Analysis of the Curriculum of Departments of Information Security in Universities and Comparison with Industrial Needs in Korea

Transcription

1 Journal of Industrial Intelligent Information Vol, o, September 0 Analysis of the Curriculum of Departments of Information in Universities Comparison with Industrial eeds in Korea Min-Jeong Kim, Haeni Lee, Shin-Jeong Song, Jinho Yoo Sangmyung, Seoul, Korea {koreaminjeong, ksnn00}@gmailcom; {songforsong, jhyoo}@smuackr Research Center), private educational institution, KISA etc So this paper investigates the curriculum of information security in Universities of Korea then compare with Industrial needs of information security by using SPSS Through this analysis, we will be discussed a way to compensate for the lack of the curriculum Abstract These days cyber attacks are increasing all over the world, the national critical infrastructure information network protection have become important For this reason, the concentrated investment in information security bringing-up professional human resource are essential, but there is a shortage of information security workforce in Korea Currently, departments of information security in Universities make efforts to bring up human resource of information security On the other h they have an increasing interest in the curriculum design of information security So this paper investigates the curriculum of information security in Universities of Korea, then compare with industrial needs of information security Through this analysis, we will get implications about curriculum design of information security II Information security curriculum related study began in earnest in the late 0s Starting with Chul Kim (00) []'s study about information security curriculum development of Universities, Jeong-Mo Yang (00) [], Tae Sung Kim et al (00) [], Hyeon-Mi Rha (00) [], Jung-Duk Kim Tae-suk Baek (0) [] are representative Chul Kim (00) studied that dealt with general methodology of curriculum development in the field of education, characteristics of Korea international information security curriculum Also Undergraduate graduate information security education curriculum model is proposed [] And major in undergraduates Law,, Administration Computer science, Engineering Electrical Engineering Communication Engineering Mathematics, Physics suggested by classified [] Jeong-Mo Yang (00), the new exped information security-related departments in four-year major Universities the curriculum are classified to Mathematics group Electronic Communications group Computer Engineering group related field combined others [] And based on this, he suggested the curriculum model of the future for the field of information security [] Tae Sung Kim et al (00) analyzed the information security education institution with The Korea Education Development Institute for Statistical Yearbook of Education, classified with Colleges, four-year, Master Degree, Doctor Degree [] Then expected to supply the information security workforce after graduation using the students data of related department [] Hyeon-Mi Rha (00), in case of Korea, each professors are leading curriculum development operation [] So she pointed out exist Index Terms information security, curriculum of information security, industrial needs of information security I ITRODUCTIO Last March 0, computer networks of the key broadcasters banks in Korea were completely paralyzed in what appears to be cyber attacks And June, the websites modulation of South Korea s presidential office, the ruling party major media companies DDoS attack was turned out to be the work of orth Korea Cyber attacks are becoming larger security threats in the country while the national critical infrastructure information depending on network The type of information breach is becoming advanced diversification Due to these things cybercrime such as Hacking, Malware Code, DDoS is directly related to national security For this reason, the concentrated investment in information security professional human resource are urgent However, according to Korea Internet & Agency (KISA) conducted in The 0 Survey Analysis of Information Workforce Supply Dem Outlook, lacking human resource of information security industry is, in 0, as many as,0 people will be shortage in 0 [] Training institutions for lack of manpower are Universities Graduate Schools, ITRC (Information Technology Manuscript received October, 0; revised April, 0 doi: 00/jiii- RELATED WORKS

2 Journal of Industrial Intelligent Information Vol, o, September 0 not information security curriculum organization operating [] In addition, she found that these curriculum of Korea America curriculum developed in ational level collaboration with industry are difference [] Jung-Duk Kim Tae-suk Baek (0) say that information security professional supply of Universities is regional disparity, information security professional new supply is not enough to new dem [] III TABLE I Subject Categorization Programing Computing Communication etwork Attack (Hacking, Malware, etc) Information Theory Mathematics Cryptograph Law Policy Other Total Group Technology Engineering AALYSIS OF IFORMATIO SECURITY CURRICULUM Currently, departments of information security have been established in College,, Cyber Graduate School or in computer engineering department Technical Theory Policy A Analysis based on the Curriculum According to status of manpower by the regular curriculum in 0 ational Information White Paper(KISA), as of 0, 0 departments of information security have been established in Universities [] Universities surveyed based on 0 ational Information White Paper (KISA) new departments of 0 were selected Finally Universities that public can read the curriculum were surveyed Other B Analysis of the Curriculum in Universities The target of analysis is Universities (Konyang Univ [], Kyonggi Univ [], Kyungdong Univ [0], Korea Univ [], Gwangju Univ [], Far East Univ [], Daejeon Univ [], Tongmyong Univ [], SoonChunHyang Univ [], Youngdong Univ [], Joongbu Univ [], Hoseo Univ [], Howon Univ [0], Seoul Women s Univ [], Seonam Univ [], Baekseok Univ [], Ajou Univ [], Mokpo Univ []) departments Subject Subject Categorization: This paper divided the curriculum of each into category with reference Min-Jeong Kim et al (0) [] Programing Computing Communication etwork Database Attack(Hacking, Malware, etc) Information Theory Mathematics Cryptograph ⑪ Law Policy ⑫ Other And re-classified into four groups - Technology Engineering Technical Theory Institution Other [] The Programming Computing of entire information security department curriculum were the highest proportion (%) Table I In addition, the Technology Engineering made up 0% of the curriculum, adding the Technology Theory was % occupied On the other h, the Institution was lower than Other, as a result the proportion was lowest AALYSIS OF THE CURRICULUM I UIVERSITY Frequency Rate (%) Position of Universities of Information Department: In this paper, position of department of information security in each was investigated If position is not clear, separately summarized on the basis of Degree Table II % of all is the Engineering If adding the atural Science, % of all is in the Science Engineering Only one department is in the Humanities Social TABLE II CLASSIFICATIO ACCORDIG TO POSITIO OF THE DEPARTMET OF IFORMATIO SECURITY Position umber Rate (%) Engineering atural Science Humanities Social Total 00 IV SURVEY RESULTS A Survey a Information Professionals in the eeds knowledge of industry was investigated targeting currently security personnel Survey lists were written by reference to Knowledge Technology presented by Tae Sung Kim (00) [] curriculum of information security departments It is separated by kind of security-related knowledge skills, used a -point scale according to the level of needed B Statistical Analysis Using SPSS This paper analyzed the survey using SPSS After factor analysis about survey, through computing each classified mean value was calculated executed nonparametric correlation analysis between Universities curriculum survey result

3 Journal of Industrial Intelligent Information Vol, o, September 0 This paper used the Spearman rank-order correlation coefficient the Kendall s tau for non-parametric correlation coefficient The Spearman rank-order TABLE VI RAK OF THE IDUSTRY EEDS Rank Subject Categorization 0 Communication etwork Information Theory Programing Computing Attack (Hacking, Malware, etc) Law Policy Mathematics Cryptograph correlation coefficient is - rs, closer to determined the ranking is similarly, closer to - determined the ranking method is opposition [] So if ranking is matched completely, the value is, if ranking is opposition completely, the value is - [] Kendall s tau τ is calculated from statistics, it is showed how is consistence the order in ranking a series [] TABLE III SURVEY SUBJECT Man Women Research Reply The results of non-parametric correlation analysis, Kendall s tau between Universities curriculum needs knowledge of industry is TABLE IV IDUSTRY EEDS - P OIT SCALE MEA VALUE Subject Categorization Programing Computing Communication etwork Attack (Hacking, Malware, etc) Knowledge (Survey list) 0 Information Theory -point scale mean τ = 0 ( = 0) mean And Spearman rank-order correlation coefficient is 00 rs = 0 ( = 0) Therefore the correlation between curriculums eeds is not statistically significant In other words, there are significant difference between curriculum needs TABLE VII COMPARISO UIVERSITIES CURRICULUM AD EEDS OF IDUSTRY 0 0 Mathematics Cryptograph Law Policy 0 0 Kendall s tau Spearman s rho Universities curriculum needs knowledge of industry rank is in Table V, Table VI TABLE V Rank 0 RAK OF THE CURRICULUM Subject Categorization Programing Computing Communication etwork Mathematics Cryptograph Information Theory Attack (Hacking, Malware, etc) Law Policy V RESULT AD COCLUSIO Results Discussion include the following: The curriculums of information security departments in Universities of Korea focus on the Technology Engineering There is a big deviation in Universities between subjects related with Technology

4 Journal of Industrial Intelligent Information Vol, o, September 0 Most of the departments of information security belong to Engineering There are significant difference between curriculum needs To show direction for more information security manpower in the future, this work has investigated the following three research issues First, administrative process like a management or system of information security is needed to replenish Due to the fact that most of the departments of information security are part of the Engineering, many subjects are weighted Technology Engineering We should recognize that information security is very important not only Technology but also Therefore, replenish of curriculum related with technology management is required It is necessary to deal with processes policy or law in this connection Due to the exist of ISMS(Information System) certification obligation, from now on more dem for manpower are expected to happen in part of information security consulting in Korea Proper balance of subjects between technology management system will lead to significant advances for information security professionals For this reason, enlarge of curriculum related with Institution in Universities is required Second, the Technology Engineering isn't concentrated in several processes Various method the attacks of scale are rising with the progress of cyber space Emphasizing the importance of response to cyber attacks, educational institution to train information security professionals is need to realize that the importance of the curriculum related to cyber attacks Make curriculum better which weighted in existing Programming Computing, Communication etwork is required And it is necessary to open subjects related with,, etc Third, it is necessary to replenish curriculums needed in field work There is a big difference between needs knowledge skills for information security professionals in field work curriculum of information security departments in Universities of Korea as shown in correlation analysis Especially, there is a big difference between Mathematics Cryptograph To reduce the adaptation time for work be immersed in business it is necessary to exp into subjects what correlate with knowledge of industry needed in case information security manpower put into field work In this paper we investigated the curriculum of departments of information security in Universities of Korea As a result, the curriculums of information security in Universities of Korea focus on the Technology Engineering, most of departments of information security are in the Engineering College And there is a big deviation related with subjects of management of technology And to check that the curriculums of information security departments in Universities of Korea are how much coincide with industrial needs of information security, non-parametric statistical analysis are conducted by using SPSS There is a big difference between the curriculum of information security departments in Universities industrial dem of information security So, we should consider not only Technology but also Law Policy etc, when designing curriculum of information security departments in Universities And, we should know Technology subject is too focused to Programming area, so it is need to make various technology subjects What is important is that it is necessary to exp into subjects of high industrial needs Based on this research, we will analysis new established curriculum trace trend of information security curriculum in the future In addition to, we will research about availability satisfaction of information security curriculum carry out analysis about the subjects of information security additionally needed in the company ACKOWLEDGMET This research was supported by the MSIP(Ministry of Science, ICT & Future Planning), Korea, under the "Employment Contract based Master's Degree Program for Information " supervised by the KISA(Korea Internet Agency)(H0--00) REFERECES [] D K Shin (March 0) Information security, now workforce is the first Digital Times [Online] 00 [] C Kim, A study on information security curriculum development at the university, Journal of The Korea Institute of information & Cryptology, vol, pp, pp -, June 00 [] J M Yang, A study on comparative analysis of curriculum of information security department in the university of Korea, Journal of The Korea Institute of Information & Cryptology, vol, no, pp -, April 00 [] T S Kim, J H Kim, M J Kim, Analysis on information security educational institutions with statistical yearbook of education, The Journal of the Korea Information Communications Society, vol, no 0B, pp 0-0, October 00 [] H M Rha, A Study on united stated training stard for information systems security professionals, Korea Research Institute for Vocational Training, 00 [] J D Kim T Baek, A study on essential body of knowledge education certification program for information security professional development, SDPM, The Journal of Digital Policy &, vol, no, pp -, October 0 [] IS, 0 ational Information White Paper, KISA, May 0 [] Konyang Univ Department of Information Homepage [Online] [] Kyonggi Univ Department of Convergence Homepage [Online] 000&orgCd=K000 [0] Kyungdong Univ Department of Information Homepage [Online] [] Korea Univ Department of Computer & Information Science Homepage [Online] [] Gwangju Univ Department of Cyber & Police Homepage [Online]

5 Journal of Industrial Intelligent Information Vol, o, September 0 [] Far East Univ Department of Cyber Homepage [Online] TR_ &menuId=MU_ [] Daejeon Univ Department of Hacking & Homepage [Online] [] Tongmyong Univ Department of Information Homepage [Online] &menuseq=000&confseq=&boardseq=- [] Soon Chun Hyang Univ Department of Information Homepage [Online] [] Youngdong Univ Department of IC Homepage [Online] [] Joongbu Univ Department of Information Homepage [Online] [] Hoseo Univ Department of Information Homepage [Online] [0] Howon Univ Division of Cyber Investigation Police Homepage [Online] [] Seoul Women s Univ Department of Information Homepage [Online] asp [] Seonam Univ Department of Computer & Information Homepage [Online] = [] Baekseok Univ Department of Information Homepage [Online] [] Ajou Univ Department of Information Computer Engineering Homepage [Online] [] Mokpo Univ Department of Information Homepage [Online] [] M J Kim, H Lee, S J Song, J Yoo, A Discussion about the curriculum of department of information security in domestic universities graduate schools, CISC-S, pp, June 0 [] T S Kim, Information Manpower Policy, CBU Press, August 00 [] H J o, Using SPSS research methods statistical analysis, HakHynSa, January 0 [] Education Research Institute Seoul ational, Glossary of Education, HaWooDongSeol, June Min-Jeong Kim received her bachelor's degree in Mathematics at Korea in 00 She is studying Information as a postgraduate at Sangmyung Her research interests include issues related to Information Policy Shin-Jeong Song got a Bachelor of Business Administration at Sangmyung in 0 She is a graduate student at Sangmyung studying Information now Her research interests include issues related to information security Policy Haeni Lee got a Bachelor of Business Administration Cloting&Textile at Sangmyung in 0 She is a graduate student at Sangmyung studying Information now Her research interests are information security policy, security management industrial security Jinho Yoo is a Professor at Sangmyung He received his Ph D in Information from Graduate School of Information at Korea Prior to joining Sangmyung, He worked as Director of Internet Culture Development Department at KISA(Korea Internet Agency) as a principal consultant of CRM data mining at IBM Korea His research interests include issues related to Information Policy