• Proceedings of the Korea Information Processing Society Conference
• /
• 2020.11a
• /
• pp.920-923
• /
• 2020

사이버 공격이 더욱 지능화됨에 따라 기존의 침입 탐지 시스템(Intrusion Detection System)은 기존의 저장된 패턴에서 벗어난 지능형 공격을 탐지하기에 적절하지 않다. 딥러닝(Deep Learning) 기반 침입 탐지는 새로운 탐지 규칙을 생성하는데 적절하다. 그 이유는 딥러닝은 데이터 학습을 통해 새로운 침입 규칙을 자체적으로 생성하기 때문이다. 침입 탐지 시스템 데이터 세트는 가장 널리 사용되는 KDD99 데이터와 LID-DS(Leipzig Intrusion Detection-Data Set)를 사용했다. 본 논문에서는 1차원 벡터를 이미지로 변환하고 CNN(Convolutional Neural Network)을 적용하여 두 데이터 세트에 대한 성능을 실험했다. 평가를 위해 Accuracy, Precision, Recall 및 F1-Score 지표를 측정했다. 그 결과 LID-DS 데이터 세트의 Accuracy가 KDD99 데이터 세트의 Accuracy 보다 약 8% 높은 것을 확인했다. 또한, 1차원 벡터에 대한 데이터를 Kibana를 사용하여 데이터를 시각화하여 대용량 데이터를 한눈에 보기 어려운 단점을 해결하는 방법을 제안한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2020.05a
• /
• pp.526-529
• /
• 2020

최근 네트워크 환경에 대한 공격이 급속도로 고도화 및 지능화 되고 있기에, 기존의 시그니처 기반 침입탐지 시스템은 한계점이 명확해지고 있다. 이러한 문제를 해결하기 위해서 기계학습 기반의 침입 탐지 시스템에 대한 연구가 활발히 진행되고 있지만 기계학습을 침입 탐지에 이용하기 위해서는 두 가지 문제에 직면한다. 첫 번째는 실시간 탐지를 위한 학습과 연관된 중요 특징들을 선별하는 문제이며 두 번째는 학습에 사용되는 데이터의 불균형 문제로, 기계학습 알고리즘들은 데이터에 의존적이기에 이러한 문제는 치명적이다. 본 논문에서는 위 제시된 문제들을 해결하기 위해서 Hybrid Feature Selection과 Data Balancing을 통한 심층 신경망 기반의 네트워크 침입 탐지 모델을 제안한다. NSL-KDD 데이터 셋을 통해 학습을 진행하였으며, 평가를 위해 Accuracy, Precision, Recall, F1 Score 지표를 사용하였다. 본 논문에서 제안된 모델은 Random Forest 및 기본 심층 신경망 모델과 비교해 F1 Score를 기준으로 7~9%의 성능 향상을 이루었다.

• The Journal of Engineering Geology
• /
• v.2 no.2
• /
• pp.113-130
• /
• 1992

Groundwater in crystalline basement is controlled primarily by tectonic fractures. It is evident that the delineation of the heavily faulted area and/or fractures deeply developped should be considerable value in deep-seated low enthalphy geothermal water. Electrical and electromagnetic methods have effectively been employed to map hydraulic faults and shear zones for groundwater exploration. In this study VLi; dipoledipole resistivity, controlled source audio~frequency magneto-telluric(CSAMT) and magnetic methods were applied in the Bomun resort area, adjacent to Kyongju city, southeastern part of Korea. The integrated geophysical tools employed in this experiment can be manifested themselves as: 1. Magnetic high for granite intrusions which is more favorable for geothermal gradient increase in depth. 2. VLF cross-over trends for mapping linear shallow conductive fractures and shear zones. 3. Dipole-dipole resistivity distributions for the deep-seated(less than 500m in depth) fractures and shear zones. The dipole-dipole resistivity field data were inverted to the true resistivity distribution with two-dimensional automatic inversion program based on the finite-difference method. 4. CSAMT provides an efficient way of delineating fractures and fault zones if the depth is greater than about 500m.

• Convergence Security Journal
• /
• v.20 no.3
• /
• pp.21-28
• /
• 2020

In recent years, hacking and malware techniques have evolved and become sophisticated and complex, and numerous cyber-attacks are constantly occurring in various fields. Among them, the most widely used route for compromise incidents such as information leakage and system destruction was found to be E-Mails. In particular, it is still difficult to detect and identify E-Mail APT attacks that employ zero-day vulnerabilities and social engineering hacking techniques by detecting signatures and conducting dynamic analysis only. Thus, there has been an increased demand for indicators of compromise (IOC) to identify the causes of malicious activities and quickly respond to similar compromise incidents by sharing the information. In this study, we propose a method of extracting various forensic artifacts required for detecting and investigating Hacking E-Mails, which account for large portion of damages in security incidents. To achieve this, we employed a digital forensic indicator method that was previously utilized to collect information of client-side incidents.

• Korean Journal of Remote Sensing
• /
• v.32 no.5
• /
• pp.539-550
• /
• 2016

Detection of water bodies in land surface is an essential part of disaster monitoring, such as flood, storm surge, and tsunami, and plays an important role in analyzing spatial and temporal variation of water cycle. In this study, a quantitative comparison of different thresholding-based methods for water body detection and their applicability to Kompsat-5 SAR data were presented. In addition, the effect of speckle filtering on the detection result was analyzed. Furthermore, the variations of threshold values by the proportion of the water body area in the whole image were quantitatively evaluated. In order to improve the binary classification performance, a new water body detection algorithm based on the bimodality test and the majority filtering is presented.

• Geophysics and Geophysical Exploration
• /
• v.20 no.2
• /
• pp.61-71
• /
• 2017

Recently, ground-penetrating radar (GPR) surveys have been actively carried out for precise subsurface void investigation because of the rapid increase of subsidence in urban areas. However, since the interpretation of GPR data was conducted based on the interpreter's subjective decision after applying only the basic data processing, it can result in reliability problems. In this research, to solve these problems, we analyzed the difference between the events generated from subsurface voids and those of strong diffraction sources such as the buried pipeline by applying the edge detection technique, which is one of image processing technologies. For the analysis, we applied the image processing technology to the GRP field data containing events generated from the cavity or buried pipeline. As a result, the main events by the subsurface void or diffraction source were effectively separated using the edge detection technique. In addition, since subsurface voids associated with the subsidence has a relatively wide scale, it is recorded as a gentle slope event unlike the event caused by the strong diffraction source recorded with a sharp slope. Therefore, the directional analysis of amplitude variation in the image enabled us to effectively separate the events by the subsurface void from those by the diffraction source. Interpretation based on these kinds of objective analysis can improve the reliability. Moreover, if suggested techniques are verified to various GPR field data sets, these approaches can contribute to semiautomatic interpretation of large amount of GPR data.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.31 no.6
• /
• pp.1105-1114
• /
• 2021

Due to the recent surge in popularity of cryptocurrency, the threat of cryptojacking, a malicious code for mining cryptocurrencies, is increasing. In particular, web-based cryptojacking is easy to attack because the victim can mine cryptocurrencies using the victim's PC resources just by accessing the website and simply adding mining scripts. The cryptojacking attack causes poor performance and malfunction. It can also cause hardware failure due to overheating and aging caused by mining. Cryptojacking is difficult for victims to recognize the damage, so research is needed to efficiently detect and block cryptojacking. In this work, we take representative distinct symptoms of cryptojacking as an indicator and propose a new architecture. We utilized the K-Nearst Neighbors(KNN) model, which trained computer performance indicators as behavior-based dynamic analysis techniques. In addition, a K-means model, which trained the frequency of malicious script words for script similarity-based static analysis techniques, was utilized. The KNN model had 99.6% accuracy, and the K-means model had a silhouette coefficient of 0.61 for normal clusters.

• Geophysics and Geophysical Exploration
• /
• v.25 no.4
• /
• pp.189-200
• /
• 2022

Ground subsidence on urban roads is a social issue that can lead to human and property damages. Therefore, it is crucial to detect underground cavities in advance and repair them. Underground cavity detection is mainly performed using ground penetrating radar (GPR) surveys. This process is time-consuming, as a massive amount of GPR data needs to be interpreted, and the results vary depending on the skills and subjectivity of experts. To address these problems, researchers have studied automation and quantification techniques for GPR data interpretation, and recent studies have focused on deep learning-based interpretation techniques. In this study, we described a hyperbolic event detection process based on deep learning for GPR data interpretation. To demonstrate this process, we implemented a series of algorithms introduced in the preexisting research step by step. First, a deep learning-based YOLOv3 object detection model was applied to automatically detect hyperbolic signals. Subsequently, only hyperbolic signals were extracted using the column-connection clustering (C3) algorithm. Finally, the horizontal locations of the underground cavities were determined using regression analysis. The hyperbolic event detection using the YOLOv3 object detection technique achieved 84% precision and a recall score of 92% based on AP50. The predicted horizontal locations of the four underground cavities were approximately 0.12 ~ 0.36 m away from their actual locations. Thus, we confirmed that the existing deep learning-based interpretation technique is reliable with regard to detecting the hyperbolic patterns indicating underground cavities.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2022.05a
• /
• pp.375-378
• /
• 2022

한계기업은 성장가능성이 있는 기업들에게 돌아가야 할 자금 및 지원정책을 기업의 연명수단으로 전략하게 될 가능성이 있어 비효율적 자원배분을 초래하게 되며 이는 궁극적으로는 경제성장의 제약을 유발하게 된다. 따라서 본 연구에서는 뉴스 데이터를 활용하여 이러한 한계기업을 초기에 탐지할 수 있는 방법을 제안하고자 한다. 연구결과, 뉴스 데이터를 활용하였을 경우, 그렇지 않은 경우보다 모든 지표가 우수한 것으로 나타나 실제적인 문제에서의 적용 타당성과 가능성을 보였다. 이를 통해 기업은 부실화된 정도를 사전에 예측하여 경영 전략 재수립을 위한 지표로 활용할 수 있을 것이며, 투자자는 리스크를 관리할 수 있는 수단으로 활용될 수 있다.

• Proceedings of the KSEEG Conference
• /
• 1999.04a
• /
• pp.80-85
• /
• 1999

본 연구에서는 토목분야에서 중요한 문제가 되는 기초 파일의 깊이 탐지와 관련하여 시추공 자력탐사의 적용성을 확인하기 위하여 시추공 자력탐사 모형 반응 계산 및 역산 알고리즘을 개발하였다. 모형 반응 계산은 시추공 자력탐사에 적합하고 삼성분 이상을 계산할 수 있도록 기존의 방법을 수정하였으며, 역산 알고리즘은 일반적인 자력탐사 자료 역산의 불안정성을 고려하여 광역적 최적화 기법의 하나임 ASA(Adaptive Simulated Annealing : Ingber, 1993)를 이용하였다. 개발된 모형 반응 및 역산 알고리즘을 간단한 모형 및 합성자료에 대해 적용한 결과 그 타당성을 검증할 수 있었다. 또한 실제 현장에서 부딪힐 수 있는 무작위 잡음을 첨가한 자료, 주변 파일의 영향 및 지표 구조물에 의한 영향을 고려한 복잡한 모형에 대해 기초 파일의 깊이를 탐지해 낼 수 있었으며, 이를 토대로 실제 현장 적용시 고려해야할 현장지침에 대해서도 고찰할 수 있었다. 마지막으로 실제 현장자료에 적용한 결과 실제 파일의 깊이를 역산해 낼 수 있음을 확인함으로써, 기초 파일의 깊이 탐지를 위한 시추공 자력탐사의 적용성 및 본 알고리즘의 현장 적용성을 확인할 수 있었다.