• Journal of Internet Computing and Services
• /
• v.23 no.6
• /
• pp.27-37
• /
• 2022

Virtual private network (VPN) services are used in various environments related to national security, such as defense companies and defense-related institutions where digital communication environment technologies are diversified and access to network use is increasing. However, the number of cyber attacks that target vulnerable points of the VPN has annually increased through technological advancement. Thus, this study identified security requirements by performing STRIDE threat modeling to prevent potential and new vulnerable points that can occur in the VPN. STRIDE threat modeling classifies threats into six categories to systematically identify threats. To apply the proposed security requirements, this study analyzed functions of the VPN and formed a data flow diagram in the VPN service process. Then, it collected threats that can take place in the VPN and analyzed the STRIDE threat model based on data of the collected threats. The data flow diagram in the VPN service process, which was established by this study, included 96 STRIDE threats. This study formed a threat scenario to analyze attack routes of the classified threats and derived 30 security requirements for each element of the VPN based on the formed scenario. This study has significance in that it presented a security guideline for enhancing security stability of the VPN used in facilities that require high-level security, such as the Ministry of National Defense (MND).

• Journal of Korea Water Resources Association
• /
• v.49 no.7
• /
• pp.625-634
• /
• 2016

Three leading agencies under different ministries - Korea Meteorological Administration (KMA) in the ministry of Environment, Han river control office in the Ministry of Land, Infrastructure and Transport (MOLIT) and Weather Group of ROK Air Force in the Ministry of National Defense (MND) - have been operated radars in the purpose of observing weather, hydrology and military operational weather in Korea. Eight S-band dual-pol. radars have been newly installed or replaced by these ministries over different places by 2015. However each ministry has different aims of operating radars, observation strategies, data processing algorithms, etc. Due to the differences, there is a wide level of accuracy on observed radar data as well as the composite images made of the cross governmental radar measurement. Gaining fairly high level of accuracy on radar data obtained by different agencies has been shared as a great concern by the ministries. Thus, "an agreement of harmonizing weather and hydrological radar products" was made by the three ministries in 2010. Particularly, this is very important to produce better rainfall estimation using the cross governmental radar measurement. Weather Radar Center(WRC) in KMA has been developed an empirical method using measurements observed by Yongin testbed radar. This study is aiming to examine the efficiency of the empirical method to improve the accuracies of radar rainfalls estimated from cross governmental dual-pol. radar measurements. As a result, the radar rainfalls of three radars (Baengnyeongdo, Biseulsan, and, Sobaeksan Radar) were shown improvement in accuracy (1-NE) up to 70% using data from May to October in 2015. Also, the range of the accuracies in radar rainfall estimation, which were from 30% to 60% before adjusting polarimetric variables, were decreased from 65% to 70% after adjusting polarimetric variables.