• Proceedings of the Korea Information Processing Society Conference
• /
• 2019.10a
• /
• pp.405-406
• /
• 2019

ICS 해커들의 주요 목적은 재정적 이득, 기업간첩, 테러리스트 활동, 국가간의 사이버전쟁, 잘못된 윤리적 해킹 등의 이유들이 있다. 이에 따른 해킹 경로로는 산업제어 시스템이 공용 인터넷에 노출되는 경우, 기기 초기 설정을 방치, 장기간의 비밀번호 미 변경, 포트스캐닝, 구글 해킹 등이 있다. 이에 따른 대표적인 해킹방식 5 가지가 있는데 첫째, Shodan 을 이용한 일종의 검색해킹, 둘째, ZAP 툴을 이용하여 전수공격을 하는 패스워드 퍼징, 셋째, 목표 사이트의 취약점을 이용하여 인증을 우회하는 공격인 SQL Injection, 넷째, Modbus 툴을 이용한 해당 시설의 전압을 변경하는 네트워크 공격, 다섯째, zbgoodfind 툴을 통한 원격장치공격이 있다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2012.11a
• /
• pp.927-930
• /
• 2012

현대 사회가 정보화 시대로 변화하면서 다양해진 데이터와 민감한 데이터를 생산, 유통, 소비 하고 있다. 이렇듯 데이터의 활용 방안이 다양해짐에 따라 처리하는 데이터의 양이 많아지게 되었으며 데이터의 안전한 관리 중요성 또한 커지게 되었다. 현재 사용되고 있는 데이터베이스 보안 시스템중 하나인 내부정보 유출 방지기술은 데이터베이스의 내부 데이터 유출을 미연에 방지하는 부분에 중점이 맞추어진 기술이다. 따라서 데이터가 유출되는 현상에 대해서 적절한 대응을 하지 못하고 있다. 이러한 취약점을 보완하기 위하여 데이터 유출을 방지하고, 효율적으로 관리할 수 있는 모니터링 시스템이 필요하다. 본 논문에서는 데이터베이스의 안전한 관리를 위하여 내부 정보 유출 탐지에 효율적인 데이터 베이스 내부자료 모니터링 시스템을 제안한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2023.05a
• /
• pp.562-564
• /
• 2023

스마트폰 발전으로 인한 SNS(Social Network Service), 웹 검색 및 활용 등 편리함과 유용성을 가져다 주었지만 안드로이드 APP의 개방성으로 인하여 프로그램의 원칙적 특성을 악용한 취약점이 발생하고 있다. 이를 대응하는 해결방안으로 API에 대한 요청 데이터를 모듈을 통하여 로그 값을 수집한다. 수집된 데이터는 로그 값을 시간을 기준으로 라벨링하여 이상치 탐지 알고리즘인 OCSVM의 이상치 평균으로 사용하여 실시간 데이터 영향을 받는 하이퍼파라미터 C 와 r 값을 Grid Search 기법을 통해 조정함으로써 최적의 파라미터 값을 찾는 시스템을 제안한다.

• KIPS Transactions on Computer and Communication Systems
• /
• v.12 no.3
• /
• pp.111-118
• /
• 2023

Cyber attacks are increasing worldwide, and attacks on personal privacy such as CCTV and IP camera hacking are also increasing. If you search for IP camera hacking methods in spaces such as YouTube, SNS, and the dark web, you can easily get data and hacking programs are also on sale. If you use an IP camera that has vulnerabilities used by hacking programs, you easily get hacked even if you change your password regularly or use a complex password including special characters, uppercase and lowercase letters, and numbers. Although news and media have raised concerns about the security of IP cameras and suggested measures to prevent damage, hacking incidents continue to occur. In order to prevent such hacking damage, it is necessary to identify the cause of the hacking incident and take concrete measures. First, we analyzed weak account settings and web server vulnerabilities of IP cameras, which are the causes of IP camera hacking, and suggested solutions. In addition, as a specific countermeasure against hacking, it is proposed to add a function to receive a notification when an IP camera is connected and a function to save the connection history. If there is such a function, the fact of damage can be recognized immediately, and important data can be left in arresting criminals. Therefore, in this paper, we propose a method to increase the safety from hacking by using the connection notification function and logging function of the IP camera.

• Journal of the Korea Convergence Society
• /
• v.12 no.5
• /
• pp.9-16
• /
• 2021

Due to the prolonged infectious disease of COVID-19 worldwide, there are various security threats due to network attacks on Internet of Things devices that are vulnerable to telecommuting. Initially, users of Internet of Things devices were exploited for vulnerabilities in Remote Desktop Protocol, spear phishing and APT attacks. Since then, the technology of network attacks has gradually evolved, exploiting the simple service discovery protocol of Internet of Things devices, and DRDoS attacks have continued to increase. Existing SSDPs are accessible to unauthorized devices on the network, resulting in problems with information disclosure and amplification attacks on SSDP servers. To compensate for the problem with the authentication procedure of existing SSDPs, we propose a hash-based SSDP that encrypts server-specific information with hash and adds authentication fields to both Notify and M-Search message packets to determine whether an authorized IoT device is present.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.15 no.1
• /
• pp.195-202
• /
• 2011

RFID(Radio Frequency IDentification) is a system to identify objects and its usage is being extended to distribution, healthcare, and air&port etc. RFID is a contactless system environment, and reducing tag authentication time is important because multiple tags are identified at the same time. Studies about RFID system so far is, however, mostly to improve security vulnerability in the tag authentication process. Therefore, this paper suggests an efficient scheme to decrease the time of tag authentication which is also safe for the security of tag authentication process. The proposed scheme cuts down on the tag ID search time because it searches only the classified relevant ID in the database, which is one of many components of RFID system, by using identification bits for tag ID search. Consequently, the suggested scheme decreases process time for tag ID authentication by reducing the processing time and the load of the database. It also brings performance improvement of RFID system as it improves the energy applicability of passive tag.

• The Journal of the Convergence on Culture Technology
• /
• v.8 no.5
• /
• pp.431-435
• /
• 2022

The fields of STEM (Science, Technology, Engineering and Medicine) are changing rapidly. Recently, with the remarkable development of Internet and Web technologies, an environment that can be accessed worldwide has been created, thereby lowering the barriers to share STEM knowledge and information. The purpose of this study is to derive improvements by evaluating users' satisfaction with the information system developed by applying the open access model in the STEM field. Through an online survey using a structured questionnaire, a total of 204 users participated from January to February. The collected data were analyzed using quantitative statistical techniques. IPA (Importance Performance Analysis) technique was used. By identifying the importance and satisfaction (performance) between variables, areas with relatively low satisfaction compared to importance were derived. Users' overall satisfaction with the open access information system was 81.2 points and social reliability was 85.9 points, which were relatively high, respectively. What should be paid attention to in this study is the satisfaction with the system use environment, which is the most vulnerable area.

• The KIPS Transactions:PartC
• /
• v.9C no.3
• /
• pp.359-366
• /
• 2002

Nowadays, the hacking techniques are developed increasingly with wide use of internet. The recent type of scanning attack is appeared in against with multiple target systems on the large scaled domain rather than single network of an organization. The development of scan detection management system which can detect and analyze scan activities is necessary to prevent effectively those attacking at the central system. The scan detection management system is useful for effective utilization of various detection information that received from scan detection agents. Real time scan detection management system that can do the integrated analysis of high lever more that having suitable construction in environment of large scale network is developed.

• Korean Journal of Microbiology
• /
• v.43 no.3
• /
• pp.227-231
• /
• 2007

Many of antimicrobial components used in the mouthwash have disadvantages such as coloring of periodontal tissue and homing sensation. To find the more biocompatible antimicrobial agent, we have screened the 2,125 kinds of natural plant extracts obtained from by the Plant Extract Bank (Daejeon, Korea). The antimicrobial activity was determined by spectrophotometric growth inhibition assay for the major dental pathogens. For the Porphyromonas gingivalis, 19 plant extracts had an antimicrobial activity, 17 plant extracts for the Prevotella intermedia, 45 plant extracts for the Haemophilus actinomycetemcomitans and 85 plant extracts for the Streptococcus mutans. Among these effective extracts, 8 kind of natural plant extracts had an antimicrobial activity for more than 3 species of dental pathogens. In our experiment, Cudrania tricuspidata, Morus bombycis and Mallotus japonicas have antibacterial effects on the all kinds of major dental pathogens. Therefore these plant extracts have a possibility to be a candidate for major antibacterial components in dental products.

• The Journal of the Institute of Internet, Broadcasting and Communication
• /
• v.15 no.6
• /
• pp.25-30
• /
• 2015

One of the hottest issues of security is information leakage of financial institution. Financial institutions including commercial banks are frequently threatened by attempts of leakage through hacking and vulnerability, and this information is centered on personal information of their clients. Through this study, I found out that security managers of financial institutions are trying to prevent the leaking of private information, but in fact most of them barely know where their personal information is. Even if they know where it is and trace the data, it is often found in unexpected places. Because there is a lot of waste in time and human resources as search is done manually, we have understood that responding to IT Compliance requires a lot of effort. This study is to improve IT Compliance response and protect information leakage through monitoring PC and servers, the main storage of personal information by automated system, periodically.