• KIPS Transactions on Computer and Communication Systems
• /
• v.7 no.6
• /
• pp.155-164
• /
• 2018

Many malicious programs have been compressed or encrypted using various commercial packers to prevent reverse engineering, So malicious code analysts must decompress or decrypt them first. The OEP (Original Entry Point) is the address of the first instruction executed after returning the encrypted or compressed executable file back to the original binary state. Several unpackers, including PinDemonium, execute the packed file and keep tracks of the addresses until the OEP appears and find the OEP among the addresses. However, instead of finding exact one OEP, unpackers provide a relatively large set of OEP candidates and sometimes OEP is missing among candidates. In other words, existing unpackers have difficulty in finding the correct OEP. We have developed new tool which provides fewer OEP candidate sets by adding two methods based on the property of the OEP. In this paper, we propose two methods to provide fewer OEP candidate sets by using the property that the function call sequence and parameters are same between packed program and original program. First way is based on a function call. Programs written in the C/C++ language are compiled to translate languages into binary code. Compiler-specific system functions are added to the compiled program. After examining these functions, we have added a method that we suggest to PinDemonium to detect the unpacking work by matching the patterns of system functions that are called in packed programs and unpacked programs. Second way is based on parameters. The parameters include not only the user-entered inputs, but also the system inputs. We have added a method that we suggest to PinDemonium to find the OEP using the system parameters of a particular function in stack memory. OEP detection experiments were performed on sample programs packed by 16 commercial packers. We can reduce the OEP candidate by more than 40% on average compared to PinDemonium except 2 commercial packers which are can not be executed due to the anti-debugging technique.

• The KIPS Transactions:PartA
• /
• v.13A no.2 s.99
• /
• pp.123-136
• /
• 2006

The prefetching technique is an effective way to reduce the latency caused memory access. However, excessively aggressive prefetch not only leads to cache pollution so as to cancel out the benefits of prefetch but also increase bus traffic leading to overall performance degradation. In this thesis, a prefetch filtering scheme is proposed which dynamically decides whether to commence prefetching by referring a filtering table to reduce the cache pollution due to unnecessary prefetches In this thesis, First, prefetch hashing table 1bitSC filtering scheme(PHT1bSC) has been shown to analyze the lock problem of the conventional scheme, this scheme such as conventional scheme used to be N:1 mapping, but it has the two state to 1bit value of each entries. A complete block address table filtering scheme(CBAT) has been introduced to be used as a reference for the comparative study. A prefetch block address lookup table scheme(PBALT) has been proposed as the main idea of this paper which exhibits the most exact filtering performance. This scheme has a length of the table the same as the PHT1bSC scheme, the contents of each entry have the fields the same as CBAT scheme recently, never referenced data block address has been 1:1 mapping a entry of the filter table. On commonly used prefetch schemes and general benchmarks and multimedia programs simulates change cache parameters. The PBALT scheme compared with no filtering has shown enhanced the greatest 22%, the cache miss ratio has been decreased by 7.9% by virtue of enhanced filtering accuracy compared with conventional PHT2bSC. The MADT of the proposed PBALT scheme has been decreased by 6.1% compared with conventional schemes to reduce the total execution time.

• Journal of Bio-Environment Control
• /
• v.31 no.4
• /
• pp.485-496
• /
• 2022

Modern agriculture is being transformed into smart agriculture to maximize production efficiency along with changes in the 4th industrial revolution. However, rural areas in Korea are facing challenges of aging, low fertility, and population outflow, making it difficult to transition to smart agriculture. Among ICT technologies, simulation allows users to observe or experience the results of their choices through imitation or reproduction of reality. The combination of the three-dimension (3D) model and the greenhouse simulator enable a 3D experience by virtual greenhouse for fruits and vegetable cultivation. At the same time, it is possible to visualize the greenhouse under various cultivation or climate conditions. The objective of this study is to apply the greenhouse climate management model for simulation development that can visually see the state of the greenhouse environment under various micrometeorological properties. The numerical solution with the mathematical model provided a dynamic change in the greenhouse environment for a particular greenhouse design. Light intensity, crop transpiration, heating load, ventilation rate, the optimal amount of CO₂ enrichment, and daily light integral were calculated with the simulation. The results of this study are being built so that users can be linked through a web page, and software will be designed to reflect the characteristics of cladding materials and greenhouses, cultivation types, and the condition of environmental control facilities for customized environmental control. In addition, environmental information obtained from external meteorological data, as well as recommended standards and set points for each growth stage based on experiments and research, will be provided as optimal environmental factors. This simulation can help growers, students, and researchers to understand the ICT technologies and the changes in the greenhouse microclimate according to the growing conditions.

• Journal of Global Scholars of Marketing Science
• /
• v.18 no.2
• /
• pp.223-252
• /
• 2008

In this study, we attempt to propose a choice-based diffusion model with switching cost, which can be used to forecast the dynamic substitution and competition among previous and new products at both individual-level and aggregate level, especially when market data for new products is insufficient. Additionally, we apply the proposed model to the empirical case of substitution and competition among Analog Cable TV that represents previous fixed charged broadcasting service and Digital Cable TV and Internet Protocol TV (IPTV) that are new ones, verify the validities of our proposed model, and finally derive related empirical implications. For empirical application, we obtained data from survey conducted as follows. Survey was administered by Dongseo Research to 1,000 adults aging from 20 to 60 living in Seoul, Korea, in May of 2007, under the title of 'Demand analysis of next generation fixed interactive broadcasting services'. Conjoint survey modified as follows, was used. First, as the traditional approach in conjoint analysis, we extracted 16 hypothetical alternative cards from the orthogonal design using important attributes and levels of next generation interactive broadcasting services which were determined by previous literature review and experts' comments. Again, we divided 16 conjoint cards into 4 groups, and thus composed 4 choice sets with 4 alternatives each. Therefore, each respondent faces 4 different hypothetical choice situations. In addition to this, we added two ways of modification. First, we asked the respondents to include the status-quo broadcasting services they subscribe to, as another alternative in each choice set. As a result, respondents choose the most preferred alternative among 5 alternatives consisting of 1 alternative with current subscription and 4 hypothetical alternatives in 4 choice sets. Modification of traditional conjoint survey in this way enabled us to estimate the factors related to switching cost or switching threshold in addition to the effects of attributes. Also, by using both revealed preference data(1 alternative with current subscription) and stated preference data (4 hypothetical alternatives), additional advantages in terms of the estimation properties and more conservative and realistic forecast, can be achieved. Second, we asked the respondents to choose the most preferred alternative while considering their expected adoption timing or switching timing. Respondents are asked to report their expected adoption or switching timing among 14 half-year points after the introduction of next generation broadcasting services. As a result, for each respondent, 14 observations with 5 alternatives for each period, are obtained, which results in panel-type data. Finally, this panel-type data consisting of $4{\ast}14{\ast}1000=56000$observations is used for estimation of the individual-level consumer adoption model. From the results obtained by empirical application, in case of forecasting the demand of new products without considering existence of previous product(s) and(or) switching cost factors, it is found that overestimated speed of diffusion at introductory stage or distorted predictions can be obtained, and as such, validities of our proposed model in which both existence of previous products and switching cost factors are properly considered, are verified. Also, it is found that proposed model can produce flexible patterns of market evolution depending on the degree of the effects of consumer preferences for the attributes of the alternatives on individual-level state transition, rather than following S-shaped curve assumed a priori. Empirically, it is found that in various scenarios with diverse combinations of prices, IPTV is more likely to take advantageous positions over Digital Cable TV in obtaining subscribers. Meanwhile, despite inferiorities in many technological attributes, Analog Cable TV, which is regarded as previous product in our analysis, is likely to be substituted by new services gradually rather than abruptly thanks to the advantage in low service charge and existence of high switching cost in fixed charged broadcasting service market.

• Korean Journal of Heritage: History & Science
• /
• v.49 no.1
• /
• pp.4-21
• /
• 2016

The purpose of this study is to investigate changes of Jinju Sword Dance, characteristics of the changes, and the current condition of its preservation and succession after the designation as the important intangible cultural property no. 12 in January 16th, 1967. In other words, this study understands the situation which has established the present state of after changes over generations. As of now. the year of 2015, the 3 generation holders have been approved since 1967. In 1967, 8 members of $1^{st}$ generation holders were selected from gisaengs of Gwonbeon. However, the succession training was incomplete due to conflicts among the holders, the deaths of some holders, and economic activities of the individuals. As the need of a pivot for succession training and activities was rising, Seong, Gye-Ok was additionally approved as the $2^{nd}$ generation holder on June $21^{st}$, 1978. Seong, Gye-Ok who had never been a gisaeng had dramatically changed with a lot of new attempts. After the death of Seong, Gye-Ok in 2009, Kim, Tae-Yeon and Yu, Yeong-Hee were approved as the $3^{rd}$ generation holders in February, 2010. Based on the resources including the "Cultural Research Reports of Important Intangible Cultural Properties" in 1966 and videos up to 2014, the changes of the dance and surroundings are as follow. 1. The formation of musical accompaniment has been changed during the 3 generations. In the video of the $1^{st}$ generation(in 1970), the performance lasted about 15 minutes, whereas the performance lasted 25 minutes in the video of the $2^{nd}$ generation. Yumbuldoduri rhythm was considered as Ginyumbul(Sangryeongsan) and played more slowly. The original dance requiring only 15 rhythms was extended to 39 rhythms to provide longer performance time. In the $3^{rd}$ generation, the dance recovered 15 rhythms using the term Ginyumbul. The facts that Yumbul was played for 3 minutes in the $1^{st}$ generation but for 5 minutes in the 3rd generation shows that there was tendency pursuing the slowness from the $2^{nd}$ generation. 2. For the composition of the Dance, the performance included additional 20 rhythms of Ginyumbul and Ah(亞)-shaped formation from the $2^{nd}$ generation. From the $3^{rd}$ generation, the performance excluded the formation which had no traditional base. For the movement of the Dance, the bridge poses of Ggakjittegi and Bangsukdoli have been visibly inflexible. Also, the extention of time value in 1 beat led the Dance less vibrant. 3. At the designation as an important intangible cultural property (in 1967), the swords with rotatable necks were used, whereas the dancers had been using the swords with non-rotatable necks since late 1970s when the $2^{nd}$ generation holder began to used them. The swords in the "Research Reports" (in 1966) was pointy and semilunar, whereas the straight swords are being used currently. The use of the straight swords can be confirmed from the videos after 1970. 4. There is no change in wearing Jeonlib, Jeonbok, and Hansam, whereas the arrangement of Saekdong of Hansam was different from the arrangement shown in the "Research Reports". Also, dancers were considered to begin wearing the navy skirts when the swords with non-rotatable necks began to be used. Those results showed that has been actively changed for 50 years after the designation. The $2^{nd}$ generation holder, Seong, Gye-Ok, was the pivot of the changes. However, , which was already designated as an important intangible cultural property, is considered to be only a victim of the change experiment from the project to restore Gyobang culture in Jinju, and it is a priority to conduct studies with historical legitimacy. First of all, the slowing beat should be emphasized as the main fact to reduce both the liveliness and dynamic beauty of the Dance.