• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.15 no.3
• /
• pp.13-29
• /
• 2005

An important characteristic of role-based access control model(RBAC) is that by itself it is policy neutral. This means RBAC articulates security policy without embodying particular security policy. Because of this reason, there are several researches to configure RBAC to enforce traditional mandatory access control(MAC) policy and discretionary access control(DAC) policy. Specifically, to simulate MAC using RBAC several researches configure a few RBAC components(user, role, role-hierarchy, user-role assignment and session) for keeping no-read-up rule and no-write-down rule ensuring one-direction information flow from low security level to high security level. We show these researches does not ensure confidentiality. In addition, we show the fact that these researches overlook violation of integrity due to some constraints of keeping confidentiality. In this paper we propose a RBAC model satisfying both confidentiality and integrity. We reexamine a few RBAC components and constructs additional constraints.

• Journal of the Korea Society of Computer and Information
• /
• v.27 no.12
• /
• pp.179-188
• /
• 2022

In this paper, we propose an efficient and procedural software patch management phases. Every year, organizations have tens of thousands of known vulnerabilities and spend tens of thousands of hours and millions of dollars or more patching them. Despite these efforts, research has shown that the time it takes for an exploit to appear for a given patched vulnerability is shortening. As various types of organizations such as companies and universities manage patches in inconsistent ways, problems such as security problems, system instability, information leakage and work delay due to patches occur. In this paper, we look at the basics required for software patch management and define the factors to be considered for patch management and the effective steps for patch management. Therefore, this study will be used as a method to efficiently and procedurally execute the organization's patch management policy in the process of updating and patching the software in the organization to a new version as a solution to software function modification and security vulnerability.

• KSCE Journal of Civil and Environmental Engineering Research
• /
• v.28 no.4A
• /
• pp.517-528
• /
• 2008

This paper presents a hysteretic damage model for reinforced concrete (RC) joints that explicitly accounts for the bond-slip between the reinforcing bars and the surrounding concrete. A frame element whose displacement fields for the concrete and the reinforcing bars are different to permit slip is developed. From the fiber section concept, compatibility equations for concrete, rebar, and bond are defined. Modification of the hysteretic stress-strain curve of steel is conducted for partial unloading and reloading conditions. Local bond stress-slip relations for monotonic loads are updated at each slip reversal according to the damage factor. The numerical applications of the reinforcing bar embedded in the confined concrete block, the RC column anchored in the foundation, and the RC beam-column subassemblage validate the model accuracy and show how including the effects of bond-slip leads to a good assessment of the amount of energy dissipation during loading histories.

• Journal of the Korean Society of Surveying, Geodesy, Photogrammetry and Cartography
• /
• v.24 no.1
• /
• pp.79-88
• /
• 2006

The facility area occupies approximately 50% of the topographic landmarks playing an important role in the utilization of geographical information in various fields, and requires more up-to-date information than the framework data of other areas. However, the expression mode in the 1:5000 digital map, which is a primitive data used for the preparation of framework data in the facility area, limits the description of the information on buildings, and its revision/renewal term of 5 years makes it far from up-to-date or accurate. Therefore, this study aimed to analyze the problems and quality deteriorating factors that may occur in establishing the framework data on the basis of existing establishment process of them in the facility area, and improve the qualify of the framework data in facility area by upgrading the methods of quality improvement. Expanding the information on attributes and improving the accuracy of locations were proposed as ways to increase the degree of utilization of the framework data in the facility area. And as the methods of expanding the information on attributes, it was proposed to improve the accuracy of the information on attributes for the framework data in the facility area using the information on attributes in the 1:1000 scale maps, and also to diversify the information on attributes in connection with the LMIS and AIS. To improve the accuracy of the locations, analyses were made with the potential problems that may occur in the establishment process through an experiment on the framework data in the facility area based on 1:1,000 digital map, and the results were used to present an improved, optimum process.

• Journal of the Korean Association of Geographic Information Studies
• /
• v.14 no.3
• /
• pp.163-173
• /
• 2011

This paper, as a case study on the evaluation of nationwide-unit forest functions, targeting the entire Gyeongsangnam-do region, examined the integration measures for the evaluation of national, public and private forest functions, as well as GIS data problems and GIS data building methods. Also, the distribution and characteristics of Gyeongsangnam-do's forest functions were examined. First, as integration measures for forest function evaluation, evaluation unit was proposed as watershed unit, and GIS techniques were proposed to correct some patterns of errors shown in the watershed maps. Also, of GIS data used for forest function evaluation, maps of locations of saw mills to be revised, expressway interchange location maps, and population distribution maps were built nationwide. Based on watershed units, the forest functions of 20 cities and counties in Gyeongsangnam-do were evaluated, revealing that wood production function and forest recreation function potentials, high-ranking was high distributed throughout the site, while most functions potentials, low-ranking was low distributed. In forest function maps with the application of priority by city and gun, the area size was ranked in the order of forest recreation, timber production, natural conservation, water yield, living environment conservation, and prevention of natural disaster. Case analysis results for large areas can be used in evaluating nationwide forest functions.

• Journal of the Korean Association of Geographic Information Studies
• /
• v.17 no.2
• /
• pp.95-106
• /
• 2014

In this study, the applicability of a standard vector model was evaluated using RIMGIS vector data and a portal based river-geospatial information web service system was developed using XML and JSON based data linkage between the server and the client. The RIMGIS vector data including points, lines, and polygons were converted to the Geospatial Data Model(GDM) developed in this study and were validated by layers. After the conversion, it was identified that the attribute data of a shape file remained without loss. The GeoServer GDB(GeoDataBase) that manages a DB in the portal was developed as a management module. The XML-based Geography Markup Language(GML) standards of OGC was used for accessing to and managing vector layers and encoding spatial data. The separation of data content and expression in the GML allowed the different expressions of the same data, convenient data revision and update, and enhancing the expandability. In the future, it is necessary to improve the access, exchange, and storage of river-geospatial information through the user's customized services and Internet accessibility.

• Proceedings of the Korean Institute of Navigation and Port Research Conference
• /
• 2012.06a
• /
• pp.87-88
• /
• 2012

The IHO developed the S-100 standard for Digital Hydrographic Data in order to assist the proper and efficient use of hydrographic data and information for the safety of navigation and the protection of marine environment. The former model, S-57, was considered outdated to be utilized as the basis for the next-generation Electronic Chart(ENC) product specification. The key feature of the S-100 standard is the use of Registry and its components, Registers. This online-based Registry provides a universal standard that can be implemented in the actual performance of the navigation system with convenience. In the current situation, the only registry is owned by the IHO and it is available to domain experts. However, since S-100 is an international standard operated by an international organization, the process of the changes and updates of the data requires time before immediate implementation when demanded. Therefore, regarding the safety of navigation of the domestic users and mariners, a separate domestic registry is necessary to develop a domestic Information Registry. This study specifically aims to build a Registry based on IHO published S-99 through designing an adequate website dedicated for its purpose to provide collection of definitions and hydrographic data.

• Journal of the Korean Society of Surveying, Geodesy, Photogrammetry and Cartography
• /
• v.23 no.3
• /
• pp.303-312
• /
• 2005

Digital map, DEM and orthophoto were produced by using PC based digital photogrammetric system and aerial photo images that were obtained with scale of 1/5,000 and scanning density of 1200dpi and 600dpi, and the accuracies of these outputs were evaluated by various methods. Non-skilled operator produced digital map with PC based digital photogrammetric system and aerial photo images scanned by 1200dpi. The results showed that it was impossible to insert contour lines, but the rest elements could be drawn with the accuracy of 1/1,000. In automatic generation of DEM, scanning density of aerial photo and grid interval of DEM didn't affect the accuracy of DEM. In production of orthophoto, we could know that the larger grid interval of DEM, the lower accuracy of orthophoto, but scanning density of original image had more effect on quality of orthophoto. By the way, accuracy comparison between orthophoto and digital map with same check points showed that orthophoto was more accurate than digital map, and orthophoto could be used in more diverse areas. Hereafter in civilian part, aerial photo image and PC based digital photogrammetric system could make practical application of data correction and update in GIS.

• Spatial Information Research
• /
• v.9 no.1
• /
• pp.51-72
• /
• 2001

It is frequently pointed out that the conventional field survey for natural environment has may limitations in terms of positional accuracy, real-time GIS data acquisition, and economic efficiency. The aim of this research was to develop an on site real-time mapping technique that enables the surveyor to input data in the field. The idea is based upon the recent trends in the field of Telecommunication and Information Technology that uses a GPS, wireless network computing, moving computing, etc. A virtual office approach has been adopted, in which a portable computer is linked to a GPS and field workers record data on the computer at the site and analyse data on site. This field mapping system has shown to be much less susceptible to the positional accuracy than that of th conventional approach. The Graphic User Interface, in particular, were ideally suited to combining positional information with attribute data which changes with every survey points. This interface allows users to interactively display and query GIS layers reproduced from the past survey results. The GIS database stored in the virtual office will serve to carry out a highly reliable survey since it could play a crucial role in identifying temporal and spatial changes occurred in the site. It is expected that integrated utilization of field data among the related agencies would be increased much more than before since the virtual office survey would be a powerful tool to ensure geometric fidelity in GIS database creation process. This paper also discusses the limitations and future direction of the present prototype research.

• Spatial Information Research
• /
• v.17 no.2
• /
• pp.191-200
• /
• 2009

Aerial digital camera was used in outside since 2000 because of technical development & improvement of it. In korea, line type or frame type digital camera introduced since 2006 was used in manufacture and Correction of National base map appling the number and distribution of control point of analogue aerial triangulation from 2008. The main objective of the study is to compare and analyze the effects of the number and distribution of control points in accuracy of results, when we execute aerial triangulation with images from ADS40, line type sensored aerial digital camera available in korea. The result of RMSE can be concluded that accuracy of all the case are meet the aerial photograph surveying work regulation of NGI as to horizontal of control point ${\pm}0.068m$, ${\pm}0.073m$, ${\pm}0.071m$, height ${\pm}0.041m$, ${\pm}0.055m$, ${\pm}0.055m$, ${\pm}0.041m$, as to horizontal of check point ${\pm}0.167m$, ${\pm}0.113m$, ${\pm}0.110m$, height ${\pm}0.128m$, ${\pm}0.086m$, ${\pm}0.081m$. We have confirmed that it is possible to make out large scale digital topographic map.