Earticle

As interests in security increases, several software development lifecycle considering security have been proposed. Actual results of applying software development lifecycle considering security reduced threats have been reported. But to apply software development lifecycle considering security, requires expertise and experiences. In this paper a secure software development lifecycle applying integrated secure guide is proposed. Secure Guides such as Misuse Case, Security Patterns and Secure Coding are integrated in the proposed method. And then, by applying integrated Secure Guide in each software development phase, the security becomes available in every phase of software development. Since, proposed secure guide provides more security information than available secure guides, software developer can use more security information while they are developing software. As a result, it is expected that developers could consider security more easily when developing software even though developers lacks expertise in security or experience.

디지털 환경에서 보안 메신저는 조직 내 기밀 대화를 처리하는 주요 도구로 자리 잡았다. 그러나 메신저의 보안성만을 채택 근거로 선택할 경우, 실제 업무 사용에서의 불편함이나 개인정보 보호 미흡 등 다양한 문제가 발생할 수 있다. 이에 본 연구는 조직별 메신저 도입 시 보안성·사용성 ·프라이버시 측면을 통합적으로 평가하는 프레임워크를 제안하고, 4가지 주요 보안 메신저(Wickr, Signal, Telegram, DeltaChat)와 카카오톡에 대한 분석 및 평가를 제시한다. 본 연구는 조직별(정부·기업·민간) 메신저 선택 시 보안, 프라이버시, 사용성 간 균형을 고려할 수 있는 우선순위 기반의 실용적 의사결정 기준을 제시한다. 또한 해당 프레임워크는 향후 시스템 도입 및 보안 정책 수립 과정에서 실무적으로 활용될 수 있다.

In the digital environment, secure messengers have become essential tools for handling confidential conversations within organizations. However, choosing a messenger solely on the basis of security can lead to practical issues in real use, including poor usability and insufficient privacy safeguards. To address this, this study proposes a framework that holistically evaluates security, usability, and privacy for organizational adoption, and presents analyses and evaluations of four major secure messengers-Wickr, Signal, Telegram, and Delta Chat-alongside KakaoTalk. The study offers a practical, priority-based decision criterion that enables organizations across government, enterprise, and civil-sector contexts to balance security, privacy, and usability when selecting a messenger. The proposed framework is also intended for practical use in subsequent system procurement and security-policy development.