• Review of KIISC
• /
• v.33 no.6
• /
• pp.37-43
• /
• 2023

현재 사용되고 있는 RSA, ECC 등 비대칭키 암호알고리즘은 앞으로 나올 양자컴퓨터와 양자알고리즘의 빠른 계산 속도로 알고리즘의 비가역성이 깨질 수 있음이 알려졌다. 이는 공개키로부터 비밀키를 계산할 수 있음을 의미한다. 이를 극복하기 위해 미국 국립표준기술연구소 (NIST)는 최근에 양자 내성 암호 (PQC) 알고리즘 선정과 표준화 작업을 진행해 왔으며, 4차 라운드에 진입해 있다. PQC 알고리즘에 필요한 PQC 비밀키는 PQC 알고리즘이 구현된 칩 외부에서 주입하거나 칩 내부에서 자체 생성을 하여 사용하는데, 이 비밀키를 비휘발성 메모리 (NVM) 등에 저장한다. 만약 시스템의 보안 취약성으로 인해 비밀키가 노출된다면 아무리 PQC 알고리즘이 강력해도 전체 시스템이 무너진다. 즉, 알고리즘의 수학적 능력과 무관하게 해당 보안 시스템은 무력화되는 것이다. 본 논문에서는 물리적 복제 방지 기능 (PUF)을 사용하여PQC 비밀키를 안전하게 보호하고, 이를 기반으로 전체 시스템을 보호할 것을 제안한다. PQC 비밀키가 외부에서 주입되면 해당키는 NVM에 저장되기 전에 PUF 키로 암호화 될 수 있다. PUF 값에서 파생되는 PUF 키는 필요할 때 마다 다시 만들어서 사용이 가능하므로 메모리에 저장할 필요가 없으며, 따라서 외부 공격에 PUF 키가 노출 되지 않는다. 반도체 수동소자로 이루어지는 Via PUF 기술은 최악의 환경 변화에도 그 특성이 유지되는 가장 최적의 PUF 기능을 제공한다.

• Convergence Security Journal
• /
• v.23 no.1
• /
• pp.139-145
• /
• 2023

The ROK Army is promoting cutting-edge, future-oriented military development such as a mobile, intelligent, and hyper-connected Army TIGER system. The future infantry brigade plans to increase mobility with squad-level tactical vehicles to enable combat in multi-domain operations and to deploy various weapon systems such as surveillance and reconnaissance drones. In addition, it will be developed into an intelligent unit that transmits and receives data collected through the weapon system through a hyper-connected network. Accordingly, the future infantry brigade will transmit and receive more data. However, the Army's tactical information communication system has limitations in operating as a tactical communication system for future units, such as low transmission speed and bandwidth and restrictions on communication support. Therefore, in this paper, the information distribution capability of the future infantry brigade is presented through the offensive operation scenario and M&S.

• Korean Journal of Social Welfare
• /
• v.56 no.3
• /
• pp.303-325
• /
• 2004

This study investigated subtypes of men who batter, and explored the differences among them. It was based on 217 subjects from all around the nation who received legal punishment. In the analysis of the typology, we specifically tested whether the Holtzworth-Munroe and Stuart proposed typology was verified. The results of the cluster analysis revealed support for their theoretical distinction for three types of abusers. These results imply that Holtzworth-Munroe and Stuart's batterer typology is applicable to Korean batterers to some degree. Type 1 men demonstrated the lowest levels of physical and psychological abuse toward their wives and were the least likely to have had a history of child abuse or alcohol problems. These men had lower MCMI scores and did not show any extraordinary personality traits. Men in this category were violent only against their wives, had relatively liberal sex role attitudes and had the most satisfaction in their intimate relationships. Type 2 men were violent only at home, using a moderate level of violence. These men had very high levels of dependency on others and showed a borderline, avoident or passive-aggressive personality. The amount of alcohol consumption was similar to Type 1, but scores of jealousy, self-esteem, and attitudinal variables were similar to Type 3 men. They lacked assertiveness skills and reported the least marital satisfaction. Type 3 men used the most severe violence and were violent both inside and outside the home. These men showed signs of antisocial and aggressive personality. They had experienced frequent physical abuse during childhood, were the most likely to abuse alcohol and had lower self-control. Type 3 were the most traditional in their views of women's roles and had attitudes supporting violence. Based upon the study findings, practical implications of enhancing treatment efficacy were considered.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.31 no.4
• /
• pp.661-674
• /
• 2021

Malware, such as a rootkit that modifies the kernel, can adversely affect the analyst's judgment, making the analysis difficult or impossible if a mechanism to evade memory analysis is added. Therefore, we plan to preemptively respond to malware such as rootkits that bypass detection through advanced kernel modulation in the future. To this end, the main structure used in the Windows kernel was analyzed from the attacker's point of view, and a method capable of modulating the kernel object was applied to modulate the memory dump file. The result of tampering is confirmed through experimentation that it cannot be detected by memory analysis tool widely used worldwide. Then, from the analyst's point of view, using the concept of tamper resistance, it is made in the form of software that can detect tampering and shows that it is possible to detect areas that are not detected by existing memory analysis tools. Through this study, it is judged that it is meaningful in that it preemptively attempted to modulate the kernel area and derived insights to enable precise analysis. However, there is a limitation in that the necessary detection rules need to be manually created in software implementation for precise analysis.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.12 no.5
• /
• pp.805-816
• /
• 2017

Tor is a popular, low-latency open network that offers online anonymity to users by concealing their information from anyone conducting traffic analysis. At the same time, a number of conventional passive and active attacking schemes have been proposed to compromise the anonymity provided by the Tor network. In addition to attacks on the network through traffic analysis, interacting with an unsecured application can reveal a Tor user's IP address. Specific traffic from such applications bypasses Tor proxy settings in the user's machine and forms connections outside the Tor network. This paper presents such applications and shows how they can be used to deanonymize Tor users. Extensive test studies performed in the paper show that applications such as Flash and BitTorrent can reveal the IP addresses of Tor users.

• KIISE Transactions on Computing Practices
• /
• v.23 no.3
• /
• pp.177-182
• /
• 2017

To develop computer and communication in the information society, difficulties exist in managing the enormous data manually. Also, loss of data due to natural disasters or hacker attacks, generate a variety of disasters in the IT securities. Hence, there is an urgent need for an information protection management system in order to mitigate these incidents. Information Security Management System has various existing frameworks for IT disaster management. These include Cyber Security Framework, Risk Management Framework, ISO / IEC 27001: 2013, and COBIT 5.0. Each framework analyses and compares the entry for IT disaster recovery from among the various available data. In this paper, we describe a single integrated management scheme for fast resolution of IT disasters.

• The KIPS Transactions:PartC
• /
• v.10C no.6
• /
• pp.799-808
• /
• 2003

Existing security solutions such as Firewell and IDS (Intrusion Detection System) have a trouble in getting accurate detection rate about new attack and can not block interior attack. That is, existing securuty solutions have various shortcomings. Shortcomings of these security solutions can be supplemented with mechanism which guarantees an availability of systems. The mechanism which guarantees the survivability of node is various, we approachintrusion telerance using real time response mechanism. The monitoring code monitors related resources of system for survivability of vulnerable systm continuously. When realted resources exceed threshold, monitoring and response code is deployed to run. These mechanism guarantees the availability of system. We propose control mathod about resource monitoring. The monitoring code operates with this method. The response code may be resident in active node for availability or execute a job when a request is occurred. We suggest the node survivability mechanism that integrates the intrusion tolerance mechanism that complements the problems of existing security solutions. The mechanism takes asvantage of the automated service distribution supported by Active Network infrastructure instead of passive solutions. The mechanism takes advantage of the automated service distribution supported by Active Network infrastructure instead of passive system reconfiguration and patch.

• The Korean Journal of Elementary Counseling
• /
• v.11 no.1
• /
• pp.21-33
• /
• 2012

This study examined the differences of academic achievement by social status types through sociometry. This study analyzed 201 students in grade 6 in S elementary school. The social status is classified by 7 (popular, average, rejected, aggressive-rejected, submissive-rejected, neglected, controversial) with academic achievement of each type as dependent variables to figure out the relation between social status types and academic achievement. To classify 5 social status types, a sociometry program developed by Ahn, Ie-Hwan (2007) was used, 2 social status types was classified with experimental condition, and its dependent variable was the score by subjects in the mid-term exam of the 1st semester in 2011. The average values of humanities courses (Korean and social studies) and natural science courses (math and science) were compared by both sexes and 7 social status types. The reference group was average group. As a result, as to male students, N type had the highest score both in humanities courses and natural science courses while C type had the lowest score in both groups. As to female students, P, N, C types had the highest score in both groups with similar range while R type had the lowest score in both groups. This result demonstrates that the academic achievement of students had relatively high relevance with social status. and also, suggestion that how teachers can do to enhance the academic achievement of elementary school students.

• Sleep Medicine and Psychophysiology
• /
• v.20 no.2
• /
• pp.82-87
• /
• 2013

Objectives: Previous studies have reported an association between circadian preference and personality. Defense mechanism is unconscious ego process which deals with an individual's anxiety and is closely associated with one's personality. Our aim is to investigate the association between defense mechanism and circadian preference in medical students. Methods: One hundred forty eight medical students (70 males, 78 females), aged 22 to 30, answered the Beck Depression Inventory-II, Morningness-eveningness Questionnaire, and Korean version of Defense Style Questinnaire. Results: Consumption (beta=-0.262, p=0.001) and being a male (beta=0.175, p=0.031) were significant positive predictors of eveningness, while sublimation (beta=0.185, p=0.023) was a significant negative predictor of eveningness. Conclusion: Our study showed a relationship between specific defense mechanisms (i.e., consumption and sublimation) and eveningness in medical students, but it did not address whether the relationship is a causal one.

• Journal of the Korean Academy of Child and Adolescent Psychiatry
• /
• v.7 no.1
• /
• pp.34-43
• /
• 1996

In adolescence, the symptoms of depression are more various and different from those of adult. Conduct behaviours are frequently represented in adolescent's depression. The patients who have the depression and conduct disorder are defined as depressive condor disorder in ICD-10. We hypothesized that there might be different parental rearing patterns between the patients with depression alone and the depressive conduct disorder. We applied children's depression inventory (CDI), parental rating form for conduct disorder based on DSM-III-R, and parental bonding instrument (PBI) to patients and normal control adolescent group. The results were as follows : 1) There were no significant differences in severity of depressive symptoms, maternal care, maternal overprotection, and paternal care. 2) Paternal overprotection showed significant higher scores in depressive conduct disorder group than depression group and normal control group. 3) There were positive correlations in the severity of depressive symptoms and behavior problems in all subjects. 4) There were no correlations in maternal care and overprotecion with conduct problems, but with depressive symptoms in all subject. 4) There were no correlations in paternal care with conduct problems and depressive symptoms in all subjects. 5) There were significant correlations in patienral overprotective, intrusive attitudes with conduct problems, not with depressive symptoms in all subjects.