• 제목/요약/키워드: Intensive security control

검색결과 16건 처리시간 0.021초

Cloud Computing 서비스 침해방어를 위한 단계별 4-Stage 방어기법에 관한 연구 (A Study on a 4-Stage Phased Defense Method to Defend Cloud Computing Service Intrusion)

  • 서우석;박대우;전문석
    • 한국전자통신학회논문지
    • /
    • 제7권5호
    • /
    • pp.1041-1051
    • /
    • 2012
  • 최근 공개되어진 네트워크 인프라를 활용한 서비스 집약 솔루션인 Cloud Computing에 대한 공격은 개발 플랫폼과 웹 기반 제공 소프트웨어, 자원 서비스 등을 무력화시키는 침해 사고와 서비스 장애를 발생시키고 있다. 따라서 불법적인 서비스 차단에 대한 공격으로부터 Cloud Computing 시스템이 지원하는 3가지 서비스 (3S' : laaS, PaaS, SaaS)의 운영정보와 생성된 자료에 대한 보안연구가 필요하다. 본 논문은 Cloud Computing 서비스에 대한 공격과 방어 실험을 단계별 4-Stage 기반의 방어기법으로 최적의 서비스가 가능한 시스템 구축에 관한 연구이다. 최초 네트워크에 대한 접근을 관제하고 가상화 서비스 제어와 지원 서비스 분류, 다중화 경로 선정 등의 순차적이며, 단계적인 4-Stage 접근 제어를 실시하는 방어정책으로 공격을 분산시키고 각 Stage별 접근 제어를 위한 모니터링과 분석을 통해 방어정책 구현과 분석을 시행함으로써 공격 유형별 방어를 실험하고 연구 결과는 Cloud Computing 서비스 기반의 방어정책 구현을 위한 실무적인 기초자료를 제공하고자 한다.

정보보안기업의 사외이사제도가 이익조정에 미치는 영향에 관한 연구 (A Study on the Effects of Earnings Management in Outside Directors System for Information Security Company)

  • 김동영
    • 한국전자거래학회지
    • /
    • 제19권2호
    • /
    • pp.143-158
    • /
    • 2014
  • 우리나라 정보보안 기업은 대체로 소유와 경영이 명확하게 분리되어 있지 않아 이사회가 원활히 제 기능을 하지 못하고 지배주주가 경영의사결정에 관여하며 이사회가 내부적인 통제 임무를 제대로 수행하지 못한다는 문제점들이 있다고 제기되었다. 본 연구의 목적은 정보보안 기업이 기업지배구조 개선의 일환으로 도입한 사외이사제도가 회계정보 투명성에 실효성이 있는지 여부를 알아보고 또한 기업경영의 전반적인 부분에서 효율적으로 운영이 되고 있는지를 경영자의 이익조정과 관련하여 실증자료를 이용하여 분석하고자 한다. 즉 구체적인 목적은 기술집약적 특성을 가진 정보보안기업을 중심으로 이사회의 사외이사비율과 사외이사의 이사회의 참석율을 대상으로 이익조정과의 관계를 파악하는데 목적이 있다. 본 연구의 <가설 1>은 이사회의 사외이사의 비율은 재량적 발생액과 부(-)의 관계에 있다. <가설 2>는 사외이사의 이사회 참석율은 재량적 발생과 부(-)의 관계에 있다. 실증분석결과 <가설 1>은 사외이사비율과 재량적 발생액의 관계는 가설과 같이 부(-)의 관계를 보이며 유의하므로, 채택되었다. 가설 2는 사외이사 참석율과 재량적 발생도 가설과 마찬가지로 회귀계수가 부(-)의 관계를 보이고 유의하므로 채택되었다.

Intelligent Character Recognition System for Account Payable by using SVM and RBF Kernel

  • Farooq, Muhammad Umer;Kazi, Abdul Karim;Latif, Mustafa;Alauddin, Shoaib;Kisa-e-Zehra, Kisa-e-Zehra;Baig, Mirza Adnan
    • International Journal of Computer Science & Network Security
    • /
    • 제22권11호
    • /
    • pp.213-221
    • /
    • 2022
  • Intelligent Character Recognition System for Account Payable (ICRS AP) Automation represents the process of capturing text from scanned invoices and extracting the key fields from invoices and storing the captured fields into properly structured document format. ICRS plays a very critical role in invoice data streamlining, we are interested in data like Vendor Name, Purchase Order Number, Due Date, Total Amount, Payee Name, etc. As companies attempt to cut costs and upgrade their processes, accounts payable (A/P) is an example of a paper-intensive procedure. Invoice processing is a possible candidate for digitization. Most of the companies dealing with an enormous number of invoices, these manual invoice matching procedures start to show their limitations. Receiving a paper invoice and matching it to a purchase order (PO) and general ledger (GL) code can be difficult for businesses. Lack of automation leads to more serious company issues such as accruals for financial close, excessive labor costs, and a lack of insight into corporate expenditures. The proposed system offers tighter control on their invoice processing to make a better and more appropriate decision. AP automation solutions provide tighter controls, quicker clearances, smart payments, and real-time access to transactional data, allowing financial managers to make better and wiser decisions for the bottom line of their organizations. An Intelligent Character Recognition System for AP Automation is a process of extricating fields like Vendor Name, Purchase Order Number, Due Date, Total Amount, Payee Name, etc. based on their x-axis and y-axis position coordinates.

A Heuristic Method of In-situ Drought Using Mass Media Information

  • Lee, Jiwan;Kim, Seong-Joon
    • 한국수자원학회:학술대회논문집
    • /
    • 한국수자원학회 2020년도 학술발표회
    • /
    • pp.168-168
    • /
    • 2020
  • This study is to evaluate the drought-related bigdata characteristics published from South Korean by developing crawler. The 5 years (2013 ~ 2017) drought-related posted articles were collected from Korean internet search engine 'NAVER' which contains 13 main and 81 local daily newspapers. During the 5 years period, total 40,219 news articles including 'drought' word were found using crawler. To filter the homonyms liken drought to soccer goal drought in sports, money drought economics, and policy drought in politics often used in South Korea, the quality control was processed and 47.8 % articles were filtered. After, the 20,999 (52.2 %) drought news articles of this study were classified into four categories of water deficit (WD), water security and support (WSS), economic damage and impact (EDI), and environmental and sanitation impact (ESI) with 27, 15, 13, and 18 drought-related keywords in each category. The WD, WSS, EDI, and ESI occupied 41.4 %, 34.5 %, 14.8 %, and 9.3 % respectively. The drought articles were mostly posted in June 2015 and June 2017 with 22.7 % (15,097) and 15.9 % (10,619) respectively. The drought news articles were spatiotemporally compared with SPI (Standardized Precipitation Index) and RDI (Reservoir Drought Index) were calculated. They were classified into administration boundaries of 8 main cities and 9 provinces in South Korea because the drought response works based on local government unit. The space-time clustering between news articles (WD, WSS, EDI, and ESI) and indices (SPI and RDI) were tried how much they have correlation each other. The spatiotemporal clusters detection was applied using SaTScan software (Kulldorff, 2015). The retrospective and prospective cluster analyses were conducted for past and present time to understand how much they are intensive in clusters. The news articles of WD, WSS and EDI had strong clusters in provinces, and ESI in cities.

  • PDF

잊힐 권리에 관한 연구동향 분석: 2010년 이후 국내 연구를 중심으로 (A Study of the Research the Right to be Forgotten from 2010)

  • 심미나
    • 정보보호학회논문지
    • /
    • 제26권4호
    • /
    • pp.1073-1084
    • /
    • 2016
  • 본 연구의 목적은 국내 잊힐 권리 연구의 동향을 분석함으로써 관련 분야의 올바른 연구 방향을 제시하는데 있다. 잊힐 권리는 개인정보삭제청구권, 망각권 또는 개인정보자기결정권과 같은 권리와 함께 사회과학분야에서 연구하거나 디지털소멸이나 정보삭제와 같은 기술(서비스)과 함께 공학분야에서도 연구된 바 있다. 따라서 다양한 학문의 연구논문을 검색하여 최종 80편을 연구대상으로 선정하고 7개 분석기준과 3개 연구문제를 설정하여 분석하였다. 그 결과, EU 규칙(안)이 공표된 2012년을 기점으로 사회과학분야를 중심으로 한 연구량이 현저히 증가하고, 문제탐색을 중심으로 법학중심의 연구가 문헌조사나 법제연구방법을 통해 활발히 수행되었음을 알 수 있다. 시간이 흐를수록 보호대상과 권리충돌 주제의 심화연구 또한 증가하였다. 잊힐 권리가 빅데이터, 디지털정보 등의 다양하고 복합적 이슈임을 고려할 때 잊힐 권리의 구현을 지원하는 기술(서비스)이나 실현범위 및 방법과 함께 심도 있는 연구가 필요하다. 본 연구는 국내를 대상으로 한 한계가 있으나 향후 국외 비교분석과 함께 본 연구결과는 효율적인 잊힐 권리의 연구 방향을 제시하는데 중요한 이정표가 될 것으로 기대한다.

치료중단행위에 대한 의료형법적 고찰 -의학적 충고에 반한 퇴원 사례를 중심으로- (A Study on Medical-criminal Problem of Withdrawing Life-Sustaining Treatment)

  • 조인호
    • 의료법학
    • /
    • 제9권1호
    • /
    • pp.319-382
    • /
    • 2008
  • As a withdrawing care's study, the purpose of this study is searching about withdrawing care's acceptance and circumstances through Bora-mae hospital case(chapter 1). Withdrawing life-sustaining treatment has various forms. Though the meaning of euthanasia, death with dignity, natural death, physician assisted suicide are duplicated, the meaning of those are different slightly. Firstly, this study looks about the difference of the those meaning and acceptance range(condition) by withdrawing care's forms(chapter 2). Bora-mae hospital case sentenced guilty about physician who discharged incompetent patient who was after surgery by patient's wife determination. This Bora-mae case that sentenced guilty about discharge against medical advise(DAMA) that is regarded to custom has brought intensive confliction of legal, social, medical aspect, Bora-mae hospital case has many legal problems. First, as to criminal law rule 250(murder), the problem is whether discharge and withdrawing life-sustaining treatment is commission or omission. this study concluded omission(district court: omission, appeal, supreme court: commission). Because legal denounce point of discharge and medical treatment withdrawing is omission that physician who is obligatory on patient to cure. If physician's act is regarded omission, it is necessary to determine whether he has guardian status and obligation. Without guardian status and obligation, omission crime can't exist. This study decided that physician had guardian status and obligation and foundation of guardian status was pre-action or acceptance of emergency patient. Physician's medical treatment duty finished when patient(or patient's guardian) demands discharge. But when patient death is foreseen and other possible treatment does not exist, his duty of life prolonging treatment does not finish. This originate from physician's social responsibility and public status that limits patient's private liberty. This study regarded physician's action as accomplice about whether physician's discharging action is accomplice or the principal offender(district court: the principal offender, appeal, supreme court: accomplice). Though the principal offender needs criminal determination and action, there is no this common determination and functional action control of physician in Bora-mae case(chapter 3). Bora-mae hospital case partly originated from deficiency of legal, institutive system including medical security system shortage, the instruction is 1. medical security system strengthening, 2. hospital ethical committee's activity strengthening, 3. institutionalization of withdrawing life-sustaining treatment, 4. acceptance of pre-decision making system, 5. sufficient persuasion of physician for patient and faithful writing of medical paper, 6. respect for patients' self-determination and rights, 7. consciousness's changing for withdrawing life-sustaining treatment and persistent education about medical ethics(chapter 4). Considering Bora-mae case, medical sector is not the dead ground of a criminal punishment. Intervention of criminal law in medical sector give rise to ill effect, that is, excess medical examination and treatment, safeguard treatment, delay of discharge from a hospital. Because sufficient guarantee of life becomes mere empty slogan under situation that impose a burden of heavy cost to family or hospital, public and systematic solution should be given(chapter 5).

  • PDF