• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.13 no.7
• /
• pp.3756-3777
• /
• 2019

Recent internet development is helping malware researchers to generate malicious code variants through automated tools. Due to this reason, the number of malicious variants is increasing day by day. Consequently, the performance improvement in malware analysis is the critical requirement to stop the rapid expansion of malware. The existing research proved that the similarities among malware variants could be used for detection and family classification. In this paper, a Cross-Platform Malware Variant Classification System (CP-MVCS) proposed that converted malware binary into a grayscale image. Further, malicious features extracted from the grayscale image through Combined SIFT-GIST Malware (CSGM) description. Later, these features used to identify the relevant family of malware variant. CP-MVCS reduced computational time and improved classification accuracy by using CSGM feature description along machine learning classification. The experiment performed on four publically available datasets of Windows OS and Android OS. The experimental results showed that the computation time and malware classification accuracy of CP-MVCS was higher than traditional methods. The evaluation also showed that CP-MVCS was not only differentiated families of malware variants but also identified both malware and benign samples in mix fashion efficiently.

• Journal of the Korea Society of Computer and Information
• /
• v.18 no.7
• /
• pp.111-123
• /
• 2013

To verify software vulnerability, the method of conjecturing software structure and then testing the software based on the conjectured structure has been highlighted. To utilize the method, an efficient way to conjecture software structure is required. The popular graph and tree methods such as DFG(Data Flow Graph), CFG(Control Flow Graph) and CFA(Control Flow Automata) have a serious drawback. That is, they cannot express software in a hierarchical fashion. In this paper, we propose a method to overcome the drawback. The proposed method applies various input data to a binary code, generate CFG's based on the code output and construct a HCFG (Hierarchical Control Flow Graph) to express the generated CFG's in a hierarchical structure. The components required for HCFG and progressive algorithm to construct HCFG are also proposed. The proposed method is verified through constructing the software architecture of an open SMTP(Simple Mail Transfer Protocol) server program. The structure generated by the proposed method and the real program structure are compared and analyzed.

• Journal of the Korean Society of Costume
• /
• v.58 no.3
• /
• pp.116-122
• /
• 2008

This study aims at defining the meaning of Pobeckchuck in the historical view-point, which appeared in the History of Joseon Dynasty, regarding the periods from the ruling period of Sunjo to that of Sunjong as the latter part of history. Pobeckchuck used in King Sejong was redressed in accordance with the measurement in the Kyeonggukdadejeon(code), in which time one Pobeckchuck was 46.80cm long. It is known that Juchuck, Hwangjongchuck, Youngjochuck, Joraegichuck etc. which had been used in the ruling period of Sejong Dynasty, were used till the period of Youngjo. Also, the document shows that in the 12th ruling period of Sunjo, Pobeckchuck was used for measurement, and in the 20th ruling period of Sunjo, newly-made ruler was only used for the measurement of fields, but no more details about how long it was. But according to the document complied at that time, one Pobeckchuck was 46.80cm long, which fact reveals that the same measurement was used as in the ruling period of Sunjo. When all the measurement laws which were established in the 3rd year of Junghee, the 6th year of Kwangmu were abolished, Pobeckchuck was solely banned from its use, which fact offers a glimpse of how confusing at that period was. The comparison and examination among many documents in the latter part of Joseon Dynasty show the differences within about 4cm that one Pobeckchuck ranged from 44.80cm to 48.80cm long. But no other document on measurement appeared in the History of Joseon Dynasty, except for the 46.80cm. Thus, the 46.80cm corrected in the ruling period of Sunjo proves that one chuck in Pobeckchuck adopted by the dynasty was used as the measurement of length till the ruling period of Sunjong.

• Earthquakes and Structures
• /
• v.15 no.5
• /
• pp.453-462
• /
• 2018

Damages to buildings affected by a near-fault strong ground motion are largely attributed to the vertical component of the earthquake resulting in column failures, which could lead to disproportionate building catastrophic collapse in a progressive fashion. Recently, considerable interests are awakening to study effects of earthquake vertical components on structural responses. In this study, detailed modeling and time-history analyses of a 12-story code-conforming reinforced concrete moment frame building carrying the gravity loads, and exposed to once only the horizontal component of, and second time simultaneously the horizontal and vertical components of an ensemble of far-field and near-field earthquakes are conducted. Structural responses inclusive of tension, compression and its fluctuations in columns, the ratio of shear demand to capacity in columns and peak mid-span moment demand in beams are compared with and without the presence of the vertical component of earthquake records. The influences of the existence of earthquake vertical component in both exterior and interior spans are separately studied. Thereafter, the correlation between the increase of demands induced by the vertical component of the earthquake and the ratio of a set of earthquake record characteristic parameters is investigated. It is shown that uplift initiation and the magnitude of tensile forces developed in corner columns are relatively more critical. Presence of vertical component of earthquake leads to a drop in minimum compressive force and initiation of tension in columns. The magnitude of this reduction in the most critical case is recorded on average 84% under near-fault ground motions. Besides, the presence of earthquake vertical components increases the shear capacity required in columns, which is at most 31%. In the best case, a direct correlation of 95% between the increase of the maximum compressive force and the ratio of vertical to horizontal 'effective peak acceleration (EPA)' is observed.

• Journal of KIISE:Computing Practices and Letters
• /
• v.14 no.5
• /
• pp.517-521
• /
• 2008

A worm is a malware that propagates quickly from host to host without any human intervention. Need of early worm detection has changed research paradigm from signature based worm detection to the behavioral based detection. To increase effectiveness of proposed solution, in this paper we present mechanism of detection and prevention of worm in distributed fashion. Furthermore, to minimize the worm destruction; upon worm detection we propagate the possible attack aleγt to neighboring nodes in secure and organized manner. Considering worm behavior, our proposed mechanism detects worm cycles and infection chains to detect the sudden change in network performance. And our model neither needs to maintain a huge database of signatures nor needs to have too much computing power, that is why it is very light and simple. So, our proposed scheme is suitable for the ubiquitous environment. Simulation results illustrate better detection and prevention which leads to the reduction of infection rate.

• Journal of the Korean Society of Costume
• /
• v.59 no.7
• /
• pp.65-76
• /
• 2009

Korea has established a code for the economic and cultural industry that covers a wide range of classes unlike the old information era which was limited to the simple knowledge, technology, tools, morals, and customers that had been established in our society. On the other hand, 'culture marketing' is a series of marketing activities in which value-added items are created and shared. The combination of business management and culture seemed pretty awkward considering how rapidly the world was changing, however, the nature of today's culture has changed and the economic nature of culture products has resulted from those changes. In this paper, two authors who expressed the cultural identity in the culture products are studied through a comparison analysis; the author Min Yeongsoon expressed the identity confusion that she experienced in a foreign country and how she overcame homesickness in her work; and the author Kim Ata expressed his confidence in Asia and used his clear and loud voice to express the culture in his work. In addition, today's culture products are affected by the surrounding cultures such as the member's traditional society, environmental culture, and individual's culture. It is a good source for good works of art. In this study, the efforts of seeking the cultural identity, structuring the concept, seeking a new market and possibilities are used to make a consistent process in order to make a series of the systems required for planning and developing culture products.

• Explosives and Blasting
• /
• v.22 no.4
• /
• pp.7-15
• /
• 2004

An explosion modeling technique was developed by using the spherical discrete element code, PFC3D, which can be used to model the dynamic stress wave propagation phenomenon. The modeling technique is simply based on an idea that the explosion pressure should be applied to a PFC3D particle assembly not in the form of an external force (body force), but in the form of a contact force (surface force). According to this concept, the explosion pressure is applied to the wall particles by the scheme of radius expansion/contraction of inner-hole particles. The output wall force is compared to the input hole pressure in every time step, and a correction routine is activated to control the radius multiplier of the inner-hole particles. A comparative blast simulation far a cement mortar block of $80\times90\times80mm$ was conducted by using the conventional explosion modeling method and the new one. The results of the simulation are presented in a qualitative fashion.

• Journal of Integrative Natural Science
• /
• v.3 no.2
• /
• pp.72-77
• /
• 2010

Alginate lyases, also known as alginases or alginate depolymerases, catalyze the degradation of alginate by a ${\beta}$-elimination mechanism that has yet to be fully elucidated. Alginate is a copolymer of ${\alpha}$-L-guluronate (G) and its C5 epimer ${\beta}$-D-mannuronate (M), arranged as homopolymeric G blocks, M blocks, alternating GM or random heteropolymeric G/M stretches. Almost all alginate lyases depolymerize alginate in an endolytical fashion via a ${\beta}$-elimination reaction. The alginate lyase Atu3025 from Agrobacterium tumefaciens strain C58, consisting of 776 amino-acid residues, is a novel exotype alginate lyase classified into polysaccharide lyase family 15. Till now there is no crystal structure available for this class of proteins. Since there is no template with high sequence identity, three-dimensional coordinates for exotype alginate lyase (PL 15 family) were determined using modeling methods (Comparitive modeling and Fold recognition). The structures were modeled using the X-ray coordinates from Heparinase protein family (PDB code: 3E7J). This enzyme (Atu3025) displays enzymatic activity for both poly-M and poly-G alginate. Since poly-M is widespread; docking of a tri-mannuronate against the modeled structure was performed. We identified some of those residues which are crucial for lyase activity. The results from this study should guide future mutagenesis studies and also provides a starting point for further proceedings.

• The KIPS Transactions:PartC
• /
• v.8C no.6
• /
• pp.783-792
• /
• 2001

It is well known that, in the near future, the lifetime of the IPv4 address space will be limited and available 32-bit IP network addresses will not be left any more. In order to solve such IPv4 address space problem in an effective way, the transition to the new version using IPv6 architecture is inevitably required. At present, it is impossible to convert IPv4 into IPv6 at a time, since the coverage and the size of today's Internet is too huge. Therefore, the coexistence of both IPv4 and IPv6 must be arranged in a special and practical fashion for rapid conversion on the whole. IP protocol translation has been proposed to ease the translation of the Internet from IPv4 to IPv6. This paper presents the design and implementation of a transparent transition service that translates packet header as they cross between IPv4 and IPv6 networks. IPv4/IPv6 Translation Protocol is written in c source code and is tested by the local test recommended by ISO, which has the most excellent error detection function. The test was processed with a test scenario and it was found that the results were successful.

• Journal of KIISE:Computing Practices and Letters
• /
• v.5 no.6
• /
• pp.801-808
• /
• 1999

지금까지, 전기통신망과 장비들의 관리에 대해서는 많은 연구들이 진행되었지만, TMN 상위 계층의 서비스 관리와 비즈니스 관리에 대한 연구는 많이 수행되지 못했다. 최근 전세계적으로 TMN 상위 계층의 관리기능 구현을 위해서 CORBA 기술을 적용하고자하는 관심이 증가하고 있다. 본 논문에서는, 정보모델과 상호운용에 관한 TMN과 CORBA의 주요특징들을 비교하고, TMN 프레임웍와 효율적인 CORBA 기술 연동을 위한 플랫폼 구조를 제안한다. 제안된 구조에서, TMN 관리 정보를 CORBA IDL 인터페이스로 변환해주는 GDMO/ASN.1 - CORBA IDL 변환기가 고안, 구현되었고, JIDM의 상호 작용 변환의 구현을 위해서 TMN/CORBA 게이트웨이 또한 고안되었다. 그리고 이러한 기능의 확장을 위해서 모듈 형식으로 라이브러리들과 코드 생성기들이 설계, 구현되었다.Abstract Up to now, a lot of efforts have been made for the management of telecommunication networks and equipment, but less effort has been made for the realization of higher-layer service and business management. There are recently worldwide growing interests for applying CORBA technology for the realization of higher layer Telecommunication Management Network (TMN) management functions. In this paper, we compare the features of TMN and CORBA with respect to information model, and operational behavior. And then, we propose a platform architecture for the efficient integration of CORBA technology within TMN framework. Within platform architecture, GDMO/ASN.1 to IDL translator has been designed and implemented for translating TMN management information into CORBA IDL interface. The TMN/CORBA gateway is also designed for realization of the interaction translation specification of JIDM task force. The libraries and code generators have been designed and implemented in a modular fashion to provide the functional extensibility.