• Convergence Security Journal
• /
• v.16 no.6_2
• /
• pp.99-107
• /
• 2016

The purpose of this study is to analyse motor vehicle communication network hacking attacks and to provide its prevention. First, the definition of motor vehicle communication network was provided and types of in-vehicle communication network were discussed. Also, bluetooth hacking attack cases were analysed in order to illustrate dangers of hacking attacks. Based on the analysis, two preventive measures were provided. First, Motor Vehicle Safety Standard Law should be revised. Although the law provides the definition of electronic control system and its standards as well as manufacturing and maintenance for safe driving standards, the law does not have standards for electronic control system hacking prevention and defensive security programs or firmware. Second, to protect motor vehicle communication network, it is necessary to create new laws for motor vehicle communication network protection.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.6
• /
• pp.1271-1278
• /
• 2020

Deep learning-based profiling side-channel analysis is a powerful analysis method that utilizes the neural network to profile the relationship between the side-channel information and the intermediate value. Since the neural network interprets each point of the signal in a different dimension, jitter makes it much hard that the neural network with dimension-wise weights learns the relationship. This paper shows that replacing the fully-connected layer of the traditional CNN (Convolutional Neural Network) with global average pooling (GAP) allows us to design the inherently robust neural network inherently for jitter. We experimented with the ChipWhisperer-Lite board to demonstrate the proposed method: as a result, the validation accuracy of the CNN with a fully-connected layer was only up to 1.4%; contrastively, the validation accuracy of the CNN with GAP was very high at up to 41.7%.

• Journal of the Korea Society of Computer and Information
• /
• v.29 no.1
• /
• pp.121-130
• /
• 2024

In this paper, we propose an installation approach for Naval Combat Management System(CMS) software that identifies potential data anomalies during installation. With the popularization of wireless communication methods, such as Low Earth Orbit(LEO) satellite communications, various utilization methods using wireless networks are being discussed in CMS. One of these methods includes the use of wireless network communications for installation, which is expected to enhance the real-time performance of the CMS. However, wireless networks are relatively more vulnerable to security threats compared to wired networks, necessitating additional security measures. This paper presents a method where files are transmitted to multiple nodes using encryption, and after the installation of the files, a validity check is performed to determine if there has been any tampering or alteration during transmission, ensuring proper installation. The feasibility of applying the proposed method to Naval Combat Systems is demonstrated by evaluating transmission performance, security, and stability, and based on these evaluations, results sufficient for application to CMS have been derived.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.29 no.4
• /
• pp.859-866
• /
• 2019

Cybersecurity attack targeting a specific user is rising in number, even enterprises are trying to strengthen their cybersecurity. Network segmentation environment where public network and private network are separated could block information coming from the outside, however, it is unable to control outside information for business efficiency and productivity. Even if enterprises try to enhance security policies and introduce the network segmentation system and a solution incorporating CDR technology to remove unnecessary data contained in files, it is still exposed to security threats. Therefore, we suggest a system that uses file format conversion to transmit a secure file in the network separation environment. The secure file is converted into an image file from a document, as it reflects attack patterns of inserting malicious code into the document file. Additionally, this paper proposes a system in the environment which functions that a document file can keep information for incident response, considering forensic readiness.

• The Journal of the Korea Contents Association
• /
• v.5 no.4
• /
• pp.160-168
• /
• 2005

Today, home networking security shows the complicated and various characteristics of requirements for consideration because of the variety of information appliances and share of resources among them. Therefore, security framework to satisfy with security functions is arranged ,regardless of the variety of communication medium and protocols. Thus, we construct security framework for mobile host(or user) to securely control devices in home-network through the variety of suggested mechanism, with security mechanism to be available for future home networking model, and verified the performance of our model.

• Convergence Security Journal
• /
• v.3 no.3
• /
• pp.1-6
• /
• 2003

The IPv6 was suggested as an ultimate solution of problems that IPv4 protocol maintains limitations to apply to new technology of data service and the lack of IPv4 address space. So it is expected to transfer IPv4 to IPv6 gradually. In the Ipv6 environment, it is easier to apply security policies and transmits a secure packet applied the security policies, with the content in the Header itself. By this reason, this paper describes about the implementation of DHCPv6 server to perform a connection of IPv6 network and IPv4 network, and the application of secure packet with the security policies for clients. Further, it performs the process of the massages inside the DHCPv6 server to be used in the IPv6 environment in the future.

• Proceedings of the KAIS Fall Conference
• /
• 2010.11a
• /
• pp.231-234
• /
• 2010

최근 기존 PSTN망을 이용하던 음성전송방식이 VoIP 기반의 인터넷 전화 서비스로 바뀌어가고, 그 사용수도 늘어가는 추세이다. 그와 동시에 악의적인 사용자에 의한 도청, 피싱 등의 사건이 일어나면서 VoIP 보안 이슈가 늘어가고 있다. 본 논문에서는 이러한 보안 이슈들에 대한 해결책으로 SIP의 사용자 인증을 신뢰받는 기관에서 UA를 인증하여 사용자 인증에 대해 안정성을 강화하는 보안 프로토콜을 제안한다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.571-573
• /
• 2002

복잡한 네트워크상의 지능적이고 다양한 방식의 사이버 태러로부터 안전하고 효율적으로 네트워크를 총체적으로 관리하기 위해서는 개별 네트워크 노드간의 정보 교환은 필수적이다. STEALTH 프로토콜이란 거대망에서 네트워크 노드들 사이에 안전한 정보 교환을 위한 일종의 보안 프로토콜로 기존의 보안 프로토콜이 지닌 트래픽의 속도 저하 및 암호화로 인한 네트워크의 과부하를 최소화한 프로토콜이다. 여기서는 기존의 보안 프로토콜에 대해서 그 종류와 기능을 살펴본 후, 제안하는 STEALTH프로토콜의 요구사항 및 기능에 대해서 다룬다. 마지막으로 STEALTH 프로토콜이 적용된 시나리오를 통해 이 프로토콜의 역할과 기능을 상세히 설명한다.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2014.10a
• /
• pp.381-382
• /
• 2014

센서 네트워크은 기존의 인프라가 없는 네트워크 망을 연결한 구조를 가지고 있으며, 네트워크가 가변성을 가져 기존의 인프라 구조와는 차별적인 특성을 가진다. 사용되는 센서는 제한된 자원으로 인하여 사용할 자원이 제한되어 전통적인 보안 메카니즘을 사용하기는 보안성에 많은 문제점을 야기시킬 수 있다. 따라서 본 논문에서는 이러한 센서 네트워크의 인프라 구조하에서의 보안 서비스 요구사항과 현재까지 연구되어지는 기술적인 동향 및 특성을 분석하고자 한다.

• Review of KIISC
• /
• v.31 no.6
• /
• pp.37-40
• /
• 2021

미국, 중국 등에 이어 국내에서도 KT에서 2021년 7월 5G 단독모드(StandAlone)를 상용화 하였다. 5G 비단독모드(Non-StandAlone)에서는 다년간 사용되었던 기존 LTE(Long Term Evolution) 망의 장비를 재활용하기 때문에 신규 장비의 도입은 5G 기지국으로 제한된다. 그러나 5G 단독모드에서는 새롭게 정의된 5G 장비들을 사용하기 때문에 이에 대한 위협 분석과 보안 기능의 정의에 따라 각 장비에 보안의 구현이 제대로 되어 있는지 검증하는 절차가 요구된다. 이러한 환경에서 본 논문은 5G 단독모드 기기의 보안 인증 현황을 제공하고자 한다.