ScholarWorks@숙명여자대학교

초록

This paper proposes an integrated governance model of ISAC⋅ISAO and CERT⋅CSIRT to proactively respond to cyber threats that are rapidly becoming intelligent and automated in the era of artificial intelligence and to strengthen the resilience of the defense industry. The proposed model combines multi-layered convergence analysis of industry-specific (defense ISAC) and subject-specific (ISAO) intelligence and centralization through national CERT, with the core of grading and metadata tagging according to information sensitivity, encryption/access control and automatic compliance inspection modules by grade. In addition, the automated cycle of detection, verification, and teaching is organized through the isolation verification infrastructure including air-gapped test labs, digital twins, and automated Red Team/BAS and the standardized post-motem feedback process. In addition, it also presents organizational and operational plans including legal frames (standardized MOU and export control linkage), trust-based trust circuits, incentives for private participation and sharing roles and responsibilities.

키워드