• Title/Summary/Keyword: Knowledge based systems

Search Result 2,136, Processing Time 0.033 seconds

Cyber Kill Chain-Based Taxonomy of Advanced Persistent Threat Actors: Analogy of Tactics, Techniques, and Procedures

  • Bahrami, Pooneh Nikkhah;Dehghantanha, Ali;Dargahi, Tooska;Parizi, Reza M.;Choo, Kim-Kwang Raymond;Javadi, Hamid H.S.
    • Journal of Information Processing Systems
    • /
    • v.15 no.4
    • /
    • pp.865-889
    • /
    • 2019
  • The need for cyber resilience is increasingly important in our technology-dependent society where computing devices and data have been, and will continue to be, the target of cyber-attackers, particularly advanced persistent threat (APT) and nation-state/sponsored actors. APT and nation-state/sponsored actors tend to be more sophisticated, having access to significantly more resources and time to facilitate their attacks, which in most cases are not financially driven (unlike typical cyber-criminals). For example, such threat actors often utilize a broad range of attack vectors, cyber and/or physical, and constantly evolve their attack tactics. Thus, having up-to-date and detailed information of APT's tactics, techniques, and procedures (TTPs) facilitates the design of effective defense strategies as the focus of this paper. Specifically, we posit the importance of taxonomies in categorizing cyber-attacks. Note, however, that existing information about APT attack campaigns is fragmented across practitioner, government (including intelligence/classified), and academic publications, and existing taxonomies generally have a narrow scope (e.g., to a limited number of APT campaigns). Therefore, in this paper, we leverage the Cyber Kill Chain (CKC) model to "decompose" any complex attack and identify the relevant characteristics of such attacks. We then comprehensively analyze more than 40 APT campaigns disclosed before 2018 to build our taxonomy. Such taxonomy can facilitate incident response and cyber threat hunting by aiding in understanding of the potential attacks to organizations as well as which attacks may surface. In addition, the taxonomy can allow national security and intelligence agencies and businesses to share their analysis of ongoing, sensitive APT campaigns without the need to disclose detailed information about the campaigns. It can also notify future security policies and mitigation strategy formulation.

Perception Difference on the Accounting Officer Competence among Accounting Educators, Accounting Officers and CEOs (회계교육자, 회계담당자 및 경영자의 회계담당자 역량에 대한 인식차이)

  • Lee, Seong-Hyo;Kim, Kyung-Ihl;Lee, Ji-Young
    • Journal of Convergence for Information Technology
    • /
    • v.9 no.6
    • /
    • pp.75-82
    • /
    • 2019
  • In the era of the 4th Industrial Revolution when ICT and convergence are emphasized, companies want talented people with a wide range of complex problem solving competencies, system competencies as well as major knowledge. This study examined the difference in perceived competency needed for future accounting officers using 166 valid questionaries prepared with 4 factors based on previous researches. The result shows that the workers, who majored in accounting and have more than 5 years of company experience, and the CEOs think the social competence is the most important while the accounting professors think the major competence is the most important qualification. These results indicate that, in order to reflect the industrial needs, the colleges should change their accounting major curriculums to provide various competences such as the social competence in addition to the basic major competence.

Workflow Process-Aware Data Cubes and Analysis (워크플로우 프로세스 기반 데이터 큐브 및 분석)

  • Jin, Min-hyuck;Kim, Kwang-hoon Pio
    • Journal of Internet Computing and Services
    • /
    • v.19 no.6
    • /
    • pp.83-89
    • /
    • 2018
  • In workflow process intelligence and systems, workflow process mining and analysis issues are becoming increasingly important. In order to improve the quality of workflow process intelligence, it is essential for an efficient and effective data center storing workflow enactment event logs to be provisioned in carrying out the workflow process mining and analytics. In this paper, we propose a three-dimensional process-aware datacube for organizing workflow enterprise data centers to efficiently as well as effectively store the workflow process enactment event logs in the XES format. As a validation step, we carry out an experimental process mining to show how much perfectly the process-aware datacubes are suitable for discovering workflow process patterns and its analytical knowledge, like enacted proportions and enacted work transferences, from the workflow process enactment event histories. Finally, we confirmed that it is feasible to discover the fundamental control-flow patterns of workflow processes through the implemented workflow process mining system based on the process-aware data cube.

A Study on Library Service using Artificial Intelligence: Focused on North American University Libraries (인공지능(AI)을 이용한 도서관서비스 연구 - 북미 대학도서관을 중심으로 -)

  • Kim, Ji-Hyun
    • Journal of Korean Library and Information Science Society
    • /
    • v.51 no.4
    • /
    • pp.231-247
    • /
    • 2020
  • As artificial intelligence (AI) has emerged as a promising future technology among the fourth industrial revolution, we are trying to apply artificial intelligence technology across all area of society, including libraries. This study investigated the effects, issues, and implications of artificial intelligence on university library services. As a research method, in-depth interviews were conducted with IT experts of university libraries in North America, and conclusions and discussion were drawn from interview results and related documents. Research results revealed that university libraries in North America were trying to build an infrastructure that facilitates information access and retrieval based on artificial intelligence systems and to provide new services in collaboration with AI research institutes in universities. This study raised issues regarding the expansion of the role of libraries and librarians, privacy, and data quality. It was also discussed that the need for re-education of university librarians to become software engineers who play a role in disseminating knowledge. In addition, this study suggested the investment for the establishment of the information system and an artificial intelligence research center in the library. The study discussed limitations of research due to changes in the research environment and suggestions for future research.

Hardware and Software Co-Design Platform for Energy-Efficient FPGA Accelerator Design (에너지 효율적인 FPGA 가속기 설계를 위한 하드웨어 및 소프트웨어 공동 설계 플랫폼)

  • Lee, Dongkyu;Park, Daejin
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.25 no.1
    • /
    • pp.20-26
    • /
    • 2021
  • Recent systems contain hardware and software components together for faster execution speed and less power consumption. In conventional hardware and software co-design, the ratio of software and hardware was divided by the designer's empirical knowledge. To find optimal results, designers iteratively reconfigure accelerators and applications and simulate it. Simulating iteratively while making design change is time-consuming. In this paper, we propose a hardware and software co-design platform for energy-efficient FPGA accelerator design. The proposed platform makes it easy for designers to find an appropriate hardware ratio by automatically generating application program code and hardware code by parameterizing the components of the accelerator. The co-design platform based on the Vitis unified software platform runs on a server with Xilinx Alveo U200 FPGA card. As a result of optimizing the multiplication accelerator for two matrices with 1000 rows, execution time was reduced by 90.7% and power consumption was reduced by 56.3%.

Developement of a Design Manual for Kitchen Facility in Foodservice Outlets: A Case Study on a Seolleongtang Specialized Restaurant (푸드서비스시설의 주방 설비 산정 매뉴얼 개발: 설렁탕 전문 식당 사례 적용)

  • Choi, Gyeong-Gy;Chang, Hye-Ja
    • Journal of the FoodService Safety
    • /
    • v.2 no.2
    • /
    • pp.67-77
    • /
    • 2021
  • Concerns regarding work and food safety in foodservice operations are growing. The purpose of the study is to suggest guidelines for designing foodservice facilities, including school foodservices and Korean restaurants. A case of a franchise restaurant specializing in a Korean food item, Seolleongtang, was used to explain the facility design. The contents of the manual included ways to determine space allocation, calculate the application of utilities and the diameters of supply utility pipelines, and suggestions on how to decide on air conditioning equipment. The standards of the American Gas Association and the Japan Foodservice Equipment Association (JFEA) were applied to design the restaurant space. The JFEA standards and knowledge based on experience and statistics were applied to calculate the usage of utilities like fuel and water. The standards of JFEA and the Society of Heating, Air-Conditioning, and Sanitary Engineers of Japan were applied to calculate the diameters of the water supply and drainage pipelines. For the setting of the heating, ventilation, and air conditioning systems, three ways to carry out the calculation of effective ventilation were explained, as well as options to dicide the standard parameters of the duct and ventilation fans. This manual can contribute to the design of effective and efficient foodservice facilities and help secure the work safety of foodservice employees thereby ensuring food safety.

IoT-based Architecture and Implementation for Automatic Shock Treatment

  • Lee, Namhwa;Jeong, Minsu;Kim, Youngjae;Shin, Jisoo;Joe, Inwhee;Jeon, Sanghoon;Ko, Byuk Sung
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.16 no.7
    • /
    • pp.2209-2224
    • /
    • 2022
  • The Internet of Things (IoT) is being used in a wide variety of fields due to the recent 4th industrial revolution. In particular, research is being conducted that combines IoT with the medical field such as telemedicine. Among them, the field of shock detection is a big issue in the medical field because the causes of shock are diverse, treatments are very complex, and require a high level of medical knowledge and experience. The transmission of infectious diseases is common when treating critically ill patients, especially patients with shock. Thus, to effectively care for shock patients, we propose an architecture that continuously monitors the patient's condition, and automatically recommends a drug injection treatment according to the patient's shock condition. The patient's hemodynamic information is continuously monitored, and the patient's shock generation information is recorded periodically. With the recorded patient information, the patient's condition is determined and automatically injected with necessary medication. The medical team can find out whether the patient's condition has improved by checking the recorded information through web applications. The study can help relieve the shortage of medical personnel and help prevent transmission of infectious disease in medical staff. We look forward to playing a role in helping medical staff by making recommendations for the diagnosis and treatment of complex and difficult shocks.

The influence of nano-silica on the wear and mechanical performance of vinyl-ester/glass fiber nanocomposites

  • Sokhandani, Navid;Setoodeh, AliReza;Zebarjad, Seyed Mojtaba;Nikbin, Kamran;Wheatley, Greg
    • Advances in nano research
    • /
    • v.13 no.1
    • /
    • pp.97-111
    • /
    • 2022
  • In the present article, silica nanoparticles (SNPs) were exploited to improve the tribological and mechanical properties of vinyl ester/glass fiber composites. To the best of our knowledge, there hasn't been any prior study on the wear properties of glass fiber reinforced vinyl ester SiO2 nanocomposites. The wear resistance is a critical concern in many industries which needs to be managed effectively to reduce high costs. To examine the influence of SNPs on the mechanical properties, seven different weight percentages of vinyl ester/nano-silica composites were initially fabricated. Afterward, based on the tensile testing results of the silica nanocomposites, four wt% of SNPs were selected to fabricate a ternary composite composed of vinyl ester/glass fiber/nano-silica using vacuum-assisted resin transfer molding. At the next stage, the tensile, three-point flexural, Charpy impact, and pin-on-disk wear tests were performed on the ternary composites. The fractured surfaces were analyzed by scanning electron microscopy (SEM) images after conducting previous tests. The most important and interesting result of this study was the development of a nanocomposite that exhibited a 52.2% decrease in the mean coefficient of friction (COF) by augmenting the SNPs, which is beneficial for the fabrication/repair of composite/steel energy pipelines as well as hydraulic and pneumatic pipe systems conveying abrasive materials. Moreover, the weight loss due to wearing the ternary composite containing one wt% of SNPs was significantly reduced by 70%. Such enhanced property of the fabricated nanocomposite may also be an important design factor for marine structures, bridges, and transportation of wind turbine blades.

Cold Boot Attack on Encrypted Containers for Forensic Investigations

  • Twum, Frimpong;Lagoh, Emmanuel Mawuli;Missah, Yaw;Ussiph, Najim;Ahene, Emmanuel
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.16 no.9
    • /
    • pp.3068-3086
    • /
    • 2022
  • Digital Forensics is gaining popularity in adjudication of criminal cases as use of electronic gadgets in committing crime has risen. Traditional approach to collecting digital evidence falls short when the disk is encrypted. Encryption keys are often stored in RAM when computer is running. An approach to acquire forensic data from RAM when the computer is shut down is proposed. The approach requires that the investigator immediately cools the RAM and transplant it into a host computer provisioned with a tool developed based on cold boot concept to acquire the RAM image. Observation of data obtained from the acquired image compared to the data loaded into memory shows the RAM chips exhibit some level of remanence which allows their content to persist after shutdown which is contrary to accepted knowledge that RAM loses its content immediately there is power cut. Results from experimental setups conducted with three different RAM chips labeled System A, B and C showed at a reduced temperature of -25C, the content suffered decay of 2.125% in 240 seconds, 0.975% in 120 seconds and 1.225% in 300 seconds respectively. Whereas at operating temperature of 25℃, there was decay of 82.33% in 60 seconds, 80.31% in 60 seconds and 95.27% in 120 seconds respectively. The content of RAM suffered significant decay within two minutes without power supply at operating temperature while at a reduced temperature less than 5% decay was observed. The findings show data can be recovered for forensic evidence even if the culprit shuts down the computer.

The Role of Digital Literacy and IS Success Factors Influencing on Distance Learners' Satisfaction and Continuance (디지털 리터러시와 정보시스템 성공요인이 원격학습자의 만족도와 지속 사용 의도에 미치는 영향)

  • Kim, Yong-Young;Joo, Yeon-Woo;Park, Hye-Jin
    • Journal of Digital Convergence
    • /
    • v.19 no.11
    • /
    • pp.53-62
    • /
    • 2021
  • Distance learning (DL) has become a major issue in the educational field with the spread of COVID-19. In order to enhance the satisfaction of DL learners, efforts to cultivate learners' competencies, as well as investment to build IT infrastructure, and activities to support high-quality content provision should be comprehensively considered. Based on a survey of 221 college students, this study verified that digital literacy (knowledge, skill, and mind) and information systems success factors (system, information, and service quality) all positively affect DL satisfaction, in turn, which positively influences on DL continuance. This study is meaningful in that it comprehensively considered learner's ability and IT infrastructure and analyzed the effect on the satisfaction and intention of continuous use of DL. In the future, it is necessary to expand the target of not only college students but also elementary and secondary students and instructors, and to further consider interaction, which is a major factor in the distance learning process.