• Title/Summary/Keyword: 변경 탐지

Search Result 189, Processing Time 0.028 seconds

Detection Of Unknown Malicious Scripts using Code Insertion Technique (코드 삽입 기법을 이용한 알려지지 않은 악성 스크립트 탐지)

  • 이성욱;방효찬;홍만표
    • Journal of KIISE:Information Networking
    • /
    • v.29 no.6
    • /
    • pp.663-673
    • /
    • 2002
  • Server-side anti-viruses are useful to protect their domains, because they can detect malicious codes at the gateway of their domains. In prevailing local network, all clients cannot be perfectly controlled by domain administrators, so server-side inspection, for example in e-mail server, is used as an efficient technique of detecting mobile malicious codes. However, current server-side anti-virus systems perform only signature-based detection for known malicious codes, simple filtering, and file name modification. One of the main reasons that they don't have detection features, for unknown malicious codes, is that activity monitoring technique is unavailable for server machines. In this paper, we propose a detection technique that is executed at the server, but it can monitor activities at the clients without any anti-virus features. we describe its implementation.

Design Thermal Image Processing System using Common Image Processor (상용 이미지 프로세서를 이용한 열화상 영상 처리 시스템 설계)

  • Cha, Jeong-Woo;Han, Joon-Hwan;Park, Chan;Kim, Yong-Jin
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2019.10a
    • /
    • pp.5-7
    • /
    • 2019
  • 열화상 시스템은 물체로부터 발산되는 적외선을 영상화하여 물체를 탐지하는 장점으로 인해 군사 분야는 물론 현재 민수 분야(자동차, Security 시스템)에 활용분야가 넓어지고 있다. 기존에는 대부분 FPGA 기반으로 열화상 열상 모듈을 개발하였지만 민수 분야에 다양한 요구사항 및 범용성에 유연한 대처가 힘든 실정이다. 따라서 다양한 요구사항과 범용성을 만족하기 위한 시스템의 필요성이 대두되었다. 본 논문에서는 상용 이미지 프로세서를 이용한 열화상 영상 처리 시스템을 제안한다. 제안된 시스템은 기존 FPGA 기반 시스템이 아닌 상용 이미지 프로세서를 사용함으로써 범용 영상 입·출력 인터페이스 및 각종 디바이스를 지원함에 따라 다양한 요구사항과 범용성을 만족한다. 따라서 시스템이 구축이 되면 뛰어난 접근성으로 인하여 시스템 추가/변경 시 기존의 시스템에 비해 개발 비용 및 기간을 단축할 수 있으며 그로 인하여 다양한 고객 요구사항 만족, 개발 비용 및 시간 단축, 제품 출시일 등 다양한 이점을 얻을 것으로 예상한다.

Configuration Management based Configuration File Version Integrity Auditing Framework (형상관리 기반 설정파일 버전 무결성 감사 프레임워크)

  • Kim, Seonjoo;Lee, Sukhoon;Baik, Doo-Kwon
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2012.11a
    • /
    • pp.1511-1514
    • /
    • 2012
  • 최근 기업에서 구축하는 IT 아키텍쳐가 점점 복잡해져 가는 환경변화에 따라 각 시스템 구성요소의 조건이나 특성을 저장하는 설정파일(Configuration file)의 중요성이 강조되고 있지만, 대부분의 형상관리시스템이 응응 소프트웨어를 중심으로 구성되어 설정파일의 특징을 반영한 활동에 한계를 갖고 있다. 또한 품질보증 목적으로 수행하는 형상감사 활동도 응용 소프트웨어를 대상으로 품질중심 감사 활동이 이루어지면서, 등록된 개별 소프트웨어 별로 변경통제와 버전관리가 이루어져 설정 파일이 포함되는 경우 버전 무결성 차원의 문제를 적발하지 못하는 문제가 있다. 이 논문에서는 추가적으로 필요한 감사활동 요구기능을 정의하고, 동일한 원본에서 배포된 설정파일들이 서로 버전이 다르게 관리 될 수 있는 문제를 감사(Audit)를 통해 탐지할 수 있는 버전 무결성 감사 프레임워크를 제시한다. 제안하는 프레임워크는 기존 형상관리 개념과 액티비티, 프로세스를 기반으로 감사기능을 보완한다. 이를 통해 기존 감사활동에 버전 무결성 검증을 수행하는 형상감사 기능이 포함되며, 이는 설정파일의 버전 차이에 의해 사전/사후 발생될 장애, 오동작 등의 문제 해결에 활용된다. 이 논문에서 제안 프레임워크의 검증을 위하여 웹 시스템 기반 자바환경으로 구현하였고, 현장 적용한 부분을 평가 함으로써 검증하였다.

Attacks, Detection, and Countermeasures in WSN Network Layer (WSN의 네트워크 계층에서의 공격과 탐지 및 대응 방안)

  • Lee, Daeun;Rhee, Eugene
    • Journal of IKEEE
    • /
    • v.23 no.2
    • /
    • pp.413-418
    • /
    • 2019
  • Attacks on existing sensor networks include sniffing, flooding, and spoofing attacks. The basic countermeasures include encryption and authentication methods and switching methods. Wormhole attack, HELLO flood attack, Sybil attack, sinkhole attack, and selective delivery attack are the attacks on the network layer in wireless sensor network (WSN). These attacks may not be defended by the basic countmeasures mentioned above. In this paper, new countermeasures against these attacks include periodic key changes and regular network monitoring. Moreover, we present various threats (attacks) in the network layer of wireless sensor networks and new countermeasures accordingly.

Development of Autonomous Reconnaissance Flight Simulation for Unmanned Aircraft to Derive Flight Operating Condition (자율정찰비행 무인항공기의 비행운영조건 고찰을 위한 비행시뮬레이션 개발)

  • Seok, Min Joon
    • Journal of the Korean Society for Aeronautical & Space Sciences
    • /
    • v.47 no.4
    • /
    • pp.266-273
    • /
    • 2019
  • The efficiency and effectiveness of mission performance can be greatly changed according to the operating conditions such as the number of manned aircraft, flight altitude, and so on, in performing search and reconnaissance missions using a large number of small reconnaissance unmanned aerial vehicles. However, it is not easy to determine which operating conditions are most reasonable. Therefore, in this study, we developed an unmanned airplane flight simulation that can detect and identify the target while avoiding collision according to autonomous flight, suggesting a way to derive operating conditions when operating a large number of unmanned aerial vehicles.

Proposal of a Black Ice Detection Method Using Vehicle Sensors to Reduce Traffic Accidents (교통사고 경감을 위한 차량 센서를 사용한 블랙아이스 탐지 방법 제안)

  • Kim, Hyung-gyun;Kim, Du-hyun;Baek, Seung-hyun;Jang, Min-seok;Lee, Yonsik
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2021.05a
    • /
    • pp.524-526
    • /
    • 2021
  • As the invention of automobiles and construction of roads for vehicles began, the occurrence of traffic accidents began to increase. Accordingly, efforts were made to prevent traffic accidents by changing the road construction method and using signal systems such as traffic lights, but until now, numerous human and property damages have occurred every year due to traffic accidents caused by freezing of the road due to bad weather. In this paper, we propose a method of transmitting ice detection data detected using vehicle sensor data to vehicle navigation to reduce traffic accidents caused by road freezing.

  • PDF

Proposal of a Black Ice Detection Method Using Infrared Camera for Reducing of Traffic Accidents (교통사고 경감을 위한 적외선 카메라를 사용한 블랙아이스 탐지 방법 제안)

  • Kim, Hyung-gyun;Jeong, Eun-ji;Baek, Seung-hyun;Jang, Min-seok;Lee, Yonsik
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2021.05a
    • /
    • pp.521-523
    • /
    • 2021
  • As the invention of automobiles and construction of roads for vehicles began, the occurrence of traffic accidents began to increase. Accordingly, efforts were made to prevent traffic accidents by changing the road construction method and using signal systems such as traffic lights, but even today, numerous human and property damages have occurred due to traffic accidents caused by freezing of the road due to bad weather. In this paper, in order to reduce traffic accidents due to road freezing, we propose a method of transferring the ice detection information obtained by deep learning of infrared wavelength data obtained using an infrared camera to the vehicle's navigation.

  • PDF

Comparative Analysis of VT-ADL Model Performance Based on Variations in the Loss Function (Loss Function 변화에 따른 VT-ADL 모델 성능 비교 분석)

  • Namjung Kim;Changjoon Park;Junhwi Park;Jaehyun Lee;Jeonghwan Gwak
    • Proceedings of the Korean Society of Computer Information Conference
    • /
    • 2024.01a
    • /
    • pp.41-43
    • /
    • 2024
  • 본 연구에서는 Vision Transformer 기반의 Anomaly Detection and Localization (VT-ADL) 모델에 초점을 맞추고, 손실 함수의 변경이 MVTec 데이터셋에 대한 이상 검출 및 지역화 성능에 미치는 영향을 비교 분석한다. 기존의 손실 함수를 KL Divergence와 Log-Likelihood Loss의 조합인 VAE Loss로 대체하여, 성능 변화를 심층적으로 조사했다. 실험을 통해 VAE Loss로의 전환은 VT-ADL 모델의 이상 검출 능력을 현저히 향상시키며, 특히 PRO-score에서 기존 대비 약 5%의 개선을 보였다는 점을 확인하였다. 이러한 결과는 손실 함수의 최적화가 VT-ADL 모델의 전반적인 성능에 중요한 영향을 미칠 수 있음을 시사한다. 또한, 이 연구는 Vision Transformer 기반 모델의 이상 검출과 지역화 작업에 있어서 손실 함수 선택의 중요성을 강조하며, 향후 관련 연구에 유용한 기준을 제공할 수 있을 것으로 기대된다.

  • PDF

Pattern-based Signature Generation for Identification of HTTP Applications (HTTP 응용들의 식별을 위한 패턴 기반의 시그니쳐 생성)

  • Jin, Chang-Gyu;Choi, Mi-Jung
    • Journal of Information Technology and Architecture
    • /
    • v.10 no.1
    • /
    • pp.101-111
    • /
    • 2013
  • Internet traffic volume has been increasing rapidly due to popularization of various smart devices and Internet development. In particular, HTTP-based traffic volume of smart devices is increasing rapidly in addition to desktop traffic volume. The increased mobile traffic can cause serious problems such as network overload, web security, and QoS. In order to solve these problems of the Internet overload and security, it is necessary to accurately detect applications. Traditionally, well-known port based method is utilized in traffic classification. However, this method shows low accuracy since P2P applications exploit a TCP/80 port, which is used for the HTTP protocol; to avoid firewall or IDS. Signature-based method is proposed to solve the lower accuracy problem. This method shows higher analysis rate but it has overhead of signature generation. Also, previous signature-based study only analyzes applications in HTTP protocol-level not application-level. That is, it is difficult to identify application name. Therefore, previous study only performs protocol-level analysis. In this paper, we propose a signature generation method to classify HTTP-based traffics in application-level using the characteristics of typical semi HTTP header. By applying our proposed method to campus network traffic, we validate feasibility of our method.

A Study on Automatic Correction Method of Electronic Compass Deviation Using the Geostationary Satellite Azimuth Information (정지위성 방위각 정보를 활용한 전자 컴퍼스 편차 자동보정기법 연구)

  • Lee, Jae-Won;Lee, Geon-Ho
    • Journal of Navigation and Port Research
    • /
    • v.41 no.4
    • /
    • pp.189-194
    • /
    • 2017
  • The Moving Search Radar System (MSRS) monitors sea areas by moving along the coast. Since the radar is initially aligned to the front of the vehicle, it is important to know the changes in the heading azimuth of the vehicle to quickly acquire the target azimuth from the radar after the MSRS has moved. The heading azimuth can be obtained using the gyro compass, the GPS compass or the electronic compass. The electronic compass is suitable for MSRS requiring fast maneuverability due to its small volume, short stabilization time and low price. However, using a geomagnetic sensor may result in an error due to the surrounding magnetic field. Errors can make early automatic tracking of the satellites difficult and can reduce the radar detection accuracy. Therefore, this paper proposes a method to automatically compensate for the error reflecting the correction value on the radar obtained by comparing the reference azimuth calculated by solving the geodesic inverse problem using two coordinates between the radar and the geostationary satellite with the actually-directed azimuth angle of the satellite antenna. The feasibility and convenience of the proposed method were verified by applying it to the MSRS in the field.