• Convergence Security Journal
• /
• v.10 no.4
• /
• pp.77-82
• /
• 2010

Cloud computing is defined as numerous concepts by research institutions and scholars. However, due to the present business trend in the IT sector, emphasizing on cost and efficiency, cloud computing has been defined as a form of computing which can provide extendable mass storage components in the virtual environment. As a result, security issues have been arising due to the variety of cloud computing services provided by the industries. This paper aims to analyze the weaknesses such as security techniques and inquiries, and personal information protection required for various cloud computing services.

• Journal of the Korean Society for Aviation and Aeronautics
• /
• v.16 no.1
• /
• pp.29-36
• /
• 2008

The vulnerability of aircraft, especially rotary wing aircraft, has been an ongoing issue since their advent in combat operations during the 1940s. In this paper, representative sensors for survivability of those aircraft in modern battlefield are surveyed and top level requirements and parameters are defined. Also problems of multi-sensor alignment on modern agile and flexible platform are discussed and several techniques such as static alignment and transfer alignment are introduced.

• Annual Conference of KIPS
• /
• 2009.04a
• /
• pp.1408-1410
• /
• 2009

RFID는 무선 주파수를 이용해 사물이나 사람에 부착된 태그를 인식하고 태그에 담긴 정보를 주고받을 수 있도록 하는 비(非)접촉식 정보인식기술을 뜻하며 USN(Ubiquitous Sensor Network)의 핵심기술로 주목받으면서 다양한 분야에 걸쳐 연구되어 왔다. 기존 RFID와 이동통신 인프라를 융합한 모바일 RFID는 기존의 RFID 시스템과 모바일 네트워크의 장점을 동시에 지닌 개념으로써, RFID를 이용해 보다 다양한 서비스 제공이 가능할 것으로 기대되고 있다[1][2][3]. 2007년, Kim 등은 모바일 RFID 프라이버시 보호기법에 관한 논문을 발표하였다[4]. Kim등은 논문에서 개인 사용자들이 각각 모바일 리더를 소지하고 이를 상품구매 시 이용하는 환경을 가정하고, 이 때 발생할 수 있는 위협과 이에 대한 해결책을 제시하였다. 그러나 주장과는 달리 제안된 기법은 위치추적에 대해 안전하지 못하며 사용자 프라이버시를 보장하지 못한다. 본 논문에서는 Kim등이 제안한 기법을 소개하고 실제 공격이 이루어지는 과정을 통해 제안된 기법의 취약성을 설명한다.

• International Journal of Computer Science & Network Security
• /
• v.23 no.6
• /
• pp.155-161
• /
• 2023

In the process of remarkable progress in the medical and technical field and activating the role of technology in health care services and applications, and since the safety of medical data and its protection from security violations plays a major role in assessing the security of health facilities and the safety of medical servers Thus, it is necessary to know the cyber vulnerabilities in health information systems and other related services to prevent and address them in addition to obtaining the best solutions and practices to reach a high level of cybersecurity against attackers, especially due to the digital transformation of health care systems and the rest of the dealings. This research is about what cyberattacks are and the purpose of them, in addition to the methods of penetration. Then challenges, solutions and some of the security issues will be discussed in general, and a special highlight will be given to obtaining a safe infrastructure to enjoy safe systems in return.

• Annual Conference of KIPS
• /
• 2022.11a
• /
• pp.246-248
• /
• 2022

최근 블록체인 기술이 발달함에 따라 사이버 범죄자의 공격 대상이 되고 있다. 특히, 암호화폐가 등장하게 되면서 화폐를 관리하는 전자지갑의 보안이 중요해지고 있다. 전자지갑은 내부에 저장된 개인 키를 통해 네트워크에 트랜잭션을 요청하게 되고 사용자 인증을 위해 중앙 기관에 검증을 요청한다. 이때, 전자지갑은 서드파티 취약점에 영향을 받아 공격 대상이 될 수 있다. 따라서, 본 연구에서는 블록체인 환경에서 서드파티 의한 위협으로부터 전자지갑을 보호하는 메커니즘 연구를 진행했다.

• Annual Conference of KIPS
• /
• 2023.05a
• /
• pp.180-182
• /
• 2023

많은 기업에서 시스템 보안 침해사고가 증가함에 따라 국내에서는 보안성 강화를 위해 정보보호 및 개인정보보호 관리체계(ISMS-P) 인증 의무대상을 확대하고 있다. 이에 중소기업에서도 ISMS-P 인증을 받기 위한 준비가 필요해졌다. 그러나 ISMS-P 인증을 위한 시스템을 구축하기 위해 많은 비용과 인력이 필요하고 이를 중소기업에서 구축하기엔 현실적으로 어려운 부분이 있다. SCAP는 정보시스템의 취약점을 보안기준에 맞춰 자동 관리하는 프로토콜이다. 본 논문에서는 ISMS-P 인증 항목 중 시스템 자동관리가 가능한 부분을 도출하여 상용 소프트웨어와 동작 방식을 비교함으로써, 중소기업에 SCAP를 적용하여 시스템을 구축하는 것이 정보보호 강화에 도움이 될 수 있음을 검증하고자 한다.

• International Journal of Computer Science & Network Security
• /
• v.24 no.9
• /
• pp.50-62
• /
• 2024

The decision to integrate mobile cloud computing (MCC) in higher education without first defining suitable usage scenarios is a global issue as the usage of such services becomes extensive. Consequently, this study investigates the security determinants of the educational use of mobile cloud computing among universities' students. This study proposes and develops a theoretical model by adopting and modifying the Protection Motivation Theory (PMT). The study's findings show that a significant amount of variance in MCC adoption was explained by the proposed model. MCC adoption intention was shown to be highly influenced by threat appraisal and coping appraisal factors. Perceived severity alone explains 37.8% of students "Intention" to adopt MCC applications, which indicates the student's perception of the degree of harm that would happen can hinder them from using MCC. It encompasses concerns about data security, privacy breaches, and academic integrity issues. Response cost, perceived vulnerability and response efficacy also have significant influence on students "intention" by 18.8%, 17.7%, and 6.7%, respectively.

• International Journal of Computer Science & Network Security
• /
• v.24 no.8
• /
• pp.105-118
• /
• 2024

The decision to integrate mobile cloud computing (MCC) in higher education without first defining suitable usage scenarios is a global issue as the usage of such services becomes extensive. Consequently, this study investigates the security determinants of the educational use of mobile cloud computing among universities students. This study proposes and develops a theoretical model by adopting and modifying the Protection Motivation Theory (PMT). The studys findings show that a significant amount of variance in MCC adoption was explained by the proposed model. MCC adoption intention was shown to be highly influenced by threat appraisal and coping appraisal factors. Perceived severity alone explains 37.8% of students "Intention" to adopt MCC applications, which indicates the student's perception of the degree of harm that would happen can hinder them from using MCC. It encompasses concerns about data security, privacy breaches, and academic integrity issues. Response cost, perceived vulnerability and response efficacy also have significant influence on students "intention" by 18.8%, 17.7%, and 6.7%, respectively.

• Convergence Security Journal
• /
• v.12 no.4
• /
• pp.25-31
• /
• 2012

The SSE-CMM model is how to verify the level of information protection as a process-centric information security products, systems and services to develop the ability to assess the organization's development. The CMM is a model for software developers the ability to assess the development of the entire organization, improving the model's maturity level measuring. However, this method of security engineering process improvement and the ability to asses s the individual rather than organizational level to evaluate the ability of the processes are stopped. In this research project based on their existing research information from the technical point of view is to define the maturity level of protection. How to diagnose an information security vulnerabilities, technical security system, verification, and implementation of technical security shall consist of diagnostic status. The proposed methodology, the scope of the work place and the current state of information systems at the level of vulnerability, status, information protection are implemented to assess the level of satisfaction and function. It is possible that measures to improve information security evaluation based on established reference model as a basis for improving information security by utilizing leverage.

• Asian Pacific Journal of Cancer Prevention
• /
• v.15 no.17
• /
• pp.7257-7261
• /
• 2014

Background: Few Iranian women take the Papanicolaou test despite its important role in preventing cervical cancer. This study aimed to determine the effectiveness of an educational intervention based on the protection motivation theory (PMT) variables and implementation intentions in the first and second Pap test practice among Iranian women. Materials and Methods: In this quasi-randomized controlled trial, 200 women who were referred to 30 primary health care clinics in Tehran were randomly selected. PMT variables and Pap test practice were measured at baseline and again after 3 and 15 months. The 4-week educational intervention program was conducted for the intervention group. Results: Following the intervention, the mean scores of self-efficacy, perceived vulnerability, and behavior intention variables were significantly higher in the intervention group when compared to the control group (p<0.05). No significant differences were found in the perceived severity, response efficacy, response cost, and fear between the two groups following the intervention. Higher percent of women in the intervention group had obtained first and second Pap test compared to the controls. Conclusions: The PMT and implementation intentions provide a suitable theory-based framework for developing educational interventions regarding Pap test practice in Iran.