• Title/Summary/Keyword: Attack Case

Search Result 631, Processing Time 0.021 seconds

Study of Aerial Fire Line Construction and Suppression Method on Forest Fire (산불 공중진화 방화선 구축형태 및 진화방법에 관한 연구)

  • Bae, Taek-Hoon;Lee, Si-Young
    • Fire Science and Engineering
    • /
    • v.24 no.5
    • /
    • pp.26-31
    • /
    • 2010
  • In this study, attack process and aerial control line construction type which were considered forest fire type and a case of operations were suggested using the experience of aerial fire attack of all type of forest fires. As the spread rate of forest fire is effected by terrain, slope, wind speed, forest species and etc., we needed to analyze spreading direction, behavior type and intensity before heli-team constructed a aerial control line. Especially, It is important to consider safety of attack team as a their views were obstructed. In this study, we suggested a 13 methods from type A to type M about attack and construction of aerial indirect control line.

Power-based Side-Channel Analysis Against AES Implementations: Evaluation and Comparison

  • Benhadjyoussef, Noura;Karmani, Mouna;Machhout, Mohsen
    • International Journal of Computer Science & Network Security
    • /
    • v.21 no.4
    • /
    • pp.264-271
    • /
    • 2021
  • From an information security perspective, protecting sensitive data requires utilizing algorithms which resist theoretical attacks. However, treating an algorithm in a purely mathematical fashion or in other words abstracting away from its physical (hardware or software) implementation opens the door to various real-world security threats. In the modern age of electronics, cryptanalysis attempts to reveal secret information based on cryptosystem physical properties, rather than exploiting the theoretical weaknesses in the implemented cryptographic algorithm. The correlation power attack (CPA) is a Side-Channel Analysis attack used to reveal sensitive information based on the power leakages of a device. In this paper, we present a power Hacking technique to demonstrate how a power analysis can be exploited to reveal the secret information in AES crypto-core. In the proposed case study, we explain the main techniques that can break the security of the considered crypto-core by using CPA attack. Using two cryptographic devices, FPGA and 8051 microcontrollers, the experimental attack procedure shows that the AES hardware implementation has better resistance against power attack compared to the software one. On the other hand, we remark that the efficiency of CPA attack depends statistically on the implementation and the power model used for the power prediction.

DDoS Attack Tolerant Network using Hierarchical Overlay (계층적 오버레이를 이용한 DDoS 공격 감내 네트워크)

  • Kim, Mi-Hui;Chae, Ki-Joon
    • The KIPS Transactions:PartC
    • /
    • v.14C no.1 s.111
    • /
    • pp.45-54
    • /
    • 2007
  • As one of the most threatening attacks, DDoS attack makes distributed multiple agents consume some critical resources at the target within the short time, thus the extent and scope of damage is serious. Against the problems, the existing defenses focus on detection, traceback (identification), and filtering. Especially, in the hierarchical networks, the traffic congestion of a specific node could incur the normal traffic congestion of overall lower nodes, and also block the control traffic for notifying the attack detection and identifying the attack agents. In this paper, we introduce a DDoS attack tolerant network structure using a hierarchical overlay for hierarchical networks, which can convey the control traffic for defense such as the notification for attack detection and identification, and detour the normal traffic before getting rid of attack agents. Lastly, we analyze the overhead of overlay construction, the possibility of speedy detection notification, and the extent of normal traffic transmission in the attack case through simulation.

A Study on Countermeasures against North Korea's Cyber Attack (북한 사이버공격에 대한 대응방안에 관한 연구)

  • Jung, Yeong Do;Jeong, Gi Seog
    • Convergence Security Journal
    • /
    • v.16 no.6_1
    • /
    • pp.43-50
    • /
    • 2016
  • As North Korea has a sufficient ability to attack our society's vulnerable computer network, various large-scale cyber attacks are expected to be tried. North Korea's cyber military strength is known a world-class level. The number of its cyber agents is increasing consistently. Recently North Korea's cyber attack has been made regardless of trick and target. But up to now North Korea's cyber attack is more of an exploration than a real attack. Its purpose was to check how fast Korea found a problem and recovered from it. In future, cyber attack that damages substantially is highly probable. In case of an attack against national infrastructure like traffic, financial and energy services, the extent of the damage will be great beyond imagination. In this paper, characteristics of recent North Korea's cyber attack is addressed in depth and countermeasures such as the enactment of cyber terror prevention law, simulation training enforcement, private and public cooperation system construction, cyber security infrastructure expansion, etc. are proposed.

Generating Audio Adversarial Examples Using a Query-Efficient Decision-Based Attack (질의 효율적인 의사 결정 공격을 통한 오디오 적대적 예제 생성 연구)

  • Seo, Seong-gwan;Mun, Hyunjun;Son, Baehoon;Yun, Joobeom
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.1
    • /
    • pp.89-98
    • /
    • 2022
  • As deep learning technology was applied to various fields, research on adversarial attack techniques, a security problem of deep learning models, was actively studied. adversarial attacks have been mainly studied in the field of images. Recently, they have even developed a complete decision-based attack technique that can attack with just the classification results of the model. However, in the case of the audio field, research is relatively slow. In this paper, we applied several decision-based attack techniques to the audio field and improved state-of-the-art attack techniques. State-of-the-art decision-attack techniques have the disadvantage of requiring many queries for gradient approximation. In this paper, we improve query efficiency by proposing a method of reducing the vector search space required for gradient approximation. Experimental results showed that the attack success rate was increased by 50%, and the difference between original audio and adversarial examples was reduced by 75%, proving that our method could generate adversarial examples with smaller noise.

Assessment on the Seawater Attack Resistance of Antiwashout Underwater Concrete (수중불분리성 콘크리트의 해수침식에 대한저항성 평가)

  • 문한영;김성수;안태송;이승태;김종필
    • Proceedings of the Korea Concrete Institute Conference
    • /
    • 2001.05a
    • /
    • pp.683-688
    • /
    • 2001
  • In case of constructing the concrete structures under seawater environment, the concrete suffers from deterioration due to penetration of various ions such as chloride, sulfate and magnesium in seawater. Tn the present study, Immersion tests with artificial seawater were carried out to investigate the resistance to seawater attack of antiwashout underwater concrete. From the results of compressive strength, it was found that blended cement concrete due to mineral admixtures such as fly ash(FA) and ground granulated blast-furnace slag(SGC), were superior to ordinary portland cement concrete with respect to the resistance to seawater attack. Moreover, XRD analysis indicated that the formed reactants of ordinary portland cement paste by sulfate and magnesium ions led to the deterioration of concrete. As expected, however, the blended cements with FA or SGC have a good resistance to seawater attack. This paper would discuss the mechanism of seawater deterioration and benefical effects of antiwashout underwater concretes with mineral admixtures.

  • PDF

Virtual Keyboard against Social Engineering Attacks in Smartphones (사회 공학적 공격에 대응하는 색 기반 스마트폰 가상 키보드)

  • Choi, Dongmin;Baek, Cheolheon;Chung, Ilyong
    • Journal of Korea Multimedia Society
    • /
    • v.18 no.3
    • /
    • pp.368-375
    • /
    • 2015
  • Nowaday, financial institutions provide secure mobile keyboard solutions to keep their mobile banking services safe. However, these are still vulnerable to attacks, such as shoulder surfing attack. Especially, in the case of handicapped person such as visual impairment and blindness, they are more vulnerable than ordinary person because of inconvenience of secure information input. Among them, we focused on the color blind. For the color blind, 4-color based secure keyboard method causes more inconvenience to notify exact color. Thus, we propose a secure mobile keyboard solution to provide advanced functionality for the color blind users. Our method is based on 4-color theorem to support color blind users. In addition, our scheme is robust against shoulder surfing attack. According to the evaluation result, our method offers increased security against shoulder surfing attack compare with existing methods.

A Case Study on Chloride Corrosion for the End Zone of Concrete Deck Subjected to De-icing Salts Added Calcium Chloride (염화칼슘이 함유된 제설제로 인한 콘크리트 바닥판 단부의 염해에 관한 사례 연구)

  • Chung, Jee-Seung;Kim, Bo-Heon;Kim, Il-Sun
    • Journal of the Korean Society of Safety
    • /
    • v.29 no.6
    • /
    • pp.87-93
    • /
    • 2014
  • In this study, the reinforced concrete rahmen bridge damaged by the chloride attack was investigated. According to the investigation, the degraded concretes on cantilever kerb and end part were intensively observed. Thus, the chloride content test and half-cell method were performed to evaluate the degraded parts. As a result, the contents of chloride on degraded parts were C and D grade. On the other hand, the half-cell potential values of rebar in degraded concrete were measured with the minor corrosion. This rebar corrosion is expected to progressing. Chloride content D grade is due to expansion pressure by corrosion of rebar and freeze-thaw by permeate water, could see progresses rapidly degradation. In order to prevent chloride attack to concrete deck caused by deicing salts, corresponding to the chloride critical concentration must maintain grade b or at least grade c. Chloride condition evaluation standard apply to evaluation of marine structure chloride attack with chloride attack by deicing salts.

A Profiling Case Study to Phishing Mail Attack Group (피싱 메일 공격조직에 대한 프로파일링 사례 연구)

  • Lee, Jae-il;Lee, Yong-joon;Kwon, Hyuk-jin
    • Journal of Internet Computing and Services
    • /
    • v.21 no.2
    • /
    • pp.91-97
    • /
    • 2020
  • Recently, phishing attacks targeting those involved in defense, security and unification have been on the rise. In particular, hacking attack organization Kimsuky has been engaged in activities to collect important information from public organizations through phishing attacks since 2013. In this paper, profiling analysis of phishing mail attack organization was performed. Through this process, we estimated the purpose of the attack group and suggested countermeasures.

The Case of Novel Attack Detection using Virtual Honeynet (Virtual Honeynet을 이용한 신종공격 탐지 사례)

  • Kim, Chun-Suk;Kang, Dae-Kwon;Euom, Ieck-Chae
    • The Journal of the Korea institute of electronic communication sciences
    • /
    • v.7 no.2
    • /
    • pp.279-285
    • /
    • 2012
  • Most national critical key infrastructure, such like electricity, nuclear power plant, and petroleum is run on SCADA (Supervisory Control And Data Acquisition) system as the closed network type. These systems have treated the open protocols like TCP/IP, and the commercial operating system, which due to gradually increasing dependence on IT(Information Technology) is a trend. Recently, concerns have been raised about the possibility of these facilities being attacked by cyber terrorists, hacking, or viruses. In this paper, the method to minimize threats and vulnerabilities is proposed, with the virtual honeynet system architecture and the attack detection algorithm, which can detect the unknown attack patterns of Zero-Day Attack are reviewed.