• Journal of the Korea Society of Computer and Information
• /
• v.29 no.5
• /
• pp.93-100
• /
• 2024

With the advent of the Fourth Industrial Revolution, cutting-edge technologies such as artificial intelligence, big data, the Internet of Things, and cloud computing are driving innovation across industries. These technologies are generating massive amounts of data that many companies are leveraging. However, there is a notable reluctance among users to share sensitive information due to the privacy risks associated with collecting personal data. This is particularly evident in the healthcare sector, where the collection of sensitive information such as patients' medical conditions poses significant challenges, with privacy concerns hindering data collection and analysis. This research presents a novel technique for collecting and analyzing medical data that not only preserves privacy, but also effectively extracts statistical information. This method goes beyond basic data collection by incorporating a strategy to efficiently mine statistical data while maintaining privacy. Performance evaluations using real-world data have shown that the propose technique outperforms existing methods in extracting meaningful statistical insights.

• Information and Communications Magazine
• /
• v.28 no.1
• /
• pp.29-35
• /
• 2010

현재 우리사회는 인터넷의 진화와 정보통신기술의 비약적인 발전으로 급속하게 변화하고 있으며, 스마트폰의 확산과 무선 인터넷 활성화, 신규 융합서비스가 급격한 성장세를 보이며 인터넷을 기반으로 한 컨버전스가 산업 발전의 새로운 패러다임으로 대두되고 있다. 이러한 패러다임의 변화는 세계 최고 수준의 IT 인프라를 기반으로 새로운 비즈니스 창출과 사회현안 해결을 위한 IT 활용의 중요성을 말해주며, 우리의 일상생활 전반에 큰 변화를 가져올 것이다. 그러나 정보화의 진전이 진행될수록 이에 대한 역기능 또한 다양해지고 심화되어 사회적 이슈로 대두되고 있는 실정이다. 인터넷의 익명성과 비대면성으로 인해 프라이버시 침해, 불건전 정보의 유통, 중독현상 등 개인과 사회의 피해가 점증하고 있다. 따라서 IT 발전과 활용에 따른 인터넷 진흥과 보호의 균형 있고 체계적인 대책 마련, 책임 의식과 윤리성 강화, 협력체계 구축이 절실히 요구되는 시점이다. 본고에서는 이러한 환경 변화에 대응한 한국인터넷진흥원의 중점 추진과제로서 인터넷 정책 개발과 활성화 기반 마련, 건전한 인터넷 문화와 이용환경 조성, 신속한 침해사고 대응과 선순환 구조 마련, 커뮤니케이션 패키지를 통한 국제협력 활동 등을 살펴보고 사회적 공감대 형성과 적극적인 참여를 도모하고자 한다.

• Journal of Internet Computing and Services
• /
• v.21 no.3
• /
• pp.1-9
• /
• 2020

Along with the growth of Blockchain, DApp (Distributed Application) is getting attention. As interest in DApp grows, market size continues to grow and many developers participate in development. Many developers are using API(Application Programming Interface) services to mediate Blockchain nodes, such as Infura, for DApp development. However, when using such a service, there is a serious risk that the API service operator can violate the user's privacy by 1 to 1 matching the account address of the Transaction executed by the DApp user with the IP address of the DApp user. It can have an adverse effect on the reliability of public Blockchains that need to provide users with a secure DApp service environment. The proposed Blockchain platform is expected to provide user privacy protection from API services and provide a reliable DApp use environment that existing Blockchain platforms did not provide. It is also expected to help to activate DApp and increase the number of DApp users, which has not been activated due to the risk of an existing privacy breach.

• Journal of Internet Computing and Services
• /
• v.20 no.6
• /
• pp.105-117
• /
• 2019

Bitcoin, which can be classified as a cryptocurrency, has attracted attention from various industries because it is an innovative digital currency and the beginning of a Blockchain system. However, as the research on Bitcoin progressed, several security vulnerabilities and possible attacks were analyzed. Among them, the security problem caused by the transparency of the Blockchain database prevents the Blockchain system from being applied to various fields. This vulnerability is further classified as the weak anonymity of participating nodes and privacy problem due to disclosure of transaction details. In recent years, several countermeasures have been developed against these vulnerabilities. In this paper, we first describe the main features of the public and private Blockchain, and explain privacy, unlinkability and anonymity. And, three public Blockchain platforms, Dash, Zcash and Monero which are derived from Bitcoin, and Hyperledger Fabric which is a private Blockchain platform, are examined. And we analyze the operating principles of the protocols applied on each platform. In addition, we classify the applied technologies into anonymity and privacy protection in detail, analyze the advantages and disadvantages, and compare the features and relative performance of the platforms based on the computational speed of the applied cryptographic mechanisms.

• Journal of Digital Convergence
• /
• v.14 no.6
• /
• pp.405-413
• /
• 2016

To solve various problems of the Internet as well as to enhance network performance, various future Internet architectures utilize cached data in network nodes or in proxy servers. Named-data networking (NDN), one of future Internet architectures, implements in-network data caching functionality, and then responds itself to request messages. However, it can cause users' privacy invasion that the publisher of data can not engage in the sharing/using process of the data anymore after the data was cached in-network. So NDN implements both encryption-based access control and group access control. But, since such access control schemes need to exchange additional messages in order to search for a proper access control list and keys, it causes inefficiency. This paper surveys the access control schemes of NDN, and then proposes an improved scheme.

• Asia-pacific Journal of Multimedia Services Convergent with Art, Humanities, and Sociology
• /
• v.6 no.3
• /
• pp.461-470
• /
• 2016

As IoT is broadly used in many fields, the security of IoT is becoming especially important and critical issues. Security and privacy are the key issues for IoT applications, and still faced with some enormous challenges. Sensor has limited resources such as computing power, memory, battery. By means of deeply analyzing the security architecture and features in security framework. While a number of researchers have explored such security challenges and open problems in IoT, there is an unfortunate lack of a systematic study of the security challenges in the IoT landscape. This special issue features recent and emerging advances IoT architecture, protocols, services and applications. The alternative method is IoT security gateway. In this paper, we surveyed the demands and requirements. By means of deeply analyzing the security architecture and features, we analyzed the demands and requirements for security based on gateway application.

• Review of KIISC
• /
• v.23 no.3
• /
• pp.56-60
• /
• 2013

본 논문은 온라인에 공개된 다양한 개인정보의 위험도를 분석하는 기술을 제안한다. 인터넷, SNS에 공개된 다양한 데이터를 수집, 분석하여 개인성향을 파악하고 타겟팅하는 가운데, 분산된 정보를 조합하고 추론하면 공개자의 의도와는 달리 신상이나 민감정보가 노출될 가능성이 크다. 본 논문에서는 이러한 데이터 수집 및 분석을 직접 수행하여 개인정보의 위험도를 분석할 수 있는 기술을 제안한다. 제안 기술이 개발되면, 개인정보 위험도에 따른 클라이언트, 웹사이트, 인터넷 전체 규모의 프라이버시 필터링이 가능해질 것으로 기대된다.

• Information and Communications Magazine
• /
• v.32 no.10
• /
• pp.65-70
• /
• 2015

클라우드 컴퓨팅은 IT 자원(스토리지, 서버, 소프트웨어, 네트워크 등)을 인터넷 기술을 이용하여 서비스 형태로 제공하는 기술이다. 최근 클라우드 컴퓨팅 서비스의 영역이 지속적으로 확대되고 있으며 특히 사물인터넷 (Internet of Things) 등의 IT 기술 발전에 따라 가정, 의료 등에 클라우드 컴퓨팅을 접목하여 활용할 수 있는 방법이 활발히 연구되고 있다. 그러나 클라우드 컴퓨팅 서비스의 확산과 더불어 알려지지 않은 새로운 보안 위협, 클라우드 서비스 고객의 자기정보 통제권 상실, 개인정보 유출로 인해 발생하는 프라이버시 침해 또한 이슈가 되고 있다. 본 논문에서는 클라우드 보안을 위한 국제 표준화 기구와 해당 기구에서 추진 중인 국제 표준화 현황에 대해 살펴본다.

• Review of KIISC
• /
• v.13 no.5
• /
• pp.70-75
• /
• 2003

인터넷 이용의 급증과 더불어 컴퓨터바이러스, 해킹 및 프라이버시 침해 등 각종 사이버범죄도 또한 날이 갈수록 크게 증가하고 있다. 또한 인터넷과 같이 글로벌한 네트워크 환경에서 발생하는 범죄는 많은 경우 필연적으로 '국제적' 성격을 띠며, 따라서 개별국가의 노력만으로는 범죄를 충분히 방지하기 어렵다. 따라서 다수 국가가 사이버범죄에 대한 수사와 처벌을 위한 협력의 틀을 마련하기 위해 만든 사이버범죄방지협약(Convention on Cyber-Crime)은 컴퓨터시스템, 네트워크 또는 데이터를 대상으로 하거나 이를 오용한 다양한 형태의 범죄행위의 방지 및 처벌과 관련하여 실체법적 측면과 절차법적 측면에서 그 중요성이 매우 높다. 이 글에서는 이 사이버범죄방지협약에 대해 그 제정과정 및 주요내용을 살펴보고, 다음으로 우리법과 비교$.$분석하였다.

• Journal of the Korea Convergence Society
• /
• v.9 no.4
• /
• pp.9-14
• /
• 2018

Recently, as the internet speed is getting faster, in the cloud environment, the service receiving device is changing from a general PC to a compact device such as a mobile phone or a tablet PC. Since handheld devices such as mobile phones or tablet PCs are often used in wireless rather than wired, there are many problems that personal information may be exposed maliciously from a third party. In this paper, we propose a user privacy protection scheme through a duplicate duplicate key generation process which can safely protect user 's privacy from third party among cloud services being served through various wireless media. The proposed scheme is used to synchronize the duplicated key between the server and the intermediary device, and aims at shortening the time of the authentication process protecting the user 's privacy. In this case, the proposed scheme uses Interleave() function and random number to synchronize the server and the intermediary device, so it can safely prevent the malicious attack of the third party.