• Journal of the Korea Society of Computer and Information
• /
• v.11 no.5 s.43
• /
• pp.127-137
• /
• 2006

We propose two phase filtering scheme to develop an efficient mechanism for XML databases to control query-based access. An access control environment for XML documents and some techniques to deal with fine-grained authorization priorities and conflict resolution issues are proposed. Despite this, relatively little work has been done to enforce access controls particularly for XML databases in the case of query-based access. The basic idea utilized is that a user query interaction with only necessary access control rules is modified to an alternative form through a query optimization technique, which is guaranteed to have no access violations using tree-aware metadata of XML schemas. The scheme can be applied to any XML database management system and has several advantages such as small execution time overhead, fine-grained controls, and safe and correct query modification. The experimental results clearly demonstrate the efficiency of the approach.

• Journal of the Korea Society of Computer and Information
• /
• v.29 no.6
• /
• pp.131-141
• /
• 2024

The aging population and worsening lifestyle habits have increased the risk of chronic diseases. This has heightened the importance of preventive healthcare, particularly through personalized health management services based on individual health data. Despite this, the domestic digital healthcare industry remains underdeveloped. Given the need for acceptance from both consumers and providers, this study uses the Analytic Hierarchy Process (AHP) to identify success factors for health management service platforms. AHP evaluates the relative importance of various factors to aid decision-making. Results show that providers prioritize data analysis and platform design, laws and regulations, and data standardization, while consumers prioritize system stability, laws and regulations, and system security. These findings highlight the need for strategies to bridge the expectation gap to effectively promote health management service platforms.

• Journal of Korea Multimedia Society
• /
• v.17 no.2
• /
• pp.170-179
• /
• 2014

Recently the U-Healthcare system has been rapidly advanced to manage emergence rescue for seniors. We can access emergency rescue systems with high quality services anytime, anywhere under ubiquitous healthcare systems. The more the various systems develop, the more software security systems become important. Therefore, the safety-critical system has been widely spread to the world by advancement of the information and communication technologies. There are a lot kind of fault analysis methods to evaluate software security systems. However due to characteristics of software that is not applied by human error, it can be prevented the enormous damages and losses from improving the safety of safety-critical system. So this paper proposes an integration method of FTA and Forward and Backward FMECA. This method has each strength of FTA and FMECA which is visual and numeric in normalization. First, by use of FTA, we can redraw FTA with Forward FMECA and Backward FMECA in consideration of occurrence, severity, detection, correctness, robustness, and security. Also according to value of NRVP at each event, we can modify FTA diagrams as shown critical paths given by severity and occurrence. Also, we propose the improved emergency rescue service platform of ubiquitous healthcare systems through identifying priorities of the criticality according to normalized risk priority values (NRPV).

• Korean Security Journal
• /
• no.46
• /
• pp.31-62
• /
• 2016

This study is about the phenomenological study of bodyguards' ethical dilemmas. Through this study, the meaning and essence of bodyguards' ethical dilemmas will be analyzed based on empirical facts. The purpose of this study is to provide basic information of the prevention and solutions for their ethical dilemmas and to understand and research the process and the essentials of them. To achieve this goal of the study, seven bodyguards who experienced ethical dilemmas working more than five years are selected as objects of the study. Colaizzi's six stage method are applied into this study so information gathered through interviews and questionnaire from 0ctober 1st, 2015 to November 20th, 2015 is analyzed. From the process of this research, these following conclusions are drawn considering validity of this study and ethical things. As a result, bodyguards' ethical dilemmas are divided into six centric meanings and 20 thematic statement. First, the centric meaning is conflict factors and the themes are discordance of pre-practice, regulatory or procedure problems, communication about sturcture and job and service disagreement. Second, the centric meaning is limited professional roles and the themes are institutional custom, decision making, priorities. Third, the centric meaning is difficulties of circumstantial judgement at work places and the themes are ambiguity of decision, conflict of knowledge, experience and opinion. Forth, the centric meaning is reasonable self-defense and the themes are lack of responsibility, rationalization, intentional negligence and sense of shame. Fifth, the centric meaning is difficulties of social network and the themes are the relationships between subordinates and superiors, the role of a moderator, uncooperative work and unpleasant sayings and doings. Sixth, the centric meaning is keeping secrets and the themes are burried for and illegal practice.

• Journal of the military operations research society of Korea
• /
• v.36 no.3
• /
• pp.15-27
• /
• 2010

Dual-use technology, upon its effective development, can be a highly efficient technology that may be utilized for both achieving industry competitiveness and building National Security. Although research needs for such development methodology and call for corresponding efforts have long been proposed, actual outputs have not reached its desired level. Hence, this paper aims to provide more concrete and quantitative process in technology planning used to activate development of dual-use technology, considering dual usability and transferability of such technologies. In such effort, we propose use of patent analysis and the Analytic Hierarchy Process (AHP) for determining priorities for spin-off defense technology. First, the necessity of R&D and potential spin-off are measured based on patent information. Second, the necessity of R&D results from a quantitative analysis and the potentials spin-off are derived from analysis of patent citations. Then, AHP is used to calculate the importance of evaluating factors, and to assess alternative scores. Finally, we present the result of spin-off priority. A case study on the Korea defense technology is presented to illustrate the proposed method. We expect this study to make contribution in vision making of the military R&D spending.

• Journal of Intelligence and Information Systems
• /
• v.28 no.1
• /
• pp.287-310
• /
• 2022

Companies' interest in developing AI-based intelligent new products is increasing. Recently, the main concern of companies is to innovate customer experience and create new values by developing new products through the effective use of Artificial intelligence technology. However, due to the nature of products based on radical technologies such as artificial intelligence, intelligent products differ from existing products and development methods, so it is clear that there is a limitation to applying the existing development methodology as it is. This study proposes a new research method based on KANO-TOPSIS for the successful development of AI-based intelligent new products by using car voice assistants as an example. Using the KANO model, select and evaluate functions that customers think are necessary for new products, and use the TOPSIS method to derives priorities by finding the importance of functions that customers need. For the analysis, major categories such as vehicle condition check and function control elements, driving-related elements, characteristics of voice assistant itself, infotainment elements, and daily life support elements were selected and customer demand attributes were subdivided. As a result of the analysis, high recognition accuracy should be considered as a top priority in the development of car voice assistants. Infotainment elements that provide customized content based on driver's biometric information and usage habits showed lower priorities than expected, while functions related to driver safety such as vehicle condition notification, driving assistance, and security, also showed as the functions that should be developed preferentially. This study is meaningful in that it presented a new product development methodology suitable for the characteristics of AI-based intelligent new products with innovative characteristics through an excellent model combining KANO and TOPSIS.

• Journal of Digital Convergence
• /
• v.17 no.8
• /
• pp.123-130
• /
• 2019

The advent of the full-fledged Internet of Things era will bring together various types of information through Internet of Things devices, and the vast amount of information collected will be generated as new information by the analysis process. To effectively store this generated information, a flexible and scalable cloud computing system is advantageous. Therefore, the main determinants for effective client system acceptance are viewed as motivator factor (economics, efficiency, etc.) and hindrance factor (transitional costs, security issues, etc.) and the purpose of this study is to determine which detailed factors play a major role in making new system acceptance decisions around harm. The factors required to determine the major priorities are defined as the system acceptance determinants from the technical point of view obtained through the literature review, and the questionnaire is prepared based on the factors derived, and the survey is conducted on the experts concerned. In addition, the AHP analysis aims to achieve a final priority by performing a bifurcation between components for measuring a decision unit. Furthermore, the results of this study will serve as an important basis for making decisions based on acceptance (enabling) of technology.

• Korean Security Journal
• /
• no.27
• /
• pp.161-195
• /
• 2011

As crimes have increased to an extent that the police cannot cope with, there have been continuous discussions for the introduction of Private Investigation (hereafter PI) in Korea. However, attempts to legislate for the introduction of PI have failed every time PI bills for the introduction of PI were proposed. This was fundamentally because arguments both for and against the introduction of PI were sharply divided depending on the priorities. However, regardless of those clash of views, an apparent need for the legislation of PI service has arisen. As Korea opens its service market to other countries through GATS and FTAs, currently existing domestic PI law has been found to be inconsistent with international agreements such as GATS and KOREA-US(KORUS) FTA. This paper found that the Act on Usage and Protection of Credit Information which regulates PI service is inconsistent with the Article 12.4(a)(i) and (iii) of KORUS FTA and the Article 7.11 and the Article 7.13 of KOREA-EU FTA. If Korea does not modify the existing laws and establish new laws in relation to PI, such inconsistencies could lead to international trade disputes which could amount to billions of dollars. In this regard, the passage of the PI bill is necessary.

• The Journal of the Korea Contents Association
• /
• v.21 no.12
• /
• pp.896-905
• /
• 2021

In the field of SIEM(Security information and event management), many studies try to use a feedback system to solve lack of completeness of training data and false positives of new attack events that occur in the actual operation. However, the current feedback system requires too much human inputs to improve the running model and even so, those feedback from inexperienced analysts can affect the model performance negatively. Therefore, we propose "active model improving feedback technology" to solve the shortage of security analyst manpower, increasing false positive rates and degrading model performance. First, we cluster similar predicted events during the operation, calculate feedback priorities for those clusters and select and provide representative events from those highly prioritized clusters using XAI (eXplainable AI)-based event visualization. Once these events are feedbacked, we exclude less analogous events and then propagate the feedback throughout the clusters. Finally, these events are incrementally trained by an existing model. To verify the effectiveness of our proposal, we compared three distinct scenarios using PKDD2007 and CSIC2012. As a result, our proposal confirmed a 30% higher performance in all indicators compared to that of the model with no feedback and the current feedback system.

• Journal of KIISE:Databases
• /
• v.34 no.1
• /
• pp.1-17
• /
• 2007

As XML is becoming a de facto standard for distribution and sharing of information, the need for an efficient yet secure access of XML data has become very important. To enforce the fine-level granularity requirement, authorization models for regulating access to XML documents use XPath which is a standard for specifying parts of XML data and a suitable language for both query processing. An access control environment for XML documents and some techniques to deal with authorization priorities and conflict resolution issues are proposed. Despite this, relatively little work has been done to enforce access controls particularly for XML databases in the case of query access. Developing an efficient mechanism for XML databases to control query-based access is therefore the central theme of this paper. This work is a proposal for an efficient yet secure XML access control system. The basic idea utilized is that a user query interaction with only necessary access control rules is modified to an alternative form which is guaranteed to have no access violations using tree-aware metadata of XML schemes and set operators supported by XPath 2.0. The scheme can be applied to any XML database management system and has several advantages over other suggested schemes. These include implementation easiness, small execution time overhead, fine-grained controls, and safe and correct query modification. The experimental results clearly demonstrate the efficiency of the approach.