Information Security Paradigm Shift for a Connected World

With the spread of cloud computing, artificial intelligence, and smart cities, various data are much more connected enormously than before. For example, the electric power industry, which has traditionally been operated as a closed network, is evolving into a domain connected via the Internet owing to the explosive increase in renewable energy generators. However, the philosophy and methodology for information security has not changed substantially since it was established around the 1970s. Information security philosophy and methodologies established in the 1970s are ill-equipped to respond appropriately to various cyber incidents in the connected age. Going forward, determining what needs to be supplemented and improved in the philosophy and methodology of information security will be essential. In this paper, we present the definition, philosophy, methodology, and other aspects of existing information security. We also review recent studies that aim to improve information security. Through this, an updated philosophy and methodology of information security for a connected world will be proposed.