• Title/Summary/Keyword: Chain of events

Search Result 133, Processing Time 0.027 seconds

Implementation of an APT Attack Detection System through ATT&CK-Based Attack Chain Reconstruction (ATT&CK 기반 공격체인 구성을 통한 APT 공격탐지 시스템 구현)

  • Cho, Sungyoung;Park, Yongwoo;Lee, Kyeongsik
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.3
    • /
    • pp.527-545
    • /
    • 2022
  • In order to effectively detect APT attacks performed by well-organized adversaries, we implemented a system to detect attacks by reconstructing attack chains of APT attacks. Our attack chain-based APT attack detection system consists of 'events collection and indexing' part which collects various events generated from hosts and network monitoring tools, 'unit attack detection' part which detects unit-level attacks defined in MITRE ATT&CK® techniques, and 'attack chain reconstruction' part which reconstructs attack chains by performing causality analysis based on provenance graphs. To evaluate our system, we implemented a test-bed and conducted several simulated attack scenarios provided by MITRE ATT&CK Evaluation program. As a result of the experiment, we were able to confirm that our system effectively reconstructed the attack chains for the simulated attack scenarios. Using the system implemented in this study, rather than to understand attacks as fragmentary parts, it will be possible to understand and respond to attacks from the perspective of progress of attacks.

Flood Frequency Analysis with the consideration of the heterogeneous impacts from TC and non-TC rainfalls: application to daily flows in the Nam River Basin, South Korea

  • Alcantara, Angelika;Ahn, Kuk-Hyun
    • Proceedings of the Korea Water Resources Association Conference
    • /
    • 2020.06a
    • /
    • pp.121-121
    • /
    • 2020
  • Varying dominant processes, including Tropical Cyclone (TC) and non-TC rainfall events, have been known to drive the occurrence of precipitation in South Korea. With the changes in the pattern of the Earth's climate due to anthropogenic activities, nonstationarity or changes in the magnitude and frequency of these dominant processes have been separately observed for the past decades and are expected to continue in the coming years. These changes often cause unprecedented hydrologic events such as extreme flooding which pose a greater risk to the society. This study aims to take into account a more reliable future climate condition with two dominant processes. Diverse statistical models including the hidden markov chain, K-nearest neighbor algorithm, and quantile mappings are utilized to mimic future rainfall events based on the recorded historical data with the consideration of the varying effects of TC and non-TC events. The data generated is then utilized to the hydrologic model to conduct a flood frequency analysis. Results in this study emphasize the need to consider the nonstationarity of design rainfalls to fully grasp the degree of future flooding events when designing urban water infrastructures.

  • PDF

Rare Disaster Events, Growth Volatility, and Financial Liberalization: International Evidence

  • Bongseok Choi
    • Journal of Korea Trade
    • /
    • v.27 no.2
    • /
    • pp.96-114
    • /
    • 2023
  • Purpose - This paper elucidates a nexus between the occurrence of rare disaster events and the volatility of economic growth by distinguishing the likelihood of rare events from stochastic volatility. We provide new empirical facts based on a quarterly time series. In particular, we focus on the role of financial liberalization in spreading the economic crisis in developing countries. Design/methodology - We use quarterly data on consumption expenditure (real per capita consumption) from 44 countries, including advanced and developing countries, ending in the fourth quarter of 2020. We estimate the likelihood of rare event occurrences and stochastic volatility for countries using the Bayesian Markov chain Monte Carlo (MCMC) method developed by Barro and Jin (2021). We present our estimation results for the relationship between rare disaster events, stochastic volatility, and growth volatility. Findings - We find the global common disaster event, the COVID-19 pandemic, and thirteen country-specific disaster events. Consumption falls by about 7% on average in the first quarter of a disaster and by 4% in the long run. The occurrence of rare disaster events and the volatility of gross domestic product (GDP) growth are positively correlated (4.8%), whereas the rare events and GDP growth rate are negatively correlated (-12.1%). In particular, financial liberalization has played an important role in exacerbating the adverse impact of both rare disasters and financial market instability on growth volatility. Several case studies, including the case of South Korea, provide insights into the cause of major financial crises in small open developing countries, including the Asian currency crisis of 1998. Originality/value - This paper presents new empirical facts on the relationship between the occurrence of rare disaster events (or stochastic volatility) and growth volatility. Increasing data frequency allows for greater accuracy in assessing a country's specific risk. Our findings suggest that financial market and institutional stability can be vital for buffering against rare disaster shocks. It is necessary to preemptively strengthen the foundation for financial stability in developing countries and increase the quality of the information provided to markets.

Defining Business Process Improvement(BPI) Projects with Analysis Results Based on the Cause-and-Effect Chain (인과관계체인 기반의 분석 결과를 활용한 비즈니스 프로세스 개선 과제 정의)

  • Kang, Jun-Gyu;Lim, Seung-Kil
    • Journal of Korean Society of Industrial and Systems Engineering
    • /
    • v.38 no.1
    • /
    • pp.101-109
    • /
    • 2015
  • This paper suggests a procedure to define business process improvement (BPI) projects with analysis results based on the cause-and-effect chain. The procedure developed in this paper focuses on eliminating root causes of business problems resulted from abnormal events occurred in business process executions. First, we develop three criteria used to make clusters of the root causes where a cluster of root causes will be eliminated together by a BPI project defined based on the cluster. Second, we develop a method to formulate desired expectations from the BPI project. Also, we suggest a method to calculate the relative importance of the BPI projects that help a BPI organization determine priorities of them. We illustrate the procedure and the methods with some examples for the domestic mail delivery process in the postal service industry.

Development of a Multiplex Polymerase Chain Reaction Method for Simultaneous Detection of Genetically Modified Soy and Maize

  • Park, Kyoung-Sik;Kim, Mi-Gyeong;Leem, Dong-Gil;Yoon, Tae-Hyung;No, Ki-Mi;Hong, Jin;Kwon, Eun-Mi;Moon, Ae-Rie;Jeong, Ja-Young
    • Journal of Food Hygiene and Safety
    • /
    • v.25 no.3
    • /
    • pp.278-280
    • /
    • 2010
  • This study was aimed to develop a novel qualitative multiplex polymerase chain reaction (PCR) for simultaneous detection of genetically modified (GM) soy and maize within a single reaction. The specific primers designed to detect four respective GM events (A2704-12, MON88017, Bt11, and MON863) were included in the tetraplex PCR system. Each of PCR products for four GM events could be distinguished by agarose gel based on their different lengths. The specificity and reproducibility of this multiplex PCR were evaluated. This multiplex PCR consistently amplified only a fragment corresponding to a specific inserted gene in each of the four GM events and also amplified all four of the PCR products in the simulated GM mixture. These results indicate that this multiplex PCR method could be an effective qualitative detection method for screening GM soy and maize in a single reaction.

A Review of HAZID/Bowtie Methodology and its Improvement (해지드/보우타이 기법의 한계와 개선에 대하여)

  • Kim, Sung-Hoon
    • Journal of the Society of Naval Architects of Korea
    • /
    • v.59 no.3
    • /
    • pp.164-172
    • /
    • 2022
  • A HAZID is a brainstorming workshop to identify hazards in an early phase of a project. It should be flexible to capture all probable accidents allowing experienced participants to exploit their expertise and experiences. A bowtie analysis is a graphical representation of major accident hazards elaborating safety measures i.e. barriers. The result of these workshops should be documented in an organized manner to share as good as possible details of the discussion through the lifetime of the project. Currently results are documented using a three-step representation of an accident; causes, top event and consequences, which cannot capture correctly sequence of events leading to various accidents and roles of barrier between two events. Another problem is that barriers would be shown repeatedly leading to a misunderstanding that there are an enough number of safety measures. A new bowtie analysis method is proposed to describe an accident in multiple steps showing relations among causes or consequences. With causes and consequences shown in a format of a tree, the frequencies of having the top event (Fault tree analysis) and various consequences (Event tree analysis) are evaluated automatically based on the frequency of initiating causes and the probabilities of failure of barriers. It will provide a good description of the accident scenario and help the risk to be assessed transparently.

A Simulation Model for the Creation of RFID Business Events (RFID 비즈니스 이벤트의 생성을 위한 시뮬레이션 모델)

  • Ryu, Wooseok
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.17 no.11
    • /
    • pp.2609-2614
    • /
    • 2013
  • Adoption of RFID has become widespread including logistics, drug supply-chain, and healthcare. To adopt RFID, we need to evaluate performance and feasibility of RFID S/W such as EPC Information Service (EPCIS), which demands a variety of test datasets of RFID business events. This paper proposes a novel method for creating RFID business events dataset by means of the simulation of RFID infrastructure. Proposed model provides a flexible representation capability since this is based on well-known petri-net. In addition, it can also be useful when determining adoption of RFID as it supports simulation of RFID environment.

Analysis of the Factors Affecting Customer Satisfaction and Customer Loyalty in a Family Restaurant Chain (체인 패밀리 레스토랑의 고객 만족 및 고객 충성도에 미치는 요인 분석)

  • Kim, Soon-Hong;Yoo, Byoung-Kook
    • Journal of Distribution Science
    • /
    • v.13 no.5
    • /
    • pp.103-111
    • /
    • 2015
  • Purpose - When it comes to first impressions of family restaurants, people basically think of the following factors: cozy, a refreshing space, indoor lighting, atmospheric music, the best-quality service through mutual interactions with employees, birthday events, follow-up customer management, brand image, and many others. Focusing on such family restaurants characteristics, with consumption experience and customer satisfaction determined as mediator variables, this study looks into the selection factors that affect customer loyalty when choosing a family restaurant. Subsequently, the study conducts an empirical analysis of these selection factors with the greatest influence. Research design, data, and methodology - This study analyzed 200 total surveys of family restaurant customers including college students, workers, housewives, and others. The survey was conducted over two weeks in May 2014. For statistical processing, SPSS 21 was used for factor analysis and reliability analysis as well as AMOS for structural equation analysis. In terms of a variable that would influence either consumption experience or customer satisfaction at the restaurants, the study introduced the concept of customer equity. The study designed a model based on a hypothesis developed using the following factors: customer encounter service value, customer convenience value, brand equity, relationship equity, and other factors defined as components of customer equity by Rust et al. (2000) determined as independent variables as well as with customer experience and customer satisfaction set as mediator variables. The hypothesis, after all, assumed that customer loyalty would be positively (+) influenced. Results - The analysis results from the study reported that brand value, customer encounter service value, and relationship value have positive (+) effects on consumption experience and customer satisfaction. However, as for customer convenience value, this turned out not to have a statistically significant influence on consumption experience and customer satisfaction. In regard to a relation between consumption experience and customer satisfaction, the results showed that the former affects the latter, and in terms of intervening variables, both of these appeared to have a positive (+) effect on customer loyalty. Conclusions - This study suggests that family restaurants should look for strategies that focus on how to promote customer relationships. For example, restaurants could try birthday events or discount events to achieve this goal. Since the study ended up realizing relatively low levels of suitability and statistical significance, the path of the study changed. After all, in order to increase suitability and statistical significance, the study had to eliminate factors such as service quality and others and for this reason the study was unable to conduct the analysis as initially planned. In addition, the data samples of the research were mainly gathered from students, which made it hard to say that the analysis was carried out on samples from every different group. Future research should analyze the characteristics of each group of customers for factors affecting customer satisfaction and customer loyalty in the family restaurant chain.

Reaction of Gae-Phase Atomic Hydrogen with Chemisorbed Hydrogen Atoms on an Iron Surface

  • Kim, M. S.;Ree, J.
    • Bulletin of the Korean Chemical Society
    • /
    • v.18 no.9
    • /
    • pp.985-994
    • /
    • 1997
  • The reaction of gas-phase atomic hydrogen with hydrogen atoms chemisorbed on Fe(110) surface is studied by use of classical trajectory procedures. Flow of energy between the reaction zone and bulk solid phase has been treated in the generalized Langevin equation approach. A London-Eyring-Polanyi-Sato energy surface is used for the reaction zone interaction. Most reactive events are found to occur in strong single-impact collisions on a subpicosecond scale via the Eley-Rideal mechanism. The extent of reaction is large and a major fraction of the available energy goes into the vibrational excitation of H2, exhibiting a vibrational population inversion. Dissipation of reaction energy to the heat bath can be adequately described using a seven-atom chain with the chain end bound to the rest of solid. The extent of reaction is not sensitive to the variation of surface temperature in the range of Ts=0-300 K in the fixed gas temperature, but it shows a minimum near 1000 K over the Tg=300-2500 K.

Process Chain-Based Information Systems Development and Agent-Based Microworld Simulation As Enablers of the Learning & Agile Organization (학습, 민활 조직 실현을 위한 프로세스 사슬 기반 정보시스템 개발과 에이전트 기반 소세계 시뮬레이션)

  • Park, Kwang-Ho
    • Asia pacific journal of information systems
    • /
    • v.9 no.3
    • /
    • pp.177-194
    • /
    • 1999
  • Identifying knowledge as the single most important asset ultimately defining organizational competitiveness, enterprises are trying to move towards knowledge-oriented practices. Such practices have given rise to learning and agile organization, This paper presents applied information technologies to realize the learning and agile organization, focusing on systems thinking. Firstly, in order to establish a framework for the systems thinking, an information systems development method based on process chain is proposed. Then, an agent-based microworld simulation approach is presented. The approaches provide visible and analytical information to knowledge workers so that they can have systems thinking capabilities eventually. Various microworlds on the top of the information system can be constructed with agents and simulated for possible business events. All decision makings are dynamic in nature. To let knowledge workers look ahead the possible outcomes of the whole relevant processes is the core capability of the approaches. Through watching, the knowledge workers would be able to acquire new insights or problem solving knowledge for the problem in hand.

  • PDF