{"id":8678,"date":"2025-06-10T17:20:48","date_gmt":"2025-06-10T08:20:48","guid":{"rendered":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8678"},"modified":"2025-06-10T17:20:50","modified_gmt":"2025-06-10T08:20:50","slug":"%eb%b3%b4%ec%95%88-%ec%bb%b4%ed%94%8c%eb%9d%bc%ec%9d%b4%ec%96%b8%ec%8a%a4-%ec%84%a4%eb%aa%85-%eb%b0%8f-%eb%b9%84%ea%b5%90","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=8678","title":{"rendered":"\ubcf4\uc548 \ucef4\ud50c\ub77c\uc774\uc5b8\uc2a4 \uc124\uba85 \ubc0f \ube44\uad50"},"content":{"rendered":"\n

 <\/p>\n

\ud83d\udccc 1. CVE (Common Vulnerabilities and Exposures)<\/strong><\/span><\/h2>\n
    \n
  • \n

    \ubaa9\uc801:<\/strong> \uc804 \uc138\uacc4\uc801\uc73c\ub85c \ubc1c\uc0dd\ud558\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ucde8\uc57d\uc810\uc5d0 \uace0\uc720 \uc2dd\ubcc4\uc790\ub97c \ubd80\uc5ec\ud558\uc5ec \ucd94\uc801 \uac00\ub2a5\ud558\uac8c \ud568.<\/span><\/p>\n<\/li>\n

  • \n

    \ub0b4\uc6a9:<\/strong> \uac01 CVE \ud56d\ubaa9\uc740 \uace0\uc720\ud55c \ubc88\ud638(CVE-YYYY-NNNNN)\ub97c \uac16\uace0, \ud574\ub2f9 \ucde8\uc57d\uc810\uc758 \uac04\ub7b5\ud55c \uc124\uba85\uacfc \ucc38\uc870 \ub9c1\ud06c \ud3ec\ud568.<\/span><\/p>\n<\/li>\n

  • \n

    \uc6b4\uc601:<\/strong> MITRE Corporation, \ubbf8\uad6d \uad6d\ud1a0\uc548\ubcf4\ubd80(DHS) \ud6c4\uc6d0<\/span><\/p>\n<\/li>\n

  • \n

    \ud65c\uc6a9:<\/strong> \ucde8\uc57d\uc810 \uad00\ub9ac \uc2dc\uc2a4\ud15c, \ubcf4\uc548 \ub3c4\uad6c, \ud328\uce58 \uad00\ub9ac \ub4f1\uc5d0\uc11c \ud575\uc2ec \ucc38\uc870 \uc9c0\ud45c\ub85c \ud65c\uc6a9\ub428<\/span><\/p>\n<\/li>\n<\/ul>\n

    \n

    \ud83d\udccc 2. CWE (Common Weakness Enumeration)<\/strong><\/span><\/h2>\n
      \n
    • \n

      \ubaa9\uc801:<\/strong> \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ubcf4\uc548 \ucde8\uc57d\uc810\uc758 \uc720\ud615\uacfc \uadfc\ubcf8\uc801\uc778 \uc124\uacc4\/\ucf54\ub529 \uacb0\ud568\uc744 \ubd84\ub958<\/span><\/p>\n<\/li>\n

    • \n

      \uc608\uc2dc:<\/strong> CWE-79 (XSS), CWE-89 (SQL Injection)<\/span><\/p>\n<\/li>\n

    • \n

      \uc6b4\uc601:<\/strong> MITRE<\/span><\/p>\n<\/li>\n

    • \n

      \ud2b9\uc9d5:<\/strong> \ucde8\uc57d\uc810\uc758 \ud328\ud134, \uc6d0\uc778, \uc601\ud5a5 \ub4f1\uc744 \uacc4\uce35\uc801 \uad6c\uc870\ub85c \uc124\uba85<\/span><\/p>\n<\/li>\n

    • \n

      \ud65c\uc6a9:<\/strong> \uc815\uc801 \ubd84\uc11d \ub3c4\uad6c, \ubcf4\uc548 \uad50\uc721, \ubcf4\uc548 \uc124\uacc4 \uac00\uc774\ub4dc\uc5d0 \uc0ac\uc6a9<\/span><\/p>\n<\/li>\n<\/ul>\n

      \n

      \ud83d\udccc 3. DISA CC (Control Correlation Identifier)<\/strong><\/span><\/h2>\n
        \n
      • \n

        \ubaa9\uc801:<\/strong> STIG\uc5d0\uc11c \uc815\uc758\ub41c \ubcf4\uc548 \ud1b5\uc81c \ud56d\ubaa9\ub4e4\uc744 \ub2e4\ub978 \ubcf4\uc548 \ud504\ub808\uc784\uc6cc\ud06c(\uc608: NIST SP 800-53 \ub4f1)\uc640 \uc5f0\uacc4 \uac00\ub2a5\ud558\uac8c \ub9e4\ud551<\/span><\/p>\n<\/li>\n

      • \n

        \uc6b4\uc601:<\/strong> \ubbf8\uad6d \uad6d\ubc29 \uc815\ubcf4 \uc2dc\uc2a4\ud15c\uad6d(DISA)<\/span><\/p>\n<\/li>\n

      • \n

        \ud2b9\uc9d5:<\/strong> \ubcf4\uc548 \ud1b5\uc81c \ud56d\ubaa9\ub9c8\ub2e4 \uace0\uc720\ud55c CCI (\uc608: CCI-000213<\/code>) \ubd80\uc5ec → \uc5ec\ub7ec \uae30\uc900\uacfc \ub9e4\ud551 \uac00\ub2a5<\/span><\/p>\n<\/li>\n

      • \n

        \ud65c\uc6a9:<\/strong> STIG \uc790\ub3d9\ud654 \uac80\uc0ac, \uac10\uc0ac, \ud1b5\ud569 \uc815\ucc45 \ud504\ub808\uc784\uc6cc\ud06c \uad6c\ucd95 \uc2dc \uc0ac\uc6a9<\/span><\/p>\n<\/li>\n<\/ul>\n

        \n

        \ud83d\udccc 4. FISMA (Federal Information Security Modernization Act)<\/strong><\/span><\/h2>\n
          \n
        • \n

          \ubaa9\uc801:<\/strong> \ubbf8\uad6d \uc5f0\ubc29 \uc815\ubd80 \uae30\uad00\uc774 \uc815\ubcf4\ubcf4\uc548 \ud504\ub85c\uadf8\ub7a8\uc744 \uac16\ucd94\ub3c4\ub85d \ubc95\uc81c\ud654\ud55c \uc5f0\ubc29\ubc95<\/span><\/p>\n<\/li>\n

        • \n

          \uc694\uad6c\uc0ac\ud56d:<\/strong> \ub9ac\uc2a4\ud06c \uae30\ubc18 \uc811\uadfc, \uc5f0\uac04 \ud3c9\uac00, \ubcf4\uc548 \uad00\ub9ac \ud504\ub808\uc784\uc6cc\ud06c \uad6c\ucd95<\/span><\/p>\n<\/li>\n

        • \n

          \uae30\ubc18 \ud504\ub808\uc784\uc6cc\ud06c:<\/strong> NIST SP 800-53, 800-37 \ub4f1<\/span><\/p>\n<\/li>\n

        • \n

          \ub300\uc0c1:<\/strong> \ubbf8\uad6d \uc5f0\ubc29\uae30\uad00 \ubc0f \uc5f0\ubc29 \uacc4\uc57d \uc5c5\uccb4<\/span><\/p>\n<\/li>\n

        • \n

          \uac15\uc81c\uc131:<\/strong> \u2705 \uac15\uc81c (\ubc95\ub960)<\/span><\/p>\n<\/li>\n<\/ul>\n

          \n

          \ud83d\udccc 5. GDPR (General Data Protection Regulation)<\/strong><\/span><\/h2>\n
            \n
          • \n

            \ubaa9\uc801:<\/strong> \uc720\ub7fd \uc2dc\ubbfc\uc758 \uac1c\uc778\uc815\ubcf4 \ubcf4\ud638 \uac15\ud654 \ubc0f \ub370\uc774\ud130 \uc774\ub3d9 \ud1b5\uc81c<\/span><\/p>\n<\/li>\n

          • \n

            \uc8fc\uc694 \uad8c\ub9ac:<\/strong> \uc54c \uad8c\ub9ac, \uc0ad\uc81c \uc694\uccad\uad8c, \ub370\uc774\ud130 \uc774\uc2dd\uc131 \ub4f1<\/span><\/p>\n<\/li>\n

          • \n

            \uc601\ud5a5:<\/strong> \uc720\ub7fd \uc678 \uae30\uc5c5\uc774\ub77c\ub3c4 EU \uc2dc\ubbfc\uc758 \ub370\uc774\ud130\ub97c \ub2e4\ub8e8\uba74 \uc801\uc6a9<\/span><\/p>\n<\/li>\n

          • \n

            \ubc8c\uce59:<\/strong> \ucd5c\ub300 \uc5f0\ub9e4\ucd9c\uc758 4% \ub610\ub294 2\ucc9c\ub9cc \uc720\ub85c<\/span><\/p>\n<\/li>\n

          • \n

            \uac15\uc81c\uc131:<\/strong> \u2705 \ub9e4\uc6b0 \uac15\uc81c (\ubc95\ub960)<\/span><\/p>\n<\/li>\n<\/ul>\n

            \n

            \ud83d\udccc 6. MISRA (Motor Industry Software Reliability Association)<\/strong><\/span><\/h2>\n
              \n
            • \n

              \ubaa9\uc801:<\/strong> \uc790\ub3d9\ucc28 \ubc0f \uc784\ubca0\ub514\ub4dc \uc2dc\uc2a4\ud15c\uc758 \uc548\uc804\ud55c C\/C++ \ucf54\ub529 \ud45c\uc900<\/strong><\/span><\/p>\n<\/li>\n

            • \n

              \uc8fc\uc694 \ubb38\uc11c:<\/strong> MISRA C:2012, MISRA C++:2008<\/span><\/p>\n<\/li>\n

            • \n

              \ud2b9\uc9d5:<\/strong> \ucf54\ub4dc \ud488\uc9c8 \ud5a5\uc0c1, \ub7f0\ud0c0\uc784 \uc624\ub958 \ubc29\uc9c0, \uc778\uc99d \uae30\ubc18 \uc2dc\uc2a4\ud15c \uc124\uacc4 \uc9c0\uc6d0<\/span><\/p>\n<\/li>\n

            • \n

              \ud65c\uc6a9:<\/strong> \uc790\ub3d9\ucc28, \ud56d\uacf5\uc6b0\uc8fc, \ucca0\ub3c4 \ub4f1\uc758 \uc548\uc804 \ud544\uc218 \uc0b0\uc5c5<\/span><\/p>\n<\/li>\n<\/ul>\n

              \n

              \ud83d\udccc 7. NIST (National Institute of Standards and Technology)<\/strong><\/span><\/h2>\n
                \n
              • \n

                \ubaa9\uc801:<\/strong> \ubbf8\uad6d \uc5f0\ubc29 \uc815\ubd80 \ud45c\uc900, \ud2b9\ud788 \uc0ac\uc774\ubc84 \ubcf4\uc548 \uc815\ucc45 \ud504\ub808\uc784\uc6cc\ud06c \uc81c\uacf5<\/span><\/p>\n<\/li>\n

              • \n

                \uc8fc\uc694 \ubb38\uc11c:<\/strong><\/span><\/p>\n

                  \n
                • \n

                  NIST SP 800-53:<\/strong> \ubcf4\uc548 \ud1b5\uc81c \ud504\ub808\uc784\uc6cc\ud06c<\/span><\/p>\n<\/li>\n

                • \n

                  NIST SP 800-171:<\/strong> \ubbfc\uac04 \uacc4\uc57d\uc5c5\uccb4\uc6a9 \uc815\ubcf4 \ubcf4\ud638 \uc694\uad6c\uc0ac\ud56d<\/span><\/p>\n<\/li>\n

                • \n

                  Cybersecurity Framework (CSF):<\/strong> \ub9ac\uc2a4\ud06c \uae30\ubc18 \ubcf4\uc548 \uad00\ub9ac \uc9c0\uce68<\/span><\/p>\n<\/li>\n<\/ul>\n<\/li>\n

                • \n

                  \uac15\uc81c\uc131:<\/strong> \uc77c\ubd80 \uc0b0\uc5c5\/\uc815\ubd80 \uae30\uad00\uc5d0 \uac15\uc81c, \uc77c\ubc18 \uae30\uc5c5\uc740 \ucc38\uace0\uc6a9<\/span><\/p>\n<\/li>\n<\/ul>\n

                  \n

                  \ud83d\udccc 8. OWASP (Open Web Application Security Project)<\/strong><\/span><\/h2>\n
                    \n
                  • \n

                    \ubaa9\uc801:<\/strong> \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubcf4\uc548 \ud5a5\uc0c1<\/span><\/p>\n<\/li>\n

                  • \n

                    \uc8fc\uc694 \ud504\ub85c\uc81d\ud2b8:<\/strong><\/span><\/p>\n

                      \n
                    • \n

                      OWASP Top 10:<\/strong> \uac00\uc7a5 \ube48\ubc88\ud55c \uc6f9 \ucde8\uc57d\uc810 \ubaa9\ub85d (SQLi, XSS, CSRF \ub4f1)<\/span><\/p>\n<\/li>\n

                    • \n

                      ASVS, SAMM, ZAP \ub4f1<\/span><\/p>\n<\/li>\n<\/ul>\n<\/li>\n

                    • \n

                      \uc6b4\uc601:<\/strong> \ube44\uc601\ub9ac \uad6d\uc81c \ucee4\ubba4\ub2c8\ud2f0<\/span><\/p>\n<\/li>\n

                    • \n

                      \ud65c\uc6a9:<\/strong> \uac1c\ubc1c\uc790 \uad50\uc721, \uc6f9 \ubcf4\uc548 \uc9c4\ub2e8, \ubcf4\uc548 \uc124\uacc4 \uae30\uc900<\/span><\/p>\n<\/li>\n<\/ul>\n

                      \n

                      \ud83d\udccc 9. PCI DSS (Payment Card Industry Data Security Standard)<\/strong><\/span><\/h2>\n
                        \n
                      • \n

                        \ubaa9\uc801:<\/strong> \uc2e0\uc6a9\uce74\ub4dc \uacb0\uc81c \ud658\uacbd\uc5d0\uc11c \uce74\ub4dc \uc815\ubcf4 \ubcf4\ud638<\/span><\/p>\n<\/li>\n

                      • \n

                        \ub300\uc0c1:<\/strong> \uce74\ub4dc \uacb0\uc81c\ub97c \ucc98\ub9ac, \uc800\uc7a5, \uc804\uc1a1\ud558\ub294 \ubaa8\ub4e0 \uae30\uc5c5<\/span><\/p>\n<\/li>\n

                      • \n

                        \uc694\uad6c\uc0ac\ud56d \uc608:<\/strong> \uc554\ud638\ud654, \uc811\uadfc \uc81c\uc5b4, \ub85c\uadf8 \uae30\ub85d \ub4f1<\/span><\/p>\n<\/li>\n

                      • \n

                        \uc6b4\uc601:<\/strong> PCI SSC (Visa, MasterCard \ub4f1 \uce74\ub4dc\uc0ac \uacf5\ub3d9\uccb4)<\/span><\/p>\n<\/li>\n

                      • \n

                        \uac15\uc81c\uc131:<\/strong> \u2705 \uacc4\uc57d\uc0c1 \uac15\uc81c (\uc900\uc218\ud558\uc9c0 \uc54a\uc73c\uba74 \ubc8c\uae08 \ubc0f \uacb0\uc81c \uc911\ub2e8 \uac00\ub2a5)<\/span><\/p>\n<\/li>\n<\/ul>\n

                        \n

                        \ud83d\udccc 10. SANS Institute<\/strong><\/span><\/h2>\n
                          \n
                        • \n

                          \ubaa9\uc801:<\/strong> \uc0ac\uc774\ubc84 \ubcf4\uc548 \uad50\uc721, \uc5f0\uad6c, \uc778\uc99d \uc81c\uacf5<\/span><\/p>\n<\/li>\n

                        • \n

                          \uc8fc\uc694 \ucf58\ud150\uce20:<\/strong><\/span><\/p>\n

                            \n
                          • \n

                            SANS Top 25:<\/strong> CWE \uae30\ubc18\uc758 \uc2ec\uac01\ud55c \uc18c\ud504\ud2b8\uc6e8\uc5b4 \uc624\ub958<\/span><\/p>\n<\/li>\n

                          • \n

                            GIAC \uc778\uc99d \ud504\ub85c\uadf8\ub7a8<\/span><\/p>\n<\/li>\n<\/ul>\n<\/li>\n

                          • \n

                            \ud2b9\uc9d5:<\/strong> \uc2e4\ubb34 \uc911\uc2ec\uc758 \ubcf4\uc548 \uad50\uc721 \uacfc\uc815\uc73c\ub85c \uc720\uba85<\/span><\/p>\n<\/li>\n

                          • \n

                            \ud65c\uc6a9:<\/strong> \ubcf4\uc548 \uc804\ubb38\uac00 \uc591\uc131, \ud604\uc5c5 \ubcf4\uc548 \uc778\uc2dd \uc81c\uace0<\/span><\/p>\n<\/li>\n<\/ul>\n

                            \n

                            \ud83d\udccc 11. STIG (Security Technical Implementation Guide)<\/strong><\/span><\/h2>\n
                              \n
                            • \n

                              \ubaa9\uc801:<\/strong> \ubbf8\uad6d \uad6d\ubc29\ubd80 \uc2dc\uc2a4\ud15c\uc5d0 \ub300\ud55c \uc0c1\uc138\ud55c \ubcf4\uc548 \uc124\uc815 \uc9c0\uce68 \uc81c\uacf5<\/span><\/p>\n<\/li>\n

                            • \n

                              \uc6b4\uc601:<\/strong> DISA<\/span><\/p>\n<\/li>\n

                            • \n

                              \ud3ec\ub9f7:<\/strong> XML, XCCDF \ub4f1 \uc790\ub3d9\ud654 \ub3c4\uad6c \uc5f0\uacc4 \uac00\ub2a5<\/span><\/p>\n<\/li>\n

                            • \n

                              \uc801\uc6a9 \ubc94\uc704:<\/strong> OS, DBMS, \ube0c\ub77c\uc6b0\uc800, \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ub4f1 \uad11\ubc94\uc704<\/span><\/p>\n<\/li>\n

                            • \n

                              \uac15\uc81c\uc131:<\/strong> \u2705 \uad6d\ubc29\uae30\uad00\uc5d0\ub294 \uac15\uc81c<\/span><\/p>\n<\/li>\n<\/ul>\n

                              \n

                              \ud83d\udcca \uc885\ud569 \ube44\uad50 \ud45c<\/span><\/h2>\n
                              \n
                              \n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
                              \ud56d\ubaa9<\/span><\/th>\n\ubaa9\uc801<\/span><\/th>\n\ub300\uc0c1\/\uc801\uc6a9 \ubc94\uc704<\/span><\/th>\n\ubc95\uc801 \uac15\uc81c\uc131<\/span><\/th>\n\uc6b4\uc601\uae30\uad00<\/span><\/th>\n\uc8fc\uc694 \ud65c\uc6a9<\/span><\/th>\n<\/tr>\n<\/thead>\n
                              CVE<\/strong><\/span><\/td>\n\ucde8\uc57d\uc810 \uc2dd\ubcc4<\/span><\/td>\n\uc804\uccb4 SW \ucde8\uc57d\uc810<\/span><\/td>\n\u274c<\/span><\/td>\nMITRE<\/span><\/td>\n\ucde8\uc57d\uc810 \uad00\ub9ac<\/span><\/td>\n<\/tr>\n
                              CWE<\/strong><\/span><\/td>\n\ucde8\uc57d\uc810 \ubd84\ub958<\/span><\/td>\n\ubcf4\uc548 \ubd84\uc11d\/\ucf54\ub529<\/span><\/td>\n\u274c<\/span><\/td>\nMITRE<\/span><\/td>\n\uc815\uc801 \ubd84\uc11d, \uad50\uc721<\/span><\/td>\n<\/tr>\n
                              DISA CC<\/strong><\/span><\/td>\n\ubcf4\uc548 \ud1b5\uc81c \ub9e4\ud551<\/span><\/td>\n\uad6d\ubc29 \ubcf4\uc548 \uae30\uc900<\/span><\/td>\n\u2705 (DoD)<\/span><\/td>\nDISA<\/span><\/td>\nSTIG \ub9e4\ud551<\/span><\/td>\n<\/tr>\n
                              FISMA<\/strong><\/span><\/td>\n\uc815\ubcf4\ubcf4\ud638 \ubc95\uc81c\ud654<\/span><\/td>\n\ubbf8 \uc5f0\ubc29\uae30\uad00<\/span><\/td>\n\u2705<\/span><\/td>\n\ubbf8\uad6d \uc815\ubd80<\/span><\/td>\n\ubcf4\uc548 \uc815\ucc45 \uc218\ub9bd<\/span><\/td>\n<\/tr>\n
                              GDPR<\/strong><\/span><\/td>\n\uac1c\uc778\uc815\ubcf4 \ubcf4\ud638<\/span><\/td>\nEU \uc2dc\ubbfc \uc815\ubcf4<\/span><\/td>\n\u2705<\/span><\/td>\nEU<\/span><\/td>\n\ud504\ub77c\uc774\ubc84\uc2dc \ubcf4\ud638<\/span><\/td>\n<\/tr>\n
                              MISRA<\/strong><\/span><\/td>\n\uc548\uc804\ud55c \ucf54\ub529<\/span><\/td>\n\uc790\ub3d9\ucc28 \ub4f1 \uc0b0\uc5c5<\/span><\/td>\n\u2705 (\uc0b0\uc5c5\ud45c\uc900)<\/span><\/td>\nMISRA \ud611\ud68c<\/span><\/td>\n\uc784\ubca0\ub514\ub4dc \uac1c\ubc1c<\/span><\/td>\n<\/tr>\n
                              NIST<\/strong><\/span><\/td>\n\ubcf4\uc548 \ud504\ub808\uc784\uc6cc\ud06c<\/span><\/td>\n\uc815\ubd80·\uae30\uc5c5<\/span><\/td>\n\uc870\uac74\ubd80 \u2705<\/span><\/td>\nNIST<\/span><\/td>\n\uc815\ucc45\/\ub9ac\uc2a4\ud06c \uad00\ub9ac<\/span><\/td>\n<\/tr>\n
                              OWASP<\/strong><\/span><\/td>\n\uc6f9 \ubcf4\uc548 \uac1c\uc120<\/span><\/td>\n\uac1c\ubc1c\uc790, \ubcf4\uc548\ud300<\/span><\/td>\n\u274c<\/span><\/td>\n\ucee4\ubba4\ub2c8\ud2f0<\/span><\/td>\n\ubcf4\uc548 \uad50\uc721, \uc9c4\ub2e8<\/span><\/td>\n<\/tr>\n
                              PCI DSS<\/strong><\/span><\/td>\n\uce74\ub4dc \uc815\ubcf4 \ubcf4\ud638<\/span><\/td>\n\uce74\ub4dc \uacb0\uc81c \uae30\uc5c5<\/span><\/td>\n\u2705 (\uacc4\uc57d\uc0c1)<\/span><\/td>\nPCI SSC<\/span><\/td>\n\ubcf4\uc548 \uac10\uc0ac, \uc778\uc99d<\/span><\/td>\n<\/tr>\n
                              SANS<\/strong><\/span><\/td>\n\ubcf4\uc548 \uad50\uc721\/\uc5f0\uad6c<\/span><\/td>\n\uc804\ubb38\uac00, \uae30\uc5c5<\/span><\/td>\n\u274c<\/span><\/td>\nSANS<\/span><\/td>\n\uad50\uc721, \uc778\uc99d<\/span><\/td>\n<\/tr>\n
                              STIG<\/strong><\/span><\/td>\n\uc2dc\uc2a4\ud15c \ubcf4\uc548 \uc124\uc815<\/span><\/td>\n\uad70·\uc815\ubd80 IT<\/span><\/td>\n\u2705<\/span><\/td>\nDISA<\/span><\/td>\n\uc2dc\uc2a4\ud15c \uad6c\uc131 \uac00\uc774\ub4dc<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
                              \n
                               <\/div>\n<\/div>\n<\/div>\n<\/div>\n
                              \n

                              \ud83e\udde0 \uc815\ub9ac \uc694\uc57d<\/span><\/h2>\n
                                \n
                              • \n

                                \uae30\uc220\uc801 \ucde8\uc57d\uc810 \uad00\ub9ac:<\/strong> CVE, CWE, STIG<\/span><\/p>\n<\/li>\n

                              • \n

                                \uc815\ubcf4\ubcf4\ud638 \ubc95\uc81c\ud654 \ubc0f \uc815\ucc45:<\/strong> FISMA, GDPR, PCI DSS<\/span><\/p>\n<\/li>\n

                              • \n

                                \ubcf4\uc548 \ud504\ub808\uc784\uc6cc\ud06c \ubc0f \uad50\uc721:<\/strong> NIST, OWASP, SANS<\/span><\/p>\n<\/li>\n

                              • \n

                                \ucf54\ub529 \uac00\uc774\ub4dc\ub77c\uc778\/\uc0b0\uc5c5 \uaddc\uaca9:<\/strong> MISRA<\/span><\/p>\n<\/li>\n

                              • \n

                                \uc815\ubd80\/\uad70\uc0ac \uc804\uc6a9 \ubcf4\uc548 \uae30\uc900:<\/strong> DISA CC, STIG<\/span><\/p>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

                                  \ud83d\udccc 1. CVE (Common Vulnerabilities and Exposures) \ubaa9\uc801: \uc804 \uc138\uacc4\uc801\uc73c\ub85c \ubc1c\uc0dd\ud558\ub294 \uc18c\ud504\ud2b8\uc6e8\uc5b4 \ucde8\uc57d\uc810\uc5d0 \uace0\uc720 \uc2dd\ubcc4\uc790\ub97c \ubd80\uc5ec\ud558\uc5ec \ucd94\uc801 \uac00\ub2a5\ud558\uac8c \ud568. \ub0b4\uc6a9: \uac01 CVE \ud56d\ubaa9\uc740 \uace0\uc720\ud55c \ubc88\ud638(CVE-YYYY-NNNNN)\ub97c \uac16\uace0, \ud574\ub2f9 \ucde8\uc57d\uc810\uc758 \uac04\ub7b5\ud55c \uc124\uba85\uacfc \ucc38\uc870 \ub9c1\ud06c \ud3ec\ud568. \uc6b4\uc601: MITRE Corporation, \ubbf8\uad6d \uad6d\ud1a0\uc548\ubcf4\ubd80(DHS) \ud6c4\uc6d0 \ud65c\uc6a9: \ucde8\uc57d\uc810 \uad00\ub9ac \uc2dc\uc2a4\ud15c, \ubcf4\uc548 \ub3c4\uad6c, \ud328\uce58 \uad00\ub9ac \ub4f1\uc5d0\uc11c \ud575\uc2ec \ucc38\uc870 \uc9c0\ud45c\ub85c \ud65c\uc6a9\ub428 \ud83d\udccc 2. […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"set","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66,12],"tags":[],"class_list":["post-8678","post","type-post","status-publish","format-standard","hentry","category-computing_fortify","category-computing_security"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8678","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8678"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/8678\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8678"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8678"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8678"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}