• Proceedings of the Korea Information Processing Society Conference
• /
• 2011.11a
• /
• pp.876-880
• /
• 2011

유무선 네트워크의 발달로 온라인 환경에서 다양한 정보 교환 및 데이터 공유를 보다 쉽게 사용할 수 있다. 이러한 네트워크의 신뢰성을 보장하고 악의적인 사용자의 공격에 저항하기 위해 가장 중요한 필요조건은 구성원 상호 신뢰 관계를 확립하는 것이다. 다른 사람의 신뢰도를 정확하게 평가하고 신뢰도가 전체적인 신뢰도에 반영된다면 많은 위험을 회피할 수 있다. 본 논문에서는 악의적인 피어가 제공하는 신뢰할 수 없는 자원의 확산을 감소시키기 위해 네트워크에 참여하는 노드에 대한 신뢰도를 측정한다. 신뢰도는 노드들이 선택하는 다른 노드의 선호도를 이용하여 노드들의 신뢰도에 가중한다. 실험결과는 계산된 신뢰도를 이용하여 신뢰할 수 있는 노드에게 유효한 파일을 수신할 수 있어 네트워크의 신뢰성을 보장하고 데이터에 대한 정확성을 높일 수 있다.

• Convergence Security Journal
• /
• v.23 no.2
• /
• pp.3-10
• /
• 2023

In the malware distribution network existing on the web, there is a central node that plays a key role in distributing malware. If you find and block this node, you can effectively block the propagation of malware. In this study, a centrality search method applied with risk analysis in a complex network is proposed, and a method for finding a core node in a malware distribution network is introduced through this approach. In addition, there is a big difference between a benign network and a malicious network in terms of in-degree and out-degree, and also in terms of network layout. Through these characteristics, we can discriminate between malicious and benign networks.

• KIPS Transactions on Computer and Communication Systems
• /
• v.3 no.10
• /
• pp.323-328
• /
• 2014

ZigBee based on the most vulnerable part of u-Healthcare system that uses the ZigBee communication is the wireless section. ZigBee communication sectors to identify vulnerabilities in this paper, we propose to compensate. ZigBee has been raised from the existing vulnerabilities organize and ZigBee also uses the 64bit address that uniquely identifies a vulnerability that was defined as exposure. And to prevent the exposure of a unique identifying address was used to address a temporary identification. ZigBee security services, the proposed system during the Network Key for encryption only use one mechanism of Residential Mode is used. Residential Mode on all nodes of the entire network because they use a common key, the key is stolen, your network's security system at a time are at risk of collapse. Therefore, in order to guard against these risks to the security policy Network Key updated periodically depending on the method used to. The proposed evaluation and comparative analysis of the system were exposed in the existing system can hide the address that uniquely identifies a public key Network Key also updated periodically, so that leaks can occur due to reduced risk.

• Review of KIISC
• /
• v.22 no.5
• /
• pp.62-72
• /
• 2012

스마트그리드는 전력시스템과 이를 제어하기 위한 통신 인프라를 중심으로 다양한 시스템이 서로 통합되는 종합적인 플랫폼으로 이해할 수 있다. 기존에 각기 독립적으로 운영되는 시스템과 통신 인프라가 통합되기 시작하면서 다양한 상호작용이 파생되고 그로 인해 잠재적인 보안 측면의 위험성도 커지게 된다. 전통적인 전력시스템은 폐쇄적인 SCADA 네트워크를 기반으로 운영되었기 때문에 최소한의 보안강도가 보장되었지만, 스마트그리드 하에서는 개방형 통신망과 연계되면서, 기존의 사이버 보안 위협들이 전력시스템으로 유입하게 된다. 기존의 IT 시스템과는 달리 전력시스템과 같은 제어시스템은 물리적 작동과 공정이 수반되기 때문에 새로운 위험이 발생하기도 하고 기존의 위험이 증폭되기도 한다. 전력시스템에서는 가용성이 그 무엇보다 중요하기 때문에, 스마트그리드 체제하에서의 다양한 위협요인을 미리 파악하고 이에 대비한 계획을 수립함으로써, 그러한 가용성의 수준을 유지할 필요가 있다. 이를 위해서는 기존의 사이버 위협이 어떠한 경로를 통해 전력시스템에 영향을 미치게 되며 그로 인한 잠재적 위험이 얼마나 되는가를 평가할 필요가 있다. 그러나 스마트그리드는 아직까지 구축중인 미래형 시스템이고 누적된 과거 데이터가 없기 때문에 가상의 하드웨어 기반 테스트베드 내지 소프트웨어 기반의 시뮬레이션 모델을 통해 이를 사전적으로 테스트할 필요가 있다. 또한 스마트그리드는 서로 다른 IT 시스템과 물리적 설비들이 결합되는 복잡한 시스템이라는 측면에서, 잠재적으로 발생 가능한 다양한 위험을 분석하고 평가할 수 있는 모델의 수립이 요구된다. 본고에서는 그러한 CPS 기반 시뮬레이션 모델에 대한 현재의 연구동향을 검토하고, 향후 실질적으로 구현하기 위한 방안을 제안하고자 한다.

• Convergence Security Journal
• /
• v.8 no.2
• /
• pp.15-25
• /
• 2008

In today's broadcasting and communication systems, many applications are converged information in a complicated manner by interworking with various networks such as satellite networks. Specifically, as broadcasting and communication systems have become more advanced in terms of technology and capacity, the increase in information assets has created new types of threats and vulnerabilities that we're not previously apparent. This paper has proposed the following methodologies for analyzing the risks and estimating the economical that could arise in broadcasting and communication convergence systems. First, the assets are prioritized by grading them according to confidentiality(copyrights), integrity, and availability. Based on such an analysis, this paper presents a model that can be used for verifying the risk variables caused by changing threats and vulnerabilities. Second, this paper presents a method for quantitatively estimating the economical caused by countermeasure costs for each time period.

• Journal of the Korea institute for structural maintenance and inspection
• /
• v.21 no.6
• /
• pp.185-195
• /
• 2017

In recent years, unexpected bridge fire accidents have increased because of augmenting the number of traffic volumes and hazardous materials by the increment in traffics and distribution business. Furthermore, in accordance with the effort of using the under space of bridges, the ratio of occupied by combustible materials like oil tanker or lorry has been increased. As a result, the occurrence of bridge fire has been growing drastically. In order to mitigate the accident of bridge fire, risk assessment of bridge fire has been studied, however, practical risk models considering safety from users' viewpoints were scarce. This study represented quantitative risk assessment model applicable to national road bridges in Korea. The primary factors with significant impacts on bridge fire accidents was chosen such as clearance height, materials of bridges, arrival time of fire truck and fire intensity. The selected factors were used for Fire Dynamics Simulation (FDS) and the peak temperature calculated by FDS in accordance with the fire duration and fire intensity. The risk assessment model in bridge fire reflected the FDS analysis results, the fire damage criteria, and the grade of fire truck arrival time was established. Response plans for bridge fire accidents according to the risk assessment output has been discussed. Lastly, distances between bridges and fire stations were calculated by GIS network analysis. Based on the suggested assessment model and methodology, sample bridges were selected and graded for the risk assessment.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.9 no.5
• /
• pp.1428-1445
• /
• 2008

This study focuses on examination a) of impacts of entrepreneurs' psychological characteristics on business performance (need fur achievement and risk-taking propensity), b) of impacts of entrepreneur's competency characteristics(vision, opportunity recognition, social deftness, frequency of networking and reliability) on business performance, and c) of controlling impacts of business incubator on the relationship between entrepreneurs' characteristics (psychological characteristics and competency) and business performance. According to a study, among entrepreneurs' psychological characteristics, need for achievement has a significant impact on business performance, whereas risk-taking propensity is found to have no significant impact on business performance. In addition, among entrepreneurs' competency characteristics, vision, social deftness, and network reliability have no impact on business performance, whereas opportunity recognition and frequency of network have an impact on business performance. On the other hand, need for achievement has a negative impact on controlling business incubator services. Business incubator services have a significant impact on the relationship between vision, network reliability and business performance.

• Journal of the Korean Geotechnical Society
• /
• v.34 no.9
• /
• pp.19-32
• /
• 2018

In this study, the applicability and practicality of landslides monitoring by using wireless sensor network (WSN) was analysed. WSN system consists of a sensor node for collecting and transmitting data using IEEE 802.14e standard, a gateway for collecting data and transmitting the data to the monitoring server. In the topology of the sensor network, a highly flexible and reliable mesh type was adopted, and three testbeds were chosen in each location of Seoul metropolitan area. Soil moisture sensors, tensiometers, inclinometers, and a rain gauge were installed at each testbed and sensor node to monitor the landslide. For the estimation of the optimal network topology between sensor nodes, the susceptibility assessment of landslides, forest density and viewshed analysis of terrain were conducted. As a result, the network connection works quite well and measured value of the volumetric water content and matric suction simulates well the general trend of the soil water characteristic curve by the laboratory test. As such, it is noted that WSN system, which is the reliable technique, can be applied to the landslide monitoring.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.27 no.6
• /
• pp.1317-1330
• /
• 2017

To collect server information and construct network map enable us to prevent security breach, prepare for national cyber warfare and make effective policies. In this paper, we analyze well-known network scanners, Nmap and ZMap, and construct network map using banner grabbing. We use multiple threads in order to increase scanning speed and arrange IP lists by specific order to reduce the load on information gathering targets. Also, we applied performance tests to compare the real-time banner grabbing tool with the existing network scanners. As a result, we gathered server information from domestic and overseas servers and derived a risk index based on the collected database. Although there are slight differences among countries, we can identify the risky situation that many users in every country are exposed to several security breaches.

• Review of KIISC
• /
• v.33 no.4
• /
• pp.23-29
• /
• 2023

대부분의 임베디드 시스템은 기계장치와 전자기기 장치가 함께 작동되는 물리 장치로써, 이기종 네트워크, 복잡한 보안체계 등을 고려하여 가상화 기반 사이버훈련 환경이 구성되어야 한다. 또한, 차량을 대상으로 물리적인 실험환경에서 모의침투 등 사이버훈련을 수행한다는 것은 교통사고를 비롯한 안전사고 발생에 있어 위험이 존재한다. 본 논문에서는 가상 개발환경에서의 공격 기반 차량용 사이버훈련 프레임워크를 제안하고자 한다. 먼저, 공격 기반 차량용 사이버훈련 프레임워크의 작동은 자동 활성화되는 가상의 CAN 네트워크 인터페이스로 시작된다. 가상의 CAN 네트워크 인터페이스는 가상 머신에서 간단한 부트스트랩 명령어 실행을 통해 파이썬 패키지와 Ubuntu 서비스 목록 설치 명령이 자동으로 실행되면서 설치된다. 이후 내부 네트워크 시뮬레이터와 공격모듈과 관련된 UI가 자동으로 Ubuntu Systemd에 의해 백그라운드에서 실행되어 시작과 동시에 준비 상태를 유지하게 된다. 사이버훈련 UI 내 공격 모듈은 사용자에 의한 공격 선택 및 파라미터 셋팅 이후 차량의 이상 상태를 사이버훈련 UI에 다시 출력되게 된다. 본 논문에서 제안하는 가상 개발환경 기반의 차량용 사이버훈련 프레임워크는 자율주행 차량 사고의 위험이나 다른 특수한 제약 없이 사용자의 학습 경험을 확장시킬 수 있다. 또한, 기존의 가상화 기반 사이버훈련 교육 콘텐츠와는 달리 일반 사용자들이 접근하기 쉬운 형태로 확장 개발이 가능하다.