INFORMATION-SECURITY ABILITY MANAGEMENT SYSTEM

摘要

Disclosed is an information-security level management system. The information-security ability management system comprises: a communications network; at least two or more communications terminals carrying out information service between the communications network and users and the processing of user input data, and including a personal information protection module for preventing the exposure of personal information, a vaccine module for detecting and curing a virus included in programs and document files, a security printer module for selectively blocking the printing of data through a printer, a security USB module for selectively blocking writing and reading with respect to an external memory through an USB, and a data loss prevention module for preventing the loss of data and the Denial of Service attack by monitoring the communications with respect to the communication network; and a server connected to at least the two or more communications terminals through the communications network so as to collect the security module installation state from each of the communications terminals, the virus infection facts from the vaccine module of each of the communications terminals, the results of hacking mail simulation using simulation hacking mails to which simulation hacking program files are attached and the results of an information security awareness survey using a questionnaire on information security awareness, to evaluate the information security level for each of the communication terminal users on the basis of the collected security module installation state, virus infection facts, results of hacking mail simulation and results of an information security awareness survey, and to provide the evaluated information security level to the corresponding communications terminal users in real time.