• Annual Conference of KIPS
• /
• 2001.10b
• /
• pp.919-922
• /
• 2001

최근 인터넷의 확산에 따라 여러 가지 침해사고 발생이 증가하고 있어서 시스템을 안전하게 관리하기 위한 노력들이 행해지고 있다. 본 논문에서는 NFR의 N-code언어를 이용하여 Shieh 모델의 침입패턴을 탐지할 수 있는 규칙 기반 침입 탐지를 설계 및 구현한다. 제안하는 침입 탐지는 웹 기반에서 Shieh 침입 탐지 모델을 N-code 언어로 변환하여 침입 탐지여부를 쉽게 발견한다. 그리고 다양한 규칙들을 정의하고 이를 바탕으로 하여 취약점을 보완할 수 있도록 침입 탐지 시스템을 구현한다.

• Review of KIISC
• /
• v.25 no.1
• /
• pp.18-25
• /
• 2015

컴퓨터와 네트워크가 보안 상 안전하려면 무엇보다 사용되는 시스템 및 응용 프로그램에 보안약점이 없어야 한다. 보안약점은 공격자가 이용하여 제어 흐름을 탈취하거나 원하는 정보를 유출할 수 있게 하는 프로그램 상의 불완전한 부분을 뜻한다. 보안약점이 없는 프로그램을 만들기 위한 방법으로 시큐어 코딩 규칙을 정의하고, 프로그램 개발 단계에서 이를 적용하게 할 수 있다. 코딩 과정에서 시큐어 코딩 규칙을 준수하여 보안약점 발생을 억제하는 방법은 예방적 조치이다. 아무런 규칙 없이 코딩을 진행한 후 보안약점을 분석, 제거하는 방법보다 프로그래머들에게 부담이 적고, 정적 분석을 사용하여 보안약점을 분석하는 도구들의 치명적인 약점인 오탐 비율을 낮춘다. 이 글은 2014년까지 소프트웨어 개발 보안 센터를 중심으로 진행된 행정자치부의 C/C++, Java, PHP 프로그래밍 언어를 위한 시큐어 코딩 가이드에 대하여 설명한다.

• The Korean Society of Law and Medicine
• /
• v.23 no.2
• /
• pp.97-118
• /
• 2022

The use of diagnostic radiation in medical institutions is rapidly increasing. Accordingly, the collective effective dose is on the rise every year. Therefore, it is necessary to reduce the radiation exposure of the person undergoing the radiation examination as low as reasonably achievable. And we must establish a legal system to perform the safe management of radiation for diagnosis efficiently. In this way, I went over the problems of the Act and Subordinate Statutes regarding radiation safety management for diagnosis. As a result, the main contents are as follows. First, in the 「Medical Service Act」, there is no basis for the Safety Inspection Institute of Radiation and Radiation Exposure Measuring Institutes. And there are no provisions concerning delegation of administrative disposition. Therefore, it is necessary to secure legal justification by providing the basis for the Safety Inspection Institute of Radiation along with Radiation Exposure Measuring Institutes and the basis for administrative dispositions against these institutions in the 「Medical Service Act」. Second, the 「Rules on the Installation and Operation of Special Medical Equipment 」 should be integrated with the 「Rules on the Safety Management of Radiation Generators for Diagnostics」 to unify administrative procedures such as reporting for radiation special medical equipment for diagnosis. Third, in the case of violating the diagnostic radiation safety management standards in the 「Rules on the Safety Management of Radiation Generators for Diagnostics」, it is necessary to supplement the insufficient sanctions such as administrative disposition. Fourth, regulating diagnostic radiation and therapeutic radiation used in medical institutions with the dual legal system of the 「Medical Act」 and the 「Nuclear Safety Act」 is not efficient in the safety management of diagnostic radiation. Therefore, it is necessary to uniformly regulate diagnostic radiation and all medical radiation, including therapeutic radiation and nuclear medicine, in the 「Medical Service Act」 system.

• Proceedings of the KIEE Conference
• /
• 2009.07a
• /
• pp.2011_2012
• /
• 2009

내환경검증은 원자력발전소 안전성 관련 계통의 기기가 정상운전 및 설계기준 사고 환경에서 안전기능을 수행할 수 있는지를 검증하는 것이다. 기기검증 평가에 관한 사항은 원자력법시행규칙 '제19조의2(주기적안전성평가의 세부내용)에 따르며 세부평가 대상범위는 안전기능을 확보하기 위한 안전관련 전기기기, 기능이 상실되면 안전관련 기능 수행을 저해하는 비 안전관련 기기, 규제지침 Reg Guide 1.97에서 요구하는 사고 후 감시기기 등이며 국내의 경우에는 경수로형 원전 안전심사지침 제3.11에 따른 내환경검증 기계류 기기의 비금속 부품 등이 추가로 해당된다.

• Journal of Korea Ship Safrty Technology Authority
• /
• s.37
• /
• pp.88-97
• /
• 2014

새로운 선박을 설계하거나 기존의 규칙, 규정을 따르지 않는 대체설계를 수행할 경우에는 인명, 환경 및 재산 등과 관련한 선박의 안전성을 평가하고 기존 선박 이상의 안전성을 갖고 있음을 반드시 입증해야 한다. 그러나 기존의 IMO 공식안전성평가 등 기존의 위험도 기반 방법론, 절차 및 도구들은 실제 선박의 설계에 적용하는데 있어 여러 가지 문제점들을 나타내고 있다. 따라서 이러한 문제를 해결하고, 선박설계시 구체적으로 적용할 수 있는 세부적인 방법론을 개발하기 위해 동 연구를 수행하였다.

• Korean Journal of Construction Engineering and Management
• /
• v.21 no.4
• /
• pp.90-99
• /
• 2020

The construction industry is suffering from a large number of fatal accidents. As many field works are being conducted in a dangerous condition such as working at height and adverse weather, they are always exposed to safety accidents with high frequency and severity compared to other industries. Such risk is even larger in small construction sites, but studies that focus on combinatorial factors leading to fatal accidents in small construction sites are lacking. Thus, in order to reduce the fatal accidents in the construction industry, this study analyzed 1,438 occupational death accidents cases in small construction sites and, then, conducted the association rule analysis to extract ten combinatorial factors that frequently led to fatal accidents in small construction sites. Based on the extracted association rules, this study also discussed possible countermeasures to reduce the fatal accidents. The results were explained to experts, who agreed on the results of the study. This study contributes to the construction safety management theory by providing a detailed analysis of fatal accidents in small construction sites that can be used for developing and deploying safety policies and educations for small construction site workers.

• Journal of Navigation and Port Research
• /
• v.43 no.1
• /
• pp.33-41
• /
• 2019

In December 2012, a pile driving boat sunk off the coast of Ulsan port in Korea. The cause of capsizing of these boats was considered a complex problem. Although Korean Ship Safety Technology Authority concluded that leaders (cranes) of the vessel were designed with sufficient safety factors, National Forensic Service concluded that the capsizing was caused by the failure of leaders. This study reviewed the related laws, strength calculations, and structural analysis methods used by the Korea Ship Safety Technology Authority. In addition, numerical simulations were carried out on hydrodynamic analysis and structural analysis to analyze the cause of vessel capsizing based on the rules of the Korean Register of Shipping. The results were similar to those found by National Forensic Service. In conclusion, the study suggested that inspection especially for a pile driving boat subjected to the Korean Register of Shipping rules should be carried out to prevent the similar accident.

• Journal of Navigation and Port Research
• /
• v.38 no.1
• /
• pp.59-64
• /
• 2014

As global warming continues, the rate of ice melting in polar regions is increasing rapidly. The interest related to north polar route is increasing among not only countries near Arctic ocean but also the other countries, In the past, the classification society rule related to a design and operation of ship operating in polar area has been primarily amended by Russia, Norway and Finland located near Artic area. However recently International Maritime Organization decided to legislate the Polar Code to ensure safety of a ship operating in Arctic and Antarctic Ocean, and it is scheduled to be completed until 2014. The present paper focuses on the survey of the current enactment trends of Polar Code and suggests the confrontational strategy in related organization.

• The monthly packaging world
• /
• s.235
• /
• pp.105-109
• /
• 2012

식품의약품안전청은 안전상비의약품의 약국 외 판매를 도입하는 내용의 "약사법"이 개정(법률 제11421호, 2012. 5. 14.공포)됨에 따라 일반소비자가 안전상비의약품의 효능 효과, 용법 용량 등의 정보를 쉽고 정확하게 이해하여 안전하게 사용할 수 있도록 안전상비의약품의 기재요령을 정하고 기존 고시의 문제점을 보완하고자 의약품 표시 등에 관한 규정 일부개정고시(안)를 행정예고했다. 또한 식약청은 "의약품 표시 등에 관한 규정"이 이미 행정예고(식품의약품안전청 공고 제2012-120호, 2012. 6. 13) 되었으나 안전상비의약품의 용기나 포장에 허가 또는 신고사항 일부를 요약 기재할 수 있도록 "약사법 시행규칙"이 개정 추진됨에 따라 본 고시를 다시 행정예고한다고 밝혔다. 주요 내용에 대해 살펴본다.

• The KIPS Transactions:PartC
• /
• v.10C no.5
• /
• pp.525-532
• /
• 2003

This paper describes intrusion detection rule management using mobile agents. Intrusion detection can be divided into anomaly detection and misuse detection. Misuse detection is best suited for reliably detecting known use patterns. Misuse detection systems can detect many or all known attack patterns, but they are of little use for as yet unknown attack methods. Therefore, the introduction of mobile agents to provide computational security by constantly moving around the Internet and propagating rules is presented as a solution to misuse detection. This work presents a new approach for detecting intrusions, in which mobile agent mechanisms are used for security rules propagation. To evaluate the proposed approach, we compared the workload data between a rules propagation method using a mobile agent and a conventional method. Also, we simulated a rules management using NS-2 (Network Simulator) with respect to time.