç °á°ú ÁöÀû ³ª¿Ô´Âµ¥µµ ±× ÁöÀû»çÇ×°ú ½ÃÇà ±Ç°íµµ ½Ç¹«Àڵ鿡°Ô Àü´ÞµÇÁö ¾Ê¾Ò¾ú´Ù´Ï ÇÒ¸»ÀÌ ¾øÁÒ. |
![]() |
![]() ![]()
ºñ¿ëÀý°¨ÇÑ´Ù°í ºñÁ¤±ÔÁ÷°ú ¾Æ¿ô¼Ò½ÌÇÑ °á°úÀÎ°Í °°³×¿ä.
|
|
|
![]() |
![]() | ¡â ÀÌÀü±Û¡ä ´ÙÀ½±Û | ¸ñ·Ïº¸±â | ![]() |
¿ø·¡ Á¶Á÷ÀÌ Å¬¼ö·Ï ½Ã½ºÅÛ °ø¿ë ¾ÆÀ̵ð »ç¿ëÀº ÃÖ¼ÒÇÑÀ¸·Î ÁÙÀÌ°í, °¢°¢ °³ÀΰèÁ¤À» ¹ß±ÞÇϵÇ, ±×°É TACACS/RADIOUS/LDAP µîµîÀ¸·Î ¹¾î¼ »ç¿ëÀÚ µî±Þ Á¦ÇÑ µîµîÀ» ½ÃÇàÇÏ°í, ¶ÇÇÑ ±× »ç¿ëÀÚ°¡ ¾î¶² ¸í·É¾î¸¦ ¼öÇàÇÏ¿´³ª µîµîÀ» ´Ù ±â·ÏÀ» ³²±â°Ô µÇ¾î ÀÖÀ½.
Single Sign On ½Ã½ºÅÛÀÌ ±×·± ´ÜÁ¡À» ±Øº¹Çϱâ À§Çؼ ¼Ò°³ µÈÁö ÇÑÂü µÈ °É·Î ¾Í.
¾Æ´Ï¸é, ´ëºÎºÐ °°Àº ¾ÏÈ£¸¦ »ç¿ëÇϸé, Àá½Ã ÆÄ°ß ³ª¿Â ÀÓ½ÃÁ÷µµ °ÅÀÇ Àü ½Ã½ºÅÛÀ» ½Ã½ºÅÛ °èÁ¤À¸·Î Á¢±ÙÇÒ ¼ö ÀÖ´Ù´Â °Çµ¥, ÀÌ°Ç º¸¾È¿¡¼ ÃÖ¼ÒÇÑÀÇ »ç¿ëÀÚ ÅëÁ¦µµ ÀÌ·ç¾îÁöÁö ¾ÊÀº ÀüÇüÀûÀÎ ½ÇÆÐÄÉÀ̽º...