• Proceedings of the Korea Information Processing Society Conference
• /
• 2009.11a
• /
• pp.139-140
• /
• 2009

양성자 기반 공학 기술 개발 사업단은 20MeV 양성자 가속기를 운전 중이며, 진공, 빔 계측, 전원 등의 장치에 대한 제어 시스템을 개발 운영 중이다. 대형 입자 가속기를 위한 제어 시스템의 전체 네트워크는 사용자 인터페이스와 제어계가 단일 네트워크를 공유하고 있으며 EPICS(Experimental Physics and Industrial Control System) CA(Channel Access)통신을 이용하여 데이터를 상호 교환한다. 그러나 단일 네트워크를 사용함으로서 관리자만이 제어해야 할 데이터는 많은 클라이언트에게 노출되는 문제점이 있다. 그러므로 클라이언트의 접근을 제어하여 제어계로부터 전달되는 신호들의 안정성과 보안성을 유지할 수 있는 방법이 요구된다. 본 논문에서는 제어시스템에 보안성과 안정성을 유지하기 위하여 클라이언트를 Control Network, 제어계를 Machine Network로 분산시키고 통신 중계기 역할을 하는 CA Gateway를 적용하여 클라이언트에게 접근 권한을 주는 기법을 제시하고 구현 및 그 결과를 보고한다.

• Journal of the Korea Society of Computer and Information
• /
• v.18 no.6
• /
• pp.63-70
• /
• 2013

In accordance with the advancement of IT, application systems with various and complex functions are being required. Such application systems are typically built based on database in order to manage data efficiently. But most object-oriented analysis design methodologies for developing web application systems have not been providing interconnections with the database. Since the requirements regarding the security issues increased, the importance of security has become emphasized. However, since the security is usually considered at the last step of development, it is difficult to apply the security during the whole process of system development, from the requirement analysis to implementation. Therefore, this paper suggests an object-oriented analysis and design methodology for secure database design from the requirement analysis to implementation. This object-oriented analysis and design methodology for secure database design offers correlations with database that most existing object-oriented analysis and design methodologies could not provide. It also uses UMLsec, the modeling language, to apply security into database design. In addition, in order to implement security, RBAC (Role Based Access Control) of relational database is used.

• Convergence Security Journal
• /
• v.9 no.2
• /
• pp.49-58
• /
• 2009

In medical Institution, Electronic Health Record (EHR) is "must access information" to medical staff considering it as medical information. However, this unnecessary exploration of personal information must be treated confidentially because the information is highly related to other's private concerns. It is necessary that medical workers should be also restricted to their access to EHR depending on their roles and duties. As the result, this article explains that "EHR access control will be executed by differentiating authorized medical staff from non medical-related staff as well as EHR access will be only permitted to authorized medical staff depending on their work status conditions. By using Advanced RBAC model on medical situation, we expect to minimize unnecessary leak of EHR information; especially, emergency medical care is needed, access control is highly required depending on a person in charge of the cases or not, and restricted medical information defined by the patient one-self is only allowed to be accessed.

• Journal of Korea Society of Industrial Information Systems
• /
• v.4 no.4
• /
• pp.137-142
• /
• 1999

This paper applies role-based access control(RBAC) policy for solving security problems when it will be operated business of many field on the Linux sever environments and designed RBAC＿Linux security systems that it is possible to manage security systems on the Linux environments. In this paper, the RBAC_Linux is security system which is designed for applicable on the Linux enviroment The applying RBAC model is based on RBAC96 model due to Sandhu et al. Therefor, the using designed RBAC_Linux security system on the Linux sever system have the advantage of the following: it can be implemented sever system without modifying its source code, high migration, easy and simple of secure managing.

• Review of KIISC
• /
• v.9 no.2
• /
• pp.45-58
• /
• 1999

역할기반 접근제어(RBAC)는 기업을 위한 응용분야에서 특별히 주목을 받고 있는 보안 기술이다. 그 이유는 RBAC이 대규모의 네트워크로 연결된 응용분야에서 보안 관리의 복잡성과 비용을 절감시켜 주기 때문이다. 본 기술 논문은 지금까지 연구된 RBAC의 연구 결과를 소개하고 향후의 과제에 대해 제시하는데 그 목적이 있다. 먼저 RBAC의 출현배경 과 기본 모델의 여러 요소들에 대해 소개한다. 그리고 RBSAC에 관련된 연구동향을 적용시 스템을 중심으로 분석한다. 특별히 Web 환경에서 RBAC의 적용에 초점을맞춘다. Web 환 경 특별히 인트라넷에서의 보안 필요성을 제시하고 여기에 적용된 RBSC(인터라넷-RBAC) 의 내용과 더불어 인트라넷-RBAC의 구현에 대해서도 소개한다. 마지막으로 향후에 추가적 으로 연구되어야할 과제들에 대해 분석한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.10 no.3
• /
• pp.49-62
• /
• 2000

Role-Based Access Control(RBAC) has recently received considerable attention as a alternative to traditional discretionary and mandatory access control to apply variant organizations function hierarchy of commercial or govemment. Also RBAC provides a delegation that is one of control principles in organization. In general delegation occurring in real organization is performed by an user giving permissions to another user. But, RBAC cannot implement these user-level delegation correctly. And delegation result in security problem such as destroying separation of duty policy information disclosure due to inappro-priate delegation. Besides security adminsitrator directly deals with that problem. In this thesis we suggests some methods that is created by the user.

• Journal of the Korea Society of Computer and Information
• /
• v.14 no.1
• /
• pp.25-33
• /
• 2009

In various fields, ISO/IEC 11179-based MDR (Metadata Registry) systems have been developed. However, the current systems do not observe the standard, so inconsistency issue between metadata arises. Most of all, there exist several problems because ISO/IEC 11179 provides no standardized access method. SQL/MDR has been suggested to resolve those problems. SQL/MDR supports search operations, but it does not provide operations for vaild building and safe access for MDR. This paper, in the aforementioned issues, suggests MCL(Metadata Control Language) to guarantee safe and easy access control. MCL offers predefined roles and authority of user groups defined in ISO/IEC 11179 Part 6, and users are assigned to a proper user group. With such a way, MCL increases usability and security.

• Journal of the Korea Convergence Society
• /
• v.9 no.12
• /
• pp.61-68
• /
• 2018

As the smartphone and mobile environment develop, the time and space constraints for individual work performance are disappearing. Companies can reduce costs and expand their business quickly through cloud computing. As the use of various cloud expands, the boundaries of users, data, and applications are disappearing. Traditional security approaches based on boundaries (Perimeter) are losing their utility in the cloud environment. This paper describes the limitations of existing network access control (NAC) in a cloud environment and suggests network security technology that complements it. The study explains the SDP and combines SDP(Software Defined Perimeter) to overcome the limitations of NAC, while at the same time explaining its role as a new framework for supporting the cloud environment. The new framework proposed in this paper suggests a software-based network security solution that supports physical and software parts, providing identity-based access control, encrypted segment management, and dynamic policy management, not IP-based.

• Journal of Korea Multimedia Society
• /
• v.13 no.1
• /
• pp.133-142
• /
• 2010

As the ubiquitous technology has penetrated into almost every aspect of modern life, the research of the security technology to solve the weakness of security in the ubiquitous environment is received much attention. Because, however, today's security systems are usually based on the fixed rules, many security systems can not handle diverse situations in the ubiquitous environment appropriately. Although many existing researches on context aware security service are based on ACL (Access Control List) or RBAC (Role Based Access Control), they have an overhead in the management of security policy and can not manipulate unexpected situations. Therefore, in this paper, we propose a context-aware security service providing multiple authentications and authorization from a security level which is decided dynamically in a context-aware environment using FCM (Fuzzy C-Means) clustering algorithm and Fuzzy Decision Tree. We show proposed model can solve typical conflict problems of RBAC system due to the fixed rules and improve overhead problem in the security policy management. We expect to apply the proposed model to the various applications using contextual information of the user such as healthcare system, rescue systems, and so on.

• Journal of KIISE
• /
• v.42 no.12
• /
• pp.1611-1622
• /
• 2015

Although Android systems provide a permission-based access control mechanism and demand a user to decide whether to install an app based on its permission list, many users tend to ignore this phase. Thus, an improved method is necessary for users to intuitively make informed decisions when installing a new app. In this paper, with regard to the permission-based access control system, we present a novel approach based on a machine-learning technique in order to support a user decision-making on the fly. We apply the K-NN (K-Nearest Neighbors) classification algorithm with necessary weighted modifications for malicious app classification, and use 152 Android permissions as features. Our experiment shows a superior classification result (93.5% accuracy) compared to other previous work. We expect that our method can help users make informed decisions at the installation step.