• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.20 no.6
• /
• pp.157-169
• /
• 2010

As the information society changes into the ubiquitous computing society, the importance of information security has increased. Governments and enterprises are carrying out various information security activities to operate their information asset effectively. Since 2006, the Korean government has implemented 'Advance Diagnosis' policy to analyze the vulnerability of the information security from the early stage of the information system development to secure the information stability. This study proposes an analyzing framework for the economic effects of Advance Diagnosis for Information Security and presents an illustrative application em a real Advance Diagnosis case. The results of this study can be applied to secure the economic justification of government policies for the security of information systems.

• Proceedings of the Korea Society of Information Technology Applications Conference
• /
• 2005.11a
• /
• pp.85-90
• /
• 2005

The advance of mobile and telematics technologies has produced vehicles with various convenient services for drivers. Specifically lots of researches and several technologies have been developed to provide services of a remote vehicle diagnosis and control. The existing and representative product for a vehicle control is a RCS (remote control system), but it has a problem of short control distance and fragile security. In this paper, a telematics terminal embedded with CDMA and GPS is designed, which can be connected to the Internet. It allows a driver with a cellular phone to remotely diagnosis and control a vehicle via wireless network and SMS.

• Journal of Information Technology Applications and Management
• /
• v.16 no.4
• /
• pp.79-92
• /
• 2009

With the rising reliance on market estimation through customer analysis in customer-centered marketing, there is a rapid increase in the amount of personal data owned by corporations. There has been a corresponding rise in the customers' interest in personal information protection, and the problem of personal information leakage has risen as a serious issue. The purpose of this research is to develop a diagnosis model for personal information protection that is suited to our country's corporate environment, and on this basis, to present diagnostic instruments that can be applied to domestic corporations. This diagnosis model is a structural equation model that schematizes the degree of synthetic effect that administration factors and estimation items have on the protection of personal information owned by corporations. We develop the model- consisting of the administration factors for personal information protection and the measurement items of each factor- using the development method of standardized structural equation model. We then present a tool through which the administration factors and estimation items verified through this model can be used in the diagnosis for personal information protection in corporations. This diagnostic tool can be utilized as a useful instrument to prevent in advance the leakage of personal information in corporations.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.4
• /
• pp.735-743
• /
• 2020

Secure coding is a technique that detects malicious attack or unexpected errors to make software systems resilient against such circumstances. In many cases secure coding relies on static analysis tools to find vulnerable patterns and contaminated data in advance. However, secure coding has the disadvantage of being dependent on rule-sets, and accurate diagnosis is difficult as the complexity of static analysis tools increases. In order to support secure coding, we apply machine learning techniques, such as DNN, CNN and RNN to investigate into finding major weakness patterns shown in secure development coding guides and present machine learning models and experimental results. We believe that machine learning techniques can support detecting security weakness along with static analysis techniques.

• Convergence Security Journal
• /
• v.22 no.5
• /
• pp.89-94
• /
• 2022

Efforts to improve the quality of university education, that is, advanced plans for innovative university education, are needed in the face of changes in educational demand due to rapid changes in new industries and society and the competition for survival due to a rapidly decreasing school-age population with the full-fledged start of the era of the 4th industrial revolution is being demanded. In particular, it is necessary to apply a system for student counseling and guidance management through college life adjustment diagnosis from students entering college to graduation. Accordingly, each university is promoting a project to upgrade a course-linked integrated platform based on core technologies of the 4th industrial revolution era, such as big data and artificial intelligence (AI). Therefore, in this study, based on the field of information security major, we intend to present a plan to advance the student management system for innovative university education.