• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.7 no.3
• /
• pp.117-128
• /
• 1997

When computer systems with mandatory access control mechanism are interconnected each other for enforcing the MHS(Message Handling System) security on the multilevel secure distributed network environment, illegal information flow may occurs due to the unexpected cascade vulnerability problem. In this paper, new MHS security policy and security property functions are proposed for preventing the cascade vulnerability.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.33 no.2
• /
• pp.253-266
• /
• 2023

The Null Pointer Dereference vulnerability is a significant vulnerability that can cause severe attacks such as denial-of-service. Previous research has proposed methods for detecting vulnerabilities, but large and complex programs pose a challenge to their efficiency. In this paper, we present a lightweight tool for detecting specific functions in large binaryprograms through symbolizing variables and emulating program execution. The tool detects vulnerabilities through data dependency analysis and heuristics in each execution path. While our tool had an 8% higher false positive rate than the bap_toolkit, it detected all existing vulnerabilities in our dataset.

• Journal of Korean Society of Coastal and Ocean Engineers
• /
• v.22 no.4
• /
• pp.224-229
• /
• 2010

Collision fragility analysis of offshore bridge by ship was performed. Collision velocity and angle were chosen as random variables then collision of 18,000DWT and 30,000DWT ships with bridge was analyzed. Displacement response surface of bridge by ship collision was estimated by varying ship velocity from 2 m/s to 7 m/s. Using the result of reliability analysis, fragility curves of collision was established and risk of offshore bridge to collision velocity as median and log-standard deviation was presented.

• Proceedings of the Korea Water Resources Association Conference
• /
• 2018.05a
• /
• pp.419-419
• /
• 2018

기후변화로 인한 홍수피해의 빈도와 규모가 증가함에 따라 미래 홍수취약성은 갈수록 증가할 것으로 전망된다. 이를 대비하기 위해서는 지역별 기후변화를 고려한 홍수취약성 평가를 통해 적절한 적응 정책을 수립하여야 한다. 본 연구에서는 지역별 홍수취약성을 평가하기 위해 홍수취약성지수(Flood Vulnerability Index, FVI)를 새롭게 선정하였다. FVI는 3가지 구성요소의 결합으로 산정되며, 피해의 원인이 되는 압력지수(Pressure Index), 물리적 피해 현황을 나타내는 현상지수(State Index), 대응할 수 있는 능력인 대책지수(Response Index)의 함수로 나타낸다. 압력지수는 기후, 유역, 사회특성에 따라 세부지표를 구분하였고, 현상지수는 홍수피해 비율, 대책지수는 기술 및 사회적 특성을 기준으로 하였다. 따라서, 압력지수 및 현상지수가 클수록 홍수피해에 취약함을 나타내고, 대책지수가 클수록 취약성이 저감되게 된다. 연구 대상 지역은 최근 집중호우로 인해 많은 홍수피해가 발생한 금강유역을 선정하였고, 과거 홍수 피해액 자료를 사용하여 선정된 지수의 적용성을 검토하였다. 또한, 기후변화를 고려하기 위해 27개의 GCMs (Global Climate Models) 중 홍수를 가장 잘 설명하는 5개의 대표시나리오와 2개의 배출시나리오(RCP4.5, RCP8.5)를 사용하였으며, 과거(2010년대) 및 2030년대, 2050년대, 2080년대의 홍수취약성지수를 산정하여 결과를 분석하였다. Spearmans's rank correlation coefficient를 사용하여 과거 10년간 실제 홍수 피해액의 평균값과 FVI를 비교한 결과 선정된 지수가 홍수피해를 적절히 설명하는 것으로 나타났다. 대표시나리오를 사용한 미래 홍수취약성 분석 결과, 용담댐 유역에서 홍수취약성이 증가하는 것으로 나타났으며 지역별 상대적 취약성전망 결과는 대부분 과거와 비슷하였다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2007.11a
• /
• pp.1266-1269
• /
• 2007

IPv6 환경에서는 NDP(Neighbor Discovery Protocol)를 이용한 주소 자동 설정 메커니즘을 지원한다. 그러나, NDP 는 메시지 내 중요 정보가 네트워크 상에 그대로 노출됨으로 인해 각종 공격에 취약하다. 이러한 취약성을 극복하기 위해, CGA(Cryptographically Generated Address)를 사용하여 주소의 소유권 증명이 가능한 SEND(SEcure Neighbor Discovery)가 도입되었다. 그러나 SEND 는 높은 비용 연산으로 인해 모바일 기기 등에 적용하는데 한계점을 가진다. SEND 의 한계점을 보완하고자 해쉬 함수를 이용해 주소 자동 설정에 사용되는 임시 주소를 감추는 기법이 제안되었다. 이 기법은 DAD(Duplicate Address Detection) 과정 중 SEND 수준의 보안을 제공하면서도 빠르게 동작할 수 있는 장점을 갖는다. 본 논문에서는 리눅스 환경에서 제안 기법을 구현해 보고, 주소 생성 시간 측정 및 DAD 과정에서 드러난 서비스 거부 공격에 대한 안전성을 검증한다.

• Journal of Internet Computing and Services
• /
• v.12 no.6
• /
• pp.139-147
• /
• 2011

We proposed the secure and efficient passive RFID protocol which is based on one-way hash based low-cost authentication protocol (OHLCAP). The paper introduces OHLCAP and the vulnerabilities of OHLCAP and suggests security solutions by analyzing them. Afterwards, The paper presents the proposed protocol and demonstrates computational performance and security of the protocol. This protocol not only has the resistances against eavesdropping attack, impersonation attack, desynchronization attack, and replay attack but also provides untraceability and forward secrecy.

• KSCE Journal of Civil and Environmental Engineering Research
• /
• v.31 no.6B
• /
• pp.551-563
• /
• 2011

Water resource projects need an enormous national budget. Therefore, a reasonable and reliable decision making is required for the planning of water resource projects, but decision making has been mostly performed by economic analysis. The objective of this study is to develop a Multi-criteria Decision Making(MCDM) model which can assess the project in various aspects for the selection of preferable alternative and determination of investment priority in water resource projects. In this study, the criteria involves economic feasibility, policies, vulnerability, and sub-items which have weights obtained from the expert survey for the consistent evaluation. We also derived the utility function considering risk trend of each item based on the expert survey. Then, the total score was estimated by weights of each item and utility score of each attribute. The results show that vulnerability is a major contributor for the criteria. This study will contribute to the selection of proper water resource projects considering efficiency of project and fairness for vulnerable area.

• Economic and Environmental Geology
• /
• v.46 no.4
• /
• pp.301-312
• /
• 2013

Landslides are caused by complex interaction among a large number of interrelated factors such as topography, geology, forest and soils. In this study, a comparative study was carried out using fuzzy relationship method and artificial neural network to evaluate landslide susceptibility. For landslide susceptibility mapping, maps of the landslide occurrence locations, slope angle, aspect, curvature, lithology, soil drainage, soil depth, soil texture, forest type, forest age, forest diameter and forest density were constructed from the spatial data sets. In fuzzy relation analysis, the membership values for each category of thematic layers have been determined using the cosine amplitude method. Then the integration of different thematic layers to produce landslide susceptibility map was performed by Cartesian product operation. In artificial neural network analysis, the relative weight values for causative factors were determined by back propagation algorithm. Landslide susceptibility maps prepared by two approaches were validated by ROC(Receiver Operating Characteristic) curve and AUC(Area Under the Curve). Based on the validation results, both approaches show excellent performance to predict the landslide susceptibility but the performance of the artificial neural network was superior in this study area.

• Journal of the Korean Society of Hazard Mitigation
• /
• v.7 no.4
• /
• pp.1-12
• /
• 2007

A method for assessing fatigue vulnerability of steel bridge members considering corrosion and truck traffic variation with time is proposed to evaluate the reduction of fatigue strength in steel bridge members. A fatigue limit state function including corrosion and traffic variation effect is established. The interaction between the average corrosion depth and the fatigue strength reduction factor is applied to the limit state function as the reduction term of strength. Three types of truck traffic change is modeled for representing real traffic change trend. Monte-Carlo simulation method is used for reliability analysis which provides the data to obtain fatigue vulnerability curves. The estimation method proposed was verified by comparing with the results of reference study and applying to the steel bridges in service.

• Journal of Korean Society of Coastal and Ocean Engineers
• /
• v.27 no.5
• /
• pp.304-314
• /
• 2015

We have reviewed the current status of coastal vulnerability index(CVI) to be guided into an appropriate CVI development for Korean coast and applied a methodology into the east coast of Korea to quantify coastal vulnerability by future sea_level rise. The CVIs reviewed includes USGS CVI, sea_level rise CVI, compound CVI, and multi scale CVI. The USGS CVI, expressed into the external forcing of sea_level rise, wave and tide, and adaptive capacity of morphology, erosion and slope, is adopted here for CVI quantification. The range of CVI is 1.826~22.361 with a mean of 7.085 for present condition and increases into 2.887~30.619 with a mean of 12.361 for the year of 2100(1 m sea_level rise). The index "VERY HIGH" is currently 8.57% of the coast and occupies 35.56% in 2100. The pattern of CVI change by sea_level rise is different to different local areas, and Gangneung, Yangyang and Goseong show the highest increase. The land use pattern in the "VERY HIGH" index is dominated by both human system of housing complex, road, cropland, etc, and natural system of sand, wetland, forestry, etc., which suggests existing land utilization should be reframed in the era of climate change. Though CVI approach is highly efficient to deal with a large set of climate scenarios entailed in climate impact assessment due to uncertainties, we also propose three_level assessment for the application of CVI methodology in the site specific adaptation such as first screening assessment by CVI, second scoping assessment by impact model, and final risk quantification with the result of impact model.