font colorredBfont size2ºÏÇÑ »çÀ̹ö°ø°Ý¡¦»ìÀÎÁË Àû¿ë °¡´É ºÏÇÑÀÌ ¡®¿ö³ÊÅ©¶óÀÌ¡¯ »çÀ̹ö °ø°ÝÀ» ÅëÇØ ¿µ±¹ º´¿ø¿¡ ÀÔ¿øÇÑ È¯ÀÚµéÀÇ ¸ñ¼ûÀ» À§ÅÂ·Ó°Ô ¸¸µç µ¥ ´ëÇØ ½ÇÁúÀû ´ë°¡¸¦ Ä¡·Á¾ß ÇÑ´Ù´Â ÁÖÀåÀÌ Á¦±âµÆ´Ù. ¿µ±¹ º¸°Ç½Ã½ºÅÛ ¸¶ºñ·Î »ç¸ÁÇÑ È¯ÀÚ°¡ È®À뵃 °æ¿ì »ìÀÎ ÇøÀÇ·Î ¼ö»ç¸¦ ÁøÇàÇØ¾ß ÇÑ´Ù´Â °ÍÀÌ´Ù. »çÀ̹ö Àü¹®°¡µéÀº ºÏÇÑÀÇ ÇØÅ· ´É·ÂÀ» ¡®ÁßÇÏÀ§±Ç¡¯À¸·Î Æò°¡Çϸ鼭µµ, »ó´ë¹æÀº ¹«¹æºñ »óÅ·Π°ø°Ý ´çÇÒ À§Çè¿¡ ³ëÃâµÅ ÀÖ´Ù°í ¿ì·ÁÇß´Ù. ¾Æ·¡´Â VOA±â»ç ³»¿ëÀÌ´Ù. Àü¹®°¡µéÀº ºÏÇÑÀÇ ¡®¿ö³ÊÅ©¶óÀÌ¡¯ °ø°ÝÀ¸·Î ÀÎÇÑ ÀθíÇÇÇØ °¡´É¼º¿¡ ÁÖ¸ñÇß½À´Ï´Ù. [³ìÃë: ¾Ë·º»ê´õ Ŭ¸²¹ö±× ¿¬±¸¿ø] ¡°In case of Wannacry for instance, we don¡¯t know the exact numbers, but undeniably people died, because 34% of British health care system went offline, which probably led to couple of people to die. ¡° ¾Ë·º»ê´õ Ŭ¸²¹ö±× ÇìÀ̱×Àü·«¿¬±¸¼Ò ¿¬±¸¿øÀº ¡®VOA¡¯¿ÍÀÇ ÀüÈ­ÅëÈ­¿¡¼­ Á¤È®ÇÑ ¼ýÀÚ´Â ¾Ë ¼ö ¾øÁö¸¸ ºÏÇÑÀÇ »çÀ̹ö °ø°Ý ¶§¹®¿¡ ¼ûÁø »ç¶÷ÀÌ ºÐ¸íÈ÷ ÀÖÀ» °ÍÀ̶ó°í ¸»Çß½À´Ï´Ù. ¿ö³ÊÅ©¶óÀÌ °ø°ÝÀ¸·Î ¿µ±¹ÀÇ º¸°Ç ½Ã½ºÅÛ 34%°¡ ¸¶ºñµÆ°í, ÀÌ·Î ÀÎÇØ ¸î ¸íÀº ¼ûÁ³À» °¡´É¼ºÀÌ Å©´Ù´Â ¼³¸íÀÔ´Ï´Ù. Á¦À̽¼ Èú¸® Ä÷³ºñ¾Æ´ëÇб³ ±¹Á¦°ü°è´ëÈ®¿ø »çÀ̹ö ¹®Á¦ ¼±ÀÓ¿¬±¸¿øÀº ¿µ±¹ Á¤ºÎ°¡ ³ª¼­ ±¹¹Îº¸°Ç¼­ºñ½º¿¡ ´ëÇÑ ¿öÅÍÅ©¶óÀÌ °ø°ÝÀ¸·Î ¼ûÁö°Å³ª ´ÙÄ£ ȯÀÚ°¡ ÀÖ¾ú´ÂÁö Á¶»çÇØ¾ß ÇÑ´Ù°í ¹àÇû½À´Ï´Ù. ±×·¯¸é¼­ ºÏÇÑÀ» ÇØÄ» ¹üÁË°¡ ¾Æ´Ñ »ìÀÎ ÇøÀÇ·Î ¼ö»ç¸¦ ½Ç½ÃÇÏ´Â ÀýÂ÷°¡ À̾îÁ®¾ß ÇÑ´Ù°í ÁÖÀåÇß½À´Ï´Ù. ºÏÇÑÀÌ (¿µ±¹ÀÇ) º´¿øµéÀ» °ø°ÝÇѵ¥ ´ëÇØ ´ë°¡¸¦ Ä¡·Á¾ß ÇÑ´Ù´Â °Ì´Ï´Ù. Èú¸® ¿¬±¸¿øÀº »çÀ̹ö °ø°ÝÀº ¹ýÀûÀ¸·Î ó¸®µÅ¾ß ÇÏ°í ±¹Á¦¹ý¿¡ µû¶ó ÀÏÁ¾ÀÇ ÇÑ°è¼±À» ±×¾î¾ß ÇÑ´Ù°í °­Á¶Çß½À´Ï´Ù. Àü¹®°¡µéÀº ±×·¯³ª ºÏÇÑÀÇ »çÀ̹ö °ø°Ý¿¡ ¶È °°Àº »çÀ̹ö °ø°ÝÀ¸·Î ÀÀ¼öÇϱ⿡´Â ÇÑ°è°¡ ¸¹´Ù°í ÁöÀûÇß½À´Ï´Ù. ±Û¸²¹ö±× ¿¬±¸¿øÀº »çÀ̹ö º¸º¹½Ã ¹Ì±¹ÀÇ ±â¼úÀ» ³ëÃâÇÏ°Ô µÇ°í ºÏÇÑ°úÀÇ °¥µîÀ» È®´ë½ÃÅ°´Â ¹®Á¦°¡ ¹ß»ýÇÑ´Ù°í ¸»Çß½À´Ï´Ù. »çÀ̹ö ±â¼úÀº °ø°ÝÀÌ °¡ÇØÁö°í ³­ µÚ ¸ðµÎ¿¡°Ô ¾Ë·ÁÁö´Â ´ÜÁ¡ÀÌ ÀÖ´Ù´Â ¼³¸íÀÔ´Ï´Ù. [³ìÃë: ¾Ë·º»ê´õ Ŭ¸²¹ö±× ¿¬±¸¿ø] ¡°There are plenty of cyber means to retaliate. The problem is A, if you do so, you are giving up the weapon, B, you might just escalate whole things further.¡± Äɳ׽º ±â¾î½º ºÏ´ë¼­¾çÁ¶¾à±â±¸(NATO) »çÀ̹ö¹æ¾îÇù·Â¼¾ÅÍ ´ë»çµµ ¾Õ¼­ ¡®VOA¡¯¿Í ÀÎÅͺ信¼­ ºÏÇÑÀÇ »çÀ̹ö °ø°Ý¿¡ ´ëÇØ ±¹Á¦»çȸ°¡ ´ëÀÀÇÒ ¼ö ÀÖ´Â Á¶Ä¡°¡ ¸¹Áö ¾Ê´Ù°í ÁöÀûÇß½À´Ï´Ù. Àü¹®°¡µéÀº ºÏÇÑÀÇ ÇØÅ· ´É·Â ÀÚü¿¡ ´ëÇؼ­´Â ³ôÀº Á¡¼ö¸¦ ÁÖÁö ¾Ê¾Ò½À´Ï´Ù. Ŭ¸²¹ö±× ¿¬±¸¿øÀº ºÏÇÑÀÇ »çÀ̹ö °ø°Ý ¿ª·®À» ¡°ÁßÇÏÀ§±Ç¡±À¸·Î ±ÔÁ¤Çß½À´Ï´Ù. [³ìÃë: ¾Ë·º»ê´õ Ŭ¸²¹ö±× ¿¬±¸¿ø] ¡°Overall capability of North Korea is medium to low. But the point about cyber is, success of an attack is not usually, dependent on capability of attacker but the incompetence of defender.¡± ´Ù¸¸ »çÀ̹ö °ø°ÝÀÇ ¼º°ø ¿©ºÎ´Â °ø°ÝÇÏ´Â ÃøÀÇ ´É·ÂÀÌ ¾Æ´Ï¶ó ¹æ¾îÇÏ´Â ÃøÀÇ ¹«´É·Â Á¤µµ¿¡ ´Þ·ÁÀÖ´Ù°í ¼³¸íÇß½À´Ï´Ù. ¶Ç °ø°ÝÀÚ´Â ¸¶À½¸¸ ¸ÔÀ¸¸é ¾î¶² °ø°Ýµµ ÇÒ ¼ö ÀÖÀ» Á¤µµ·Î »çÀ̹ö °ø°£ÀÌ Ãë¾àÇÏ´Ù´Â ¹®Á¦µµ ÁöÀûÇß½À´Ï´Ù. ±â¾î½º ´ë»ç´Â ºÏÇÑ ³»ºÎÀÇ ³×Æ®¿öÅ© ¿¬°á¸ÁÀ̳ª Á¤º¸±â¼úÀÇ ³«ÈÄ ½ÇŸ¦ ¼³¸íÇϸ鼭, °ø°ÝÀÚ ÀÔÀå¿¡¼­ ºÏÇÑÀº ¡°½¬¿î »ó´ë¡±¶ó°í ¸»Çß½À´Ï´Ù. [³ìÃë: Äɳ׽º ±â¾î½º ´ë»ç] ¡°North Korea would have quite some limitation given its connectivity and its less experience with IT. As an attacker¡¯s perspective, for west North Korea present a nice target. Because fewer computers fewer nods fewer connected personnel, easy to surveil, block and manipulate.¡± ºÏÇÑ ³»¿¡´Â ÄÄÇ»ÅÍ¿Í Åë½Å¸Áµµ Àû°í Á¢¼ÓÀÚ¼öµµ ¸¹Áö ¾Ê¾Æ ÀÌ¿¡ ´ëÇÑ °¨½Ã¿Í Â÷´Ü, ±³¶õÀÌ ½±°Ô ÀÌ·ïÁú ¼ö ÀÖ´Ù´Â °Ì´Ï´Ù. ±â¾î½º ´ë»ç´Â ¹Ì±¹ÀÌ ¡®¿ö³ÊÅ©¶óÀÌ¡¯ °ø°ÝÀÇ ¹èÈÄ·Î ºÏÇÑÀ» Áö¸ñÇÒ ¼ö ÀÖ¾ú´ø ÀÌÀ¯µµ ºÏÇÑ »çÀ̹ö¸ÁÀÇ ÀÌ °°Àº Ãë¾à¼º ¶§¹®À̶ó°í µ¡ºÙ¿´½À´Ï´Ù. ½ºÆ¼ºì º§·Îºó Ä÷³ºñ¾Æ´ëÇб³ ÄÄÇ»ÅÍ °øÇÐ ±³¼ö´Â ºÏÇÑÀ» ¹èÈÄ·Î Áö¸ñÇÏ´Â µ¥´Â ¿©·¯ ±â¼úÀÌ »ç¿ëµÆ´Ù°í ÀüÇß½À´Ï´Ù. ƯÈ÷ ¹Ì±¹Àº ÀûµéÀÇ (»çÀ̹ö °ü·Ã) ÇൿÀ» ¿À·§µ¿¾È ¿¬±¸ÇÏ°í °ü·Ã ÆÐÅÏÀ» ±¸ÃàÇÏ°í ÀÖ´Ù°í ¸»Çß½À´Ï´Ù. ¶Ç Á¤º¸¸¦ »©³»±â À§ÇØ Ã¸º¸ È°µ¿À» ÁøÇàÇÑ´Ù°í µ¡ºÙ¿´½À´Ï´Ù. Ŭ¸²¹ö±× ¿¬±¸¿ø ¿ª½Ã ¹Ì±¹ÀÌ °úÇÐ ¼ö»ç¸¦ ÅëÇØ °ø°Ý ¹èÈÄ¿¡ ´ëÇÑ ÈùÆ®¸¦ ¾ò´Â´Ù°í ÀüÇß½À´Ï´Ù. [³ìÃë: ¾Ë·º»ê´õ Ŭ¸²¹ö±× ¿¬±¸¿ø] ¡°First is forensic, looking at the code and that give you hints. They will show you what language setting the keyboard had, what kind of coding philosophy they have, sometimes people even forget notes in the code. That is indirect observation.¡± »çÀ̹ö °ø°Ý¿¡ »ç¿ëµÈ Å°º¸µå ¾ð¾î ¼³Á¤, »ç¿ëµÈ ÄÚµù Çü½Ä µî °£Á¢ Á¤º¸¸¦ È®º¸ÇÑ µÚ Ãß°¡·Î øº¸È°µ¿À¸·Î ÀÔ¼öÇÑ ÀڷḦ ºÐ¼®ÇØ ¹èÈĸ¦ ÆľÇÇÑ´Ù´Â ¼³¸íÀÔ´Ï´Ù. Èú¸® ¿¬±¸¿øÀº ¹Ì±¹, ¿µ±¹, ij³ª´Ù, È£ÁÖ, ´ºÁú·£µå°¡ Æ÷ÇÔµÈ Ã¸º¸µ¿¸Í ¡®´Ù¼¸ °³ÀÇ ´«(Five Eyes)¡¯ ±¹°¡ ¸ðµÎ°¡ ºÏÇÑÀ» Áö¸ñÇß´Ù´Â µ¥ ÁÖ¸ñÇß½À´Ï´Ù. Èú¸® ¿¬±¸¿øÀº »ó½Ã·Î Á¤º¸¿Í ¾Èº¸ °ü·Ã »ç¾ÈµéÀ» °øÀ¯ÇÏ´Â ÀÌ 5°³ ±¹°¡µé°ú ÀϺ»ÀÌ ÇÔ²² ºÏÇÑÀ» ƯÁ¤Çß´Ù´Â °ÍÀº ºÐ¼® °á°ú¿¡ È®½ÅÀÌ ÀÖ´Ù´Â ¶æÀ̶ó°í ¹àÇû½À´Ï´Ù. VOA ´º½º ±è¿µ³²ÀÔ´Ï´Ù. VOA(¹Ì±¹ÀÇ ¼Ò¸®) 2017.12.25 12:17