• 한국정보처리학회:학술대회논문집
• /
• 한국정보처리학회 2002년도 추계학술발표논문집 (중)
• /
• pp.869-872
• /
• 2002

네트워크 기반 침입탐지시스템은 연속적으로 발생하는 패킷의 무손실 축소와, 패킷으로 정상 또는 비정상 행위패턴을 정확히 모델링한 모델 생성이 전체성능을 판단하는 중요한 요소가 된다. 네트워크 기반 비정상행위 판정 침입탐지시스템에서는 이러한 탐지모델 구축을 위해 주로 감독학습 알고리즘을 사용한다. 본 논문은 탐지모델 구축에 사용하는 감독 학습 방식이 가지는 문제점을 지적하고, 그에 대한 대안으로 비감독 학습방식의 학습알고리즘을 제안한다. 감독 학습을 사용하여 탐지모델을 구축하기 위해서는 정상행위의 패킷을 취합해야 하는 사전 부담이 있는 반면에 비감독 학습을 사용하게 되면 이러한 사전작업 없이 탐지모델을 구축할 수 있다. 본 논문에서는 비감독학습 알고리즘을 비교 분석하기 위해서 COBWEB, k-means, Autoclass 알고리즘을 사용했으며, 성능을 평가하기 위해서 비정상행위도(Abnormal Behavior Level)를 계산하여 에러율을 구하였다.

• International Journal of Computer Science & Network Security
• /
• 제21권7호
• /
• pp.159-168
• /
• 2021

Detecting cyber-attacks using machine learning or deep learning is being studied and applied widely in network intrusion detection systems. We noticed that the application of deep learning algorithms yielded many good results. However, because each deep learning model has different architecture and characteristics with certain advantages and disadvantages, so those deep learning models are only suitable for specific datasets or features. In this paper, in order to optimize the process of detecting cyber-attacks, we propose the idea of building a new deep learning network model based on the association and combination of individual deep learning models. In particular, based on the architecture of 2 deep learning models: Convolutional Neural Network (CNN) and Long Short Term Memory (LSTM), we combine them into a combined deep learning network for detecting cyber-attacks based on network traffic. The experimental results in Section IV.D have demonstrated that our proposal using the CNN-LSTM deep learning model for detecting cyber-attacks based on network traffic is completely correct because the results of this model are much better than some individual deep learning models on all measures.

• Communications for Statistical Applications and Methods
• /
• 제29권4호
• /
• pp.487-498
• /
• 2022

Social network analysis (SNA) techniques have recently been developed to monitor and detect abnormal behaviors in social networks. As a useful tool for process monitoring, control charts are also useful for network monitoring. In this paper, the degree and closeness centrality measures, in which each has global and local perspectives, respectively, are applied to an exponentially weighted moving average (EWMA) chart and a multinomial cumulative sum (CUSUM) chart for monitoring undirected weighted networks. In general, EWMA charts monitor only one variable in a single chart, whereas multinomial CUSUM charts can monitor a categorical variable, in which several variables are transformed through classification rules, in a single chart. To monitor both degree centrality and closeness centrality simultaneously, we categorize them based on the average of each measure and then apply to the multinomial CUSUM chart. In this case, the global and local attributes of the network can be monitored simultaneously with a single chart. We also evaluate the performance of the proposed procedure through a simulation study.

• 대한감각통합치료학회지
• /
• 제8권1호
• /
• pp.1-13
• /
• 2010

목적 : 본 연구는 주변 환경에 민감하고 감정기복이 심한 감각조절장애 아동에게 무게감 있는 조끼 착용을 통한 고유수용성 감각을 제공하여 아동의 문제행동에 미치는 영향을 알아보기 위하여 실시하였다. 연구 방법 : 연구 대상자는 일반초등학교 1학년에 재학 중인 만 7세 남아로 연구설계는 ABA'단일사례연구를 사용하였고, 14회기 실험을 실시하였다. 중재기간(B)동안 1.3kg의 무게를 첨부한 조끼를 착용하고 학습인지교육을 받았다. 결과 : 치료회기가 진행될수록 의자에서 엉덩이를 떼고 일어나거나 몸을 앞/뒤, 좌/우로 흔드는 경우 및 엄지손가락 을 입에 넣기, 손등 입으로 가져가기, 손장난하기 등 행동적 측면에서의 문제행동은 점차 감소되는 경향을 보였다. 결론 : 연구결과 무게감 있는 조끼를 착용한 후 아동의 문제행동이 회기가 지날수록 감소되는 양상을 보였다. 무게감 있는 조끼가 감각조절장애 아동의 문제행동에 대한 감각통합치료의 효과 유지에 미치는 영향을 설명하는데 본 연구설계 및 중재기간상 제한점이 있어서, 무게감 있는 조끼가 감각조절장애 아동의 문제행동에 영향을 주었다기 보다는 감각통합치료를 지속적으로 실시한 결과로 생각할 수 있다. 따라서 추후 연구에서는 연구설계의 변형이나 연구회기의 증가를 통해 무게감 있는 조끼가 감각통합치료의 효과를 지속하는지에 대해 명확히 알아보는 것이 필요하고, 감각조절장애 아동에게 무게감 있는 조끼를 착용시키는 것에 대한 적용방법, 무게, 적용시간에 대한 효율적인 프로토콜을 제시하는 연구가 필요할 것이다.

• Asian Pacific Journal of Cancer Prevention
• /
• 제15권20호
• /
• pp.8657-8660
• /
• 2014

Background: Yanting is one of high risk areas for esophageal cancer and the screening program was therefore initiated there. This study was aimed to investigate the dietary behaviors on the risk of esophageal squamous cell carcinoma (ESCC), among the individuals with normal and abnormal esophagus mucosa. Materials and Methods: A frequency matched case-controls study was proposed to estimate the different distribution of dietary behavior between individuals of control, esophagitis and cancer groups. Cancer cases were selected from hospitals. Esophagitis cases and controls were selected from screening population for ESCC. Health workers collected data for 1 year prior to interview, in terms of length of finishing a meal, temperature of eaten food and interval between water boiling and drinking. Chi-square, Kruskal-Wallis tests and unconditional logistic regression model were used to estimate differences and associations between groups. Results: Compared with controls, length of finishing a meal ${\geq}15mins$ was related to a reduced OR for cancer (OR=0.46, 95%CI, 0.22-0.97) and even compared with cases of esophagitis, the OR of cancer was reduced to 0.30 (95%CI, 0.13-0.72). The OR for often eating food at a high temperature was 2.48 (95%CI 1.06, 5.82) for ESCC as compared with controls. Interval between water boiling and drinking of ${\geq}10mins$ was associated with lower risk of cancer: the OR was 0.18 compared with controls and 0.49 with esophagitis cases (p<0.05). Conclusions: Length of eating food ${\geq}15mins$ and interval between water boiling and drinking ${\geq}10mins$ are potentially related to reduced risk of esophageal SCC, compared with individuals with normal and abnormal esophageal mucosa. Recommendations to Yanting residents to change their dietary behaviors should be made in order to reduce cancer risk.

• Environmental Analysis Health and Toxicology
• /
• 제18권2호
• /
• pp.145-153
• /
• 2003

The goal of this study is to develop a biomarker used in monitoring abnormal behaviors of Japanese medaka (Oryzias latipes) as a model organism caused by hazardous chemicals. Japanese medaka was treated by copper of appropriate sublethal concentrations after starvation for 48 hr. The untreated individuals showed common behavioral characteristics (i.e. , smooth and linear movements). Locomotive activity of the fish was monitored using an image processing and automatic data acquisition system. When treated with copper (100 ppb), the fish showed shaking patterns more frequently. As the concentration of copper increased to 1,000 ppb, activity decreated, and the fish showed an erratic movement. Fish were exposed to copper at various concentrations (0,100 and 1,000 ppb) for 24 hrs, and acetylcholine esterase (AChE) activity was observed. When fish were exposed to 1,000 ppb of copper, the body AChE activities appeared to decrease but the head AChE activities showed little change. Expressions of tyrosine hydroxylase (TH) protein in the different organs from both head (brain) and body (kidney) portions affected by the copper treatment were analyzed using immunohistochemical technique compared with control. Five organs of the fish (olfactory bulb, hyothalamus, optic lobe, pons and myelencephalon regions) showed a relatively strong TH protein expression in the control experiment. A differential expression of TH, however, was observed in the treatment (100 ppb and 1,000 ppb). The treatment (1,000 ppb) significantly suppressed TH protein production in the brain regions. In kidney, however, the same treatment caused little suppression compared with the control. Copper appeared to be less effective in suppression of TH than diazinon, a known TH suppressor. It was concluded that TH could be used at a potential biomarker to monitor the acute copper toxicity in Japanese medaka.

• 한국산학기술학회논문지
• /
• 제19권4호
• /
• pp.47-56
• /
• 2018

가스, 전력, 수처리, 원자력, 교통 관제 시스템 등과 같은 국가적 규모의 산업 제어 시스템은 점차 발전하는 정보통신기술에 따라 점차 개방된 네트워크와 공개된 표준 프로토콜을 사용하고 있다. 개방된 네트워크와 공개된 표준 프로토콜을 사용하고 있기 때문에 사이버 공격에 대한 빈도는 점점 증가하고 있는 추세이지만 이에 관련한 후속조치는 매우 부족한 실정이다. 따라서 산업 제어 시스템을 위한 보안 솔루션의 적용은 매우 중요하다. 하지만 실제의 시스템에 보안 솔루션을 적용하는 것은 산업 제어 시스템의 특성 때문에 사실상 불가능하고 기존 시스템에 영향을 주지 않고 공격의 발생 유무를 탐지할 수 있는 보안 시스템이 필수적이다. 따라서 본 논문에서는 산업 제어 시스템에 영향을 주지 않고 비정상행위를 탐지하는 패킷 분석 기반의 침입 탐지 시스템을 제안하고 제안한 침입 탐지 시스템을 실제의 환경을 재현한 산업 제어 시스템 테스트 베드에 적용함으로써 신뢰성 있는 데이터를 기반으로 제안한 시스템의 효율성을 검증한다.

• 한국학교ㆍ지역보건교육학회지
• /
• 제15권3호
• /
• pp.43-54
• /
• 2014

Objectives: The purpose of this study was to find out the relation factors of weight control behaviors, mental health status and body image perception in adolescents and to use basis data of health promotion for adolescents. Methods: This study used data from the Fifth Korea National Health and Nutrition Examination Survey (KNHANES V-2, 2011). The subjects were 653 between 12-19 age. Data analysis was done with SPSS/WIN 19.0 using Chi-square test, and Logistic regression. Results: The result is as follows. The case of female adolescents, abnormal perception of body image was significantly higher on weight reduction effort and normal weight, low weight in BMI. The case of male adolescents, abnormal perception of body image was higher on normal weight in BMI. Conclusions: The adolescents tend to do unreasoning weight loss behavior without properly perception for their body image. Therefore, we suggest that adolescents be provided social support for positive body image and be developed perception program with the importance of inner values.

• Asian-Australasian Journal of Animal Sciences
• /
• 제32권9호
• /
• pp.1469-1474
• /
• 2019

Objective: Physical activity restriction in sows may lead to behavioral abnormalities and affective disorders. However, the psychophysiological state of these sows is still unclear. As miRNAs can be used as effective markers of psychopathy, the present study aimed to assess the difference in microRNA expression between the long-term activity restricted sows and activity free sows, thus contributing to the understanding of abnormal sow behavior. Methods: Four dry sows (sixth parity, Large${\times}$White genetic line) were selected from activity restricted crates (RC) or activity free pens (FP) separately. microRNAs in the ventromedial prefrontal cortex (vMPFC) and serum were examined using real-time polymerase chain reaction, and the correlation between the miRNAs expressed in the vMPFC and serum was evaluated. Results: miR-134 (1.11 vs 0.84) and miR-1202 (1.09 vs 0.85) levels were higher in the vMPFC of the RC sows than in the FP sows (p<0.01). Furthermore, miR-132 (1.27 vs 1.08) and miR-335 (1.03 vs 0.84) levels were also higher in the RC sows than in FP sows (p<0.05); however, miR-135a, miR-135b, miR-16, and miR-124 levels were not different (p>0.05). The relative expression of serum miR-1202 was higher in the RC sows than in the FP sows (1.04 vs 0.54) (p<0.05), and there was a strong correlation (R = 0.757, p<0.05) between vMPFC and Serum levels of miR-1202. However, no significant difference was observed in miR-16 levels in the serum of the RC sows and FP sows (p>0.05). Conclusion: This pilot study demonstrates that long-term activity restriction in sows likely results in autism or other complex psychopathies with depression-like behaviors. These observations may provide new insights for future studies on abnormal behavior in sows and contribute to research on human psychopathy.

• 융합보안논문지
• /
• 제21권2호
• /
• pp.89-96
• /
• 2021

최근 미국과 유럽 내에서는 자생테러로 인한 테러 공포가 확산되고 있다. 특히 미국 내에서는 아시안을 겨낭한 '묻지마 테러'가 빈번하게 발생함에 따라 심각한 사회 문제로 대두되고 있다. 이렇게 배후 조직이 없거나 조직화된 형태가 아닌 독자적으로 테러를 감행하는 자생적 테러는 전 세계적으로 사회 안전을 위협하고 있다. 국내에서도 국가정책으로 인한 피해 등으로 인해 국가/사회 불만이 폭증하는 계층, 망상적 정신 질환자 등이 잠재적 자생 테러리스트로 분류할 수 있다. 자생테러는 조직적인 테러와 다르게 테러 징후를 사전에 식별하기 힘들고 테러 도구와 테러 대상을 파악하기 쉽지 않다. 그래서 자생테러에 의한 피해를 최소화하기 위한 독자적인 감시 및 추적 시스템 구축이 필요하다. 본 논문에서는 잠재적 자생테러의 이상 행동 징후를 식별할 수 있는 기관으로부터 정보를 수집하고 이상 행동의 연속성을 감시하며, 이러한 연속적인 행동이 자생테러로 발생할 수 있는 유형을 판단하고 감시 및 추적할 수 있는 시스템을 제안한다.