• Journal of the Korea Society of Computer and Information
• /
• v.12 no.1 s.45
• /
• pp.161-168
• /
• 2007

Web attack uses structural, logical and coding error or web application rather than vulnerability to Web server itself. According to the Open Web Application Security Project (OWASP) published about ten types of the web application vulnerability to show the causes of hacking, the risk of hacking and the severity of damage are well known. The detection ability and response is important to deal with web hacking. Filtering methods like pattern matching and code modification are used for defense but these methods can not detect new types of attacks. Also though the security unit product like IDS or web application firewall can be used, these require a lot of money and efforts to operate and maintain, and security unit product is likely to generate false positive detection. In this research profiling method that attracts the structure of web application and the attributes of input parameters such as types and length is used, and by installing structural database of web application in advance it is possible that the lack of the validation of user input value check and the verification and attack detection is solved through using profiling identifier of database against illegal request. Integral security management system has been used in most institutes. Therefore even if additional unit security product is not applied, attacks against the web application will be able to be detected by showing the model, which the security monitoring log gathering agent of the integral security management system and the function of the detection of web application attack are combined.

• The Korean Journal of Nuclear Medicine Technology
• /
• v.12 no.3
• /
• pp.184-191
• /
• 2008

Purpose: To evaluate the degree of malignancy of incident thyroid lesion found in $^{18}F$-FDG PET/CT findings and the usefulness of the method suggested in this study, we applicate the Delay Scan Method that differentiate a false positive benign tumor, inflammation and malignancy, as well as make the criteria of SUV. Materials and Methods: A retrograde study was conducted of 800 patients who were admitted in E hospital to receive $^{18}F$-FDG PET/CT examination. One patient who was diagnosed as primary thyroid cancer and received $^{18}F$-FDG PET/CT examination was excluded. The number of final patients of this study was 799, the reasons of $^{18}F$-FDG PET/CT examination of these patients were follow-up of old cancer or suspicious tumorous lesion in 696 and disease screening in 103. $^{18}F$-FDG PET/CT image photographing was taken in Biograph-Duo made by SIEMENS, after taking normal $^{18}F$-FDG PET/CT image (1 hr) and then 1 hr later we took the thyroid 1 bed-delayed image for the patients who showed abnormal thyroid $^{18}F$-FDG uptake and above 2.0 SUV for 2 minutes every 1 bed. For the patients who showed abnormal thyroid uptake and above 2.0 SUV, 1 hr later, we took a 1 bed-delayed image and then made a comparative study between measured $SUV_{max}$ of 1 hr-abnormal uptake image and that of 2 hr-delayed image. Results and Conclusion: In this $^{18}F$-FDG PET/CT study among the patients who showed incidental $^{18}F$-FDG thyroidal uptake the number of thyroid incidentaloma was 5 (0.63%), all of then showed benign findings. And in the case of incidental $^{18}F$-FDG uptake in thyroid, $SUV_{max}$ variance obtained from 2 hr delayed image can be a indirect criteria in differentiating benign tumor from malignancy and decrease finding error. In the cases found thyroid incidentaloma when 1) $SUV_{max}$ of focal thyroid lesion is above 5.0 and 2) $SUV_{max}$ variance between normal $^{18}F$-FDG PET/CT exam and 2 hr delayed is $1.0{\pm}0.5$, they are suspected as malignancy and confirming biopsy is to be followed. Otherwise, I also think that distinct follow-up PET or CT image study is a reasonable diagnostic method.