• Title/Summary/Keyword: Policy Update

Search Result 118, Processing Time 0.027 seconds

Design of a Policy-based Security Mechanism for the Secure Grid Applications (안전한 그리드 응용을 위한 정책기반의 보안 기능 설계)

  • Cho, Young-Bok;You, Mi-Kyung;Lee, Sang-Ho
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.12 no.2
    • /
    • pp.901-908
    • /
    • 2011
  • For the available grid environmental realization, the resource supply PC must have to provide an appropriate security function of their operation environments. SKY@HOME is a kind of the grid computing environments. If this has not supervised by administrator handling smoothly, it is inherently vulnerable state to the security level of the grid environments, because the resource supply PC is not update a security function without delay. It is also have the troublesome problems which have to install of an additional security program for support the appropriate security. This paper proposes an integration security model on the policy-based that provides an update each level according to the situation of the resource supply PC for improving its problems as a security aspect of the SKY@HOME. This model analyzes the security state of the resource supply PC respectively, and then the result is available to provide an appropriate security of the resource supply PC using an integration security model. The proposed model is not need additionally to buy and install the software, because it is provided the security management server oriented service. It is also able to set up the suit security function of a characteristic of the each resource supply PC. As a result, this paper clearly show the participation of resource supply PC improved about 20%.

An Adaptive Garbage Collection Policy for NAND Flash Memory (낸드 플래시 메모리를 위한 적응형 가비지 컬렉션 정책)

  • Han, Gyu-Tae;Kim, Sung-Jo
    • Journal of KIISE:Computing Practices and Letters
    • /
    • v.15 no.5
    • /
    • pp.322-330
    • /
    • 2009
  • In order to utilize NAND flash memory as storage media which does not allow update-in-place and limits the number of block erase count, various garbage collection policies supporting wear-leveling have been investigated. Conventional garbage collection policies require cleaning-index calculation for the entire blocks to choose a block to be garbage-collected to support wear-leveling whenever a garbage collection is required, which results in performance degradation of system. This paper proposes a garbage collection policy which supports wear-leveling using a threshold value, which is in fact a variance of erase counts and by the maximum erase count of all blocks, without calculating the cleaning-index. During garbage collection, the erase cost is minimized by using the Greedy Policy if the variance is less than the threshold value. It achieves wear-leveling by excluding the block with the largest erase count from erase target blocks if the variance is larger than threshold value. The proposed scheme shows that a standard deviation approaches to zero as the erase count of blocks approaches to its upper limit and the measured speed of garbage collection is two times faster than the conventional schemes.

A Design and Implementation of Robot Control Policy for Domain Administration-Oriented Search Engine (로봇 제어 정책을 이용한 영역관리지향 검색시스템 설계 및 구현)

  • Park, Kyoo-Seok;Kim, Chang-Geun;Kim, Seong-Hoo;Kim, Il
    • Journal of Korea Multimedia Society
    • /
    • v.2 no.1
    • /
    • pp.1-8
    • /
    • 1999
  • To provide information service with time constraints, it is required to support real-time information system for retrieval and update of distributed information. In this paper, we propose an information retrieval system model for internet. We design and implement a Domain Administration-Oriented search engine for the regional information network. Accordingly, an intelligent robot gathering and updating distributed information is implemented. And, in order to improves the performance of the system, a realtime robot control policy based on the loads of network and web server is proposed.

  • PDF

Solutions for Adjusting SELinux To Android-Powered Devices (안드로이드 응용 단말기를 위한 SELinux 환경설정 방법)

  • Vu, Anh-Duy;Han, Jea-Il;Kim, Young-Man
    • Proceedings of the KAIS Fall Conference
    • /
    • 2011.12b
    • /
    • pp.565-568
    • /
    • 2011
  • Google Android framework consists of an operating system and software platform for mobile devices. Using a general-purpose Linux operating system in mobile device has some advantages but also security risks. Security-Enhanced Linux (SELinux) is a kernel-based protection approach which can help to reduce potential damage from successful attacks. However, there are some challenges to integrate SELinux in Android. In this research, we do a study on how to do the integration and find out four challenges. The first one is that the Android file system (yaff2) does not support security namespace for extended attribute (xattr) which is required by SELinux. The second one is that it's difficult to apply SELinux policy to Dalvik process on which an Android application runs on. The third one is that Android lacks methods, tools and libraries to interact with SELinux. The last one is how to update the SELinux policy automatically when installing or removing an application. In this paper, we propose solutions for the above limitations that make the SELinux more adaptive and suitable for Android framework.

  • PDF

Performance Models of Multi-stage Bernoulli Lines with Multiple Product and Dedicated Buffers (다품종 제품과 전용 대기공간을 고려한 다단계 베르누이 라인을 위한 성능 모델)

  • Park, Kyungsu;Han, Jun-Hee;Kim, Woo-Sung
    • Journal of Korean Society of Industrial and Systems Engineering
    • /
    • v.44 no.3
    • /
    • pp.22-32
    • /
    • 2021
  • To meet rapidly changing market demands, manufacturers strive to increase both of productivity and diversity at the same time. As a part of those effort, they are applying flexible manufacturing systems that produce multiple types and/or options of products at a single production line. This paper studies such flexible manufacturing system with multiple types of products, multiple Bernoulli reliability machines and dedicated buffers between them for each of product types. As one of the prevalent control policies, priority based policy is applied at each machines to select the product to be processed. To analyze such system and its performance measures exactly, Markov chain models are applied. Because it is too complex to define all relative transient and its probabilities for each state, an algorithm to update transient state probability are introduced. Based on the steady state probability, some performance measures such as production rate, WIP-based measures, blocking probability and starvation probability are derived. Some system properties are also addressed. There is a property of non-conservation of flow, which means the product ratio at the input flow is not conserved at the succeeding flows. In addition, it is also found that increased buffer capacity does not guarantee improved production rate in this system.

An Update Triggering Policy To Improve QoS Routing Performance (QoS 라우팅에서 새로운 갱신 유발 정책에 따른 성능 개선에 관한 연구)

  • 김지혜;이미정
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2000.10c
    • /
    • pp.357-359
    • /
    • 2000
  • 최근 들어 디지털(digital) 비디오나 오디오 같은 멀티미디어 응용 프로그램이 수요와 공급이 폭발적으로 늘어남에 따라, 이를 지원할 수 있는 새로운 프로토콜 아티텍쳐(architecture)들이 개발되고 있다. QoS(Quality-of-Service) 라우팅은 이러한 응용 프로그램들이 요구하는 QoS 요구사항을 기반으로 하는 라우팅(routing) 기법이다. QoS 라우팅은 네트워크의 동적인 상태를 반영하여 플로우(flow)가 요구하는 QoS를 만족시킬 수 있는 라우트를 찾아줌으로써 라우팅 성능을 향상시켰지만, 네트워크의 동적인 상태 정보를 모든 라우터가 가지고 있어야 함은 물론 적절한 시기에 네트워크 정보를 갱신시켜야만 한다. 이와 같이 네트워크 정보의 적절한 갱신 시기를 결정하는 것은 갱신 유발 정책이라 한다. 기존에는 라우팅 성능을 높이기 위해 네트워크 변화에 민감한 갱신 유발 정책을 사용하였으나, 이로 인해 발생하는 갱신 메시지는 또 하나의 트래픽(traffic)을 발생시켜 프로토콜 오버헤드(protocol overhead)를 초래하였다. 또한, 최근에는 이러한 프로토콜 오버헤드를 줄이기 위한 갱신 주기 정책이 제시되었지만 라우팅 성능 저하를 감수해야 하는 한계점이 발견되었다. 본 논문에서는 기존에 제시된 갱신 유발 정책에 비하여 프로토콜 오버헤드를 좀더 줄임과 동시에 라우팅 성능을 개선시킨 새로운 갱신 유발 정책을 제시하였다. 그리고, 이에 관한 시뮬레이션을 구현하여 프로토콜 오버헤드와 라우팅 성능을 비교한 결과, 기존 정책보다 더 효율적임을 발견하였다.

  • PDF

Design of safety policy and mechanism for dynamic kernel update with function-granularity (함수 단위 동적 커널 업데이트를 위한 보안 정책 및 기법의 설계)

  • Park, Hyun-Chan;Yoo, Chuck
    • Proceedings of the Korean Information Science Society Conference
    • /
    • 2008.06a
    • /
    • pp.343-344
    • /
    • 2008
  • 최근 시스템의 복잡도가 증자함에 따라 보안 취약점 문제가 더욱 많이 발생하고 있다. 이를 해결하기 위해 보안 패치가 배포되고 있지만, 시스템 서비스의 중단이 필요하고 패치 자체의 안정성이 검증되지 못해 패치의 적용이 늦어지는 문제가 발생한다. 우리는 이러한 문제를 해결하기 위해 업데이트성이 없는 커널을 위한 함수 단위 동적 업데이트 시스템인 DUNK를 설계 하였다. DUNK는 서비스 중단 없는 업데이트를 가능케 하고, 보안 기법인 MAFIA를 이용해 안전한 업데이트를 수행한다. MAFIA는 바이너리 패치 코드의 접근 행위를 분석함으로써 패치된 함수가 기존 함수의 접근 권한을 상속받도록 하고, 이를 검증하는 기술을 제공한다. 본 논문에서는 DUNK의 설계와 MAFIA의 알고리즘 및 수행에 대해 기술한다.

  • PDF

A Dynamic Ontology-based Multi-Agent Context-Awareness User Profile Construction Method for Personalized Information Retrieval

  • Gao, Qian;Cho, Young Im
    • International Journal of Fuzzy Logic and Intelligent Systems
    • /
    • v.12 no.4
    • /
    • pp.270-276
    • /
    • 2012
  • With the increase in amount of data and information available on the web, there have been high demands on personalized information retrieval services to provide context-aware services for the web users. This paper proposes a novel dynamic multi-agent context-awareness user profile construction method based on ontology to incorporate concepts and properties to model the user profile. This method comprehensively considers the frequency and the specific of the concept in one document and its corresponding domain ontology to construct the user profile, based on which, a fuzzy c-means clustering method is adopted to cluster the user's interest domain, and a dynamic update policy is adopted to continuously consider the change of the users' interest. The simulation result shows that along with the gradual perfection of the our user profile, our proposed system is better than traditional semantic based retrieval system in terms of the Recall Ratio and Precision Ratio.

Update on Tuberculosis in Children and Adolescents (소아청소년의 결핵 감염과 질병에 대한 최신 지견)

  • Kim, Jong Hyun
    • Pediatric Infection and Vaccine
    • /
    • v.16 no.2
    • /
    • pp.107-114
    • /
    • 2009
  • Tuberculosis is a disease with high morbidity and mortality in children worldwide. Despite significant improvements in diagnostic methods, scientific researches and clinical trials for new regimens of treatment or prevention in adult tuberculosis, childhood tuberculosis has been relatively neglected. Children are at high risk of severe disease, and reactivation of latent infection in adulthood perpetuates the epidemic. Therefore, a policy of tuberculosis control in childhood should be emphasized to improve control in the total population. To understand the new view of childhood tuberculosis, this article describes changes in the disease's national epidemiology, new diagnostic tools and treatment strategies, and multi-drug resistance.

  • PDF

Life Cycle Assessment for National Electricity Generation Systems (국가전력생산 시스템에 대한 전 과정 영향평가)

  • 김태운;김성호;정환삼;하재주;민경란;고순현
    • Proceedings of the Korea Society for Energy Engineering kosee Conference
    • /
    • 2004.05a
    • /
    • pp.353-358
    • /
    • 2004
  • In recent, the trends in national energy Policy are established in the context of the integrated risk estimation for various national electricity generating options. The approach takes account of health, environmental, economic, and social aspects of electricity generation systems. In the present work, nuclear, coal, and LNG sources are chosen because these hold more than 90% of national total electricity generation in a descending order. A life cycle assessment (LCA) methodology is used for comparing environmental impacts of these options during the life cycle such as construction, operation as well as disposal stages. Here, the LCA consists of life cycle inventory analysis, classification/selection process of impact categories, characterization process, and normalization process of each category. LCA can be an useful tool for environmental impact assessment of future national energy options. At the planning stage of future energy Policies, the results of LCA would be taken into consideration. According to data update at the construction and disposal stages, the LCA needs to be conducted iteratively.

  • PDF