• Title/Summary/Keyword: Abnormal Traffic

Search Result 141, Processing Time 0.031 seconds

Study of Snort Intrusion Detection Rules for Recognition of Intelligent Threats and Response of Active Detection (지능형 위협인지 및 능동적 탐지대응을 위한 Snort 침입탐지규칙 연구)

  • Han, Dong-hee;Lee, Sang-jin
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.25 no.5
    • /
    • pp.1043-1057
    • /
    • 2015
  • In order to recognize intelligent threats quickly and detect and respond to them actively, major public bodies and private institutions operate and administer an Intrusion Detection Systems (IDS), which plays a very important role in finding and detecting attacks. However, most IDS alerts have a problem that they generate false positives. In addition, in order to detect unknown malicious codes and recognize and respond to their threats in advance, APT response solutions or actions based systems are introduced and operated. These execute malicious codes directly using virtual technology and detect abnormal activities in virtual environments or unknown attacks with other methods. However, these, too, have weaknesses such as the avoidance of the virtual environments, the problem of performance about total inspection of traffic and errors in policy. Accordingly, for the effective detection of intrusion, it is very important to enhance security monitoring, consequentially. This study discusses a plan for the reduction of false positives as a plan for the enhancement of security monitoring. As a result of an experiment based on the empirical data of G, rules were drawn in three types and 11 kinds. As a result of a test following these rules, it was verified that the overall detection rate decreased by 30% to 50%, and the performance was improved by over 30%.

Pulmonary Function and Its Influence Factors of Residents in Yeosu Industrial Complex

  • Hong, Eun-Ju;Ahn, Gi-Sub;Chung, Eun-Kyung;Guo, Xinbiao;Son, Bu-Soon
    • Journal of Environmental Science International
    • /
    • v.20 no.7
    • /
    • pp.799-809
    • /
    • 2011
  • Objectives: This study is aimed at identifying the influential factors on the pulmonary function of ordinary residents in the surrounding areas of Yeosu Industrial Complex. Methods: The PFT (Pulmonary Function Test) was conducted on the target residents numbering 989 people (male 361, female 628). The exposed group (813 people) resided within the radius of 5km from Yeosu Industrial Complex and the control group (176 people) resided in the radius of more than 15 km from May 2007 to November 2007. The survey also took into account other factors including personal characteristics, life habits, respiratory diseases and allergic symptoms, medical histories, and the living environments of the residents in order to further identify influential factors on pulmonary function. Result: When comparing the PFT values of the exposure groups to the control group of the same city, values of the exposure groups were meaningfully lower with an %$FEV_1$ of 107.05% and %FVC of 100.28%. Conversely, the control group reported an %$FEV_1$ and %FVC of 107.26% and 102.85% respectively, indicating that ambient air pollutants reduce lung function. The odds ratio of asthma diagnosis history increased when a subjects residence was close to a heavily trafficked road, traffic amount was huge, a bed was used, and the family had less than four members. However the results were not statistically meaningful. The odds ratios of abnormal pulmonary function were statistically higher among those with asthma(OR=4.29, CI=1.75-10.56), wheezing (OR=2.59, CI=1.24-5.41), and nasal congestion (OR=2.87, CI=1.36-6.08) (p<0.01). The factors affecting $FEV_1$ were symptoms including asthma, passive smoking and allergic eye disease ($R^2$=0.049, p<0.001). For the FVC symptoms including asthma ($R^2$=0.014, p<0.001) were measured. The analysis showed that FVC decreased with increases in $O_3$ and CO(p<0.01). Furthermore, $FEV_1$ decreased with increases in $O_3$(p<0.01). Conclusions: These results will provide preliminary data for establishing responsive measures to protect the health of residents in industrial complexes from air pollution, and to develop lasting environmental health policies.

Uncommon Causes of Hoarseness (타질환과 동반된 애성)

  • 윤희병;김미자;정대현;박승훈;박옥경;목정민;전승하;강주원
    • Proceedings of the KOR-BRONCHOESO Conference
    • /
    • 1982.05a
    • /
    • pp.8.2-8
    • /
    • 1982
  • Hoarseness is the change of voice quality which represents the abnormal function of phonation and is the main symtom of the laryngeal diseases. The etiology of hoarseness are known more than 50 causes, among them, viral upper respiratory infection is the main cause of hoarseness and the laryngeal nodule and polyp, laryngeal paralysis, laryngeal cancer, laryngeal papilloma and the laryngeal tuberculosis are the other causes of hoarseness in that order. Recently, the authors experienced 4 cases of uncommon etiology of hoarseness, so we present the cases with the brief review of literatures. Case 1. 29 years old male Admitted in Dept. of neurosurgery due to Traffic Accident. He had a trauma on the anterior neck. Hoarseness was developed on 1 month after the accident. Laryngoscopic finding; Paramedian paralysis of left vocal cord. Displacement of left arytenoid cartilage. Case 2. 53 years old male Admitted in Dept. of General Surgery due to Clonorchis Sinensis, under the general endotracheal anesthesia, Choledochostomy was performed. Laryngoscopic finding; Median paralysis of left vocal cord. Case 3. 56 years old male Admitted in Dept. of Internal Medicine due to Aortic Aneurysm. Hoarseness was developed on 3 months prior to admission. Laryngoscopic finding; Intermediated position paralysis of left vocal cord. Displacement of left arytenoid cartilage. Case 4. 74 years old male Admitted in Dept. of Internal Medicine due to Bronchogenic carcinoma. Hoarseness was developed on 3 years prior to admission. Laryngoscopic finding; Paramedian paralysis of right vocal cord.

  • PDF

Design of Network Attack Detection and Response Scheme based on Artificial Immune System in WDM Networks (WDM 망에서 인공면역체계 기반의 네트워크 공격 탐지 제어 모델 및 대응 기법 설계)

  • Yoo, Kyung-Min;Yang, Won-Hyuk;Kim, Young-Chon
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.35 no.4B
    • /
    • pp.566-575
    • /
    • 2010
  • In recent, artificial immune system has become an important research direction in the anomaly detection of networks. The conventional artificial immune systems are usually based on the negative selection that is one of the computational models of self/nonself discrimination. A main problem with self and non-self discrimination is the determination of the frontier between self and non-self. It causes false positive and false negative which are wrong detections. Therefore, additional functions are needed in order to detect potential anomaly while identifying abnormal behavior from analogous symptoms. In this paper, we design novel network attack detection and response schemes based on artificial immune system, and evaluate the performance of the proposed schemes. We firstly generate detector set and design detection and response modules through adopting the interaction between dendritic cells and T-cells. With the sequence of buffer occupancy, a set of detectors is generated by negative selection. The detection module detects the network anomaly with a set of detectors and generates alarm signal to the response module. In order to reduce wrong detections, we also utilize the fuzzy number theory that infers the degree of threat. The degree of threat is calculated by monitoring the number of alarm signals and the intensity of alarm occurrence. The response module sends the control signal to attackers to limit the attack traffic.

Self-Organizing Middleware Platform Based on Overlay Network for Real-Time Transmission of Mobile Patients Vital Signal Stream (이동 환자 생체신호의 실시간 전달을 위한 오버레이 네트워크 기반 자율군집형 미들웨어 플랫폼)

  • Kang, Ho-Young;Jeong, Seol-Young;Ahn, Cheol-Soo;Park, Yu-Jin;Kang, Soon-Ju
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.38C no.7
    • /
    • pp.630-642
    • /
    • 2013
  • To transmit vital signal stream of mobile patients remotely, it requires mobility of patient and watcher, sensing function of patient's abnormal symptom and self-organizing service binding of related computing resources. In the existing relative researches, the vital signal stream is transmitted as a centralized approach which exposure the single point of failure itself and incur data traffic to central server although it is localized service. Self-organizing middleware platform based on heterogenous overlay network is a middleware platform which can transmit real-time data from sensor device(including vital signal measure devices) to Smartphone, TV, PC and external system through overlay network applied self-organizing mechanism. It can transmit and save vital signal stream from sensor device autonomically without arbitration of management server and several receiving devices can simultaneously receive and display through interaction of nodes in real-time.

Respond System for Low-Level DDoS Attack (저대역 DDoS 공격 대응 시스템)

  • Lee, Hyung-Su;Park, Jae-Pyo
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.17 no.10
    • /
    • pp.732-742
    • /
    • 2016
  • This study suggests methods of defense against low-level high-bandwidth DDoS attacks by adding a solution with a time limit factor (TLF) to an existing high-bandwidth DDoS defense system. Low-level DDoS attacks cause faults to the service requests of normal users by acting as a normal service connection and continuously positioning the connected session. Considering this, the proposed method makes it possible for users to show a down-related session by considering it as a low-level DDoS attack if the abnormal flow is detected after checking the amount of traffic. However, the service might be blocked when misjudging a low-level DDoS attack in the case of a communication fault resulting from a network fault, even with a normal connection status. Thus, we made it possible to reaccess the related information through a certain period of blocking instead of a drop through blacklist. In a test of the system, it was unable to block the session because it recognized sessions that are simply connected with a low-level DDoS attack as a normal communication.

Development of an abnormal road object recognition model based on deep learning (딥러닝 기반 불량노면 객체 인식 모델 개발)

  • Choi, Mi-Hyeong;Woo, Je-Seung;Hong, Sun-Gi;Park, Jun-Mo
    • Journal of the Institute of Convergence Signal Processing
    • /
    • v.22 no.4
    • /
    • pp.149-155
    • /
    • 2021
  • In this study, we intend to develop a defective road surface object recognition model that automatically detects road surface defects that restrict the movement of the transportation handicapped using electric mobile devices with deep learning. For this purpose, road surface information was collected from the pedestrian and running routes where the electric mobility aid device is expected to move in five areas within the city of Busan. For data, images were collected by dividing the road surface and surroundings into objects constituting the surroundings. A series of recognition items such as the detection of breakage levels of sidewalk blocks were defined by classifying according to the degree of impeding the movement of the transportation handicapped in traffic from the collected data. A road surface object recognition deep learning model was implemented. In the final stage of the study, the performance verification process of a deep learning model that automatically detects defective road surface objects through model learning and validation after processing, refining, and annotation of image data separated and collected in units of objects through actual driving. proceeded.

An Overloaded Vehicle Identifying System based on Object Detection Model (객체 인식 모델을 활용한 적재불량 화물차 탐지 시스템 개발)

  • Jung, Woojin;Park, Yongju;Park, Jinuk;Kim, Chang-il
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2022.10a
    • /
    • pp.562-565
    • /
    • 2022
  • Recently, the increasing number of overloaded vehicles on the road poses a risk to traffic safety, such as falling objects, road damage, and chain collisions due to the abnormal weight distribution, and can cause great damage once an accident occurs. However, this irregular weight distribution is not possible to be recognized with the current weight measurement system for vehicles on roads. To address this limitation, we propose to build an object detection-based AI model to identify overloaded vehicles that cause such social problems. In addition, we present a simple yet effective method to construct an object detection model for the large-scale vehicle images. In particular, we utilize the large-scale of vehicle image sets provided by open AI-Hub, which include the overloaded vehicles from the CCTV, black box, and hand-held camera point of view. We inspected the specific features of sizes of vehicles and types of image sources, and pre-processed these images to train a deep learning-based object detection model. Finally, we demonstrated that the detection performance of the overloaded vehicle was improved by about 23% compared to the one using raw data. From the result, we believe that public big data can be utilized more efficiently and applied to the development of an object detection-based overloaded vehicle detection model.

  • PDF

A Study on the Risk Evaluation of Subway Flood Inundation in Urban Area (도심지역 지하철 침수 위험도 평가에 관한 연구)

  • Kun-Hak Chun;Jong-Cheol Seo ;Hyeon-Gu Choi;Ji-Min Kim
    • Journal of Wetlands Research
    • /
    • v.25 no.2
    • /
    • pp.83-90
    • /
    • 2023
  • Due to climate change, the occurrence of abnormal rainfall is increasing, and the intensity and scale of damage caused by heavy rain are increasing every year. In addition, as the frequency of heavy rains becomes more frequent, heavy rains often occur continuously, resulting in large flooding damage that has never been seen before in urban area. When near rivers and coastal areas are impermeable areas, the maximum flow increases rapidly as the rainfall intensity increases, so a comprehensive flood risk evaluation is needed considering the characteristics of the basin. In this study, the flood inundation risk evaluation was analyzed by giving scores on evaluation factors as a measure to prevent inundation in subway stations. Through the flood inundation risk evaluation process considering the comprehensive evaluation index, the flood risk evaluation was conducted on five urban railway stations with a large amount of traffic and floating population that had been inundated in the past. It is judged that by comprehensively analyzing this and establishing a inundation risk grade (grade 1 to 4) to establish a flood measure suitable for the risk grade.

A Study on Effectiveness of the Hospital-based Home Nursing Care of the Early Discharged Surgical Patients and its Cost Analysis (조기퇴원 수술환자의 병원중심 가정간호 효과 및 비용분석에 관한 연구)

  • 박경숙;정연강
    • Journal of Korean Academy of Nursing
    • /
    • v.24 no.4
    • /
    • pp.545-556
    • /
    • 1994
  • Medical insurance and health care delivery system enabled Korean people to get the necessary medical service, but it caused increased needs for medical service, and resulted in the occurence of some problems such as a lack of manpower and medical facilities. In order to solve these problems, many countries, which already had medical insurance system had developed home care system and it has been regarded effective both in reducing costs and in increasing the rates of turnover of bed. Recently, Korea has included home nursing care in its health care delivery system, and some models of the hospital based home nursing care had been tried and its effects had been evaluated. So, author tried to run a home nursing care for the Cesarean section mothers and evaluate Its effects both in the mother's health and costs. This study was designed as a Quasi-experimental study. Subjects were thirty mothers who got Cesarean section operation in hospital in Seoul. Experimental group consisted of 15 volunteers, and control group were selected by means of matching technique. Data were gathered from February 1st to March 26th by two assistants who were trained by author. Experimental group were discharged on the 4th day after their operation, and got nursing care and assessment about their home three times on the 5th, 6th, and 7th day. Control group stayed in the hospital until 7th day as usual and were checked on the same day as above mentioned To evaluate the state of physiological recovery, vital signs, H.O.F, presence of edema in the legs, bathing, appetite, sleep, presence of pain or discomfort in the breasts, amount of lochia, color of lochia, defecation urination. To compare incidence of complication in experimental group with that in control group, specific assessment was done such variables as smell of lochia, presence of inflammation of operation wound, dizziness, and presence of immobilization in the extremities. The activities of daily living were checked Satisfaction of nursing were checked To calculate costs, author asked subjects to specify expenditure including hospital charge, traffic enpenses, and food expenses. The results were as fellows. 1. On effectiveness of home nursing careThere were n significant differences between experimental and control group in incidence of abnormal symptoms and any complication. The number of taking a bath [POD #5 P=0.001, #6 P=0.0003, #7 P=0.001] and the degree of appetite [POD #5 P=0.03, #6 P=0.02, #7 P=0.013] were significantly higher in experimental group than in control group. Contrary to author's expectation, the degree of the activities of daily living in experimental group was not higher than that of control group. All of the experimental group said they were satisfied with the home nursing care. 2. Cost analysis 1) Hospital charge of experimental group was lower than that of control group. [P=0.009] By taking home nursing care, average period of hospitalization was shortened to 3.1 days, and family members could save 22.8 hours. Total amount of money saved by early discharge was 3,443,093 Won. It is estimated that total amount of money saved by early discharge in a year will be 40,398,956 Won. 2) Home nursing care charge of 15 mothers was 1,781,633 Won. It is estimated that total amount of money Saved by it in a year Will be 20,904,493 Won. It was lower altogether than hospital charge of the three days which is 5th, 6th, 7th day of operation. The average cost of single home visit was calculated 10,940 Won. It took 87 minutes per round and it costed 1,017.3 Won. The average hour of home care was 39.0 minutes. 3) It is expected that early discharge can bring forth the increase of hospital income. On the condition that the rate of running bed is 100%, the expected increase of hospital income will be 202,374, 026 Won in a year. Suggestions for further study and nursing practice are as follows : 1. For the welfare of patients and the increased rates of running bed, home nursing care system should be included in the hospital nursing care system. 2. Studies to test effect of home nursing care on the patients with other diseases are needed. 3. Establishment of law on the practice of home nursing care is strongly recommended.

  • PDF