• Title/Summary/Keyword: S3(Simple Storage Service)

Search Result 6, Processing Time 0.027 seconds

Design and Forensic Analysis of a Zero Trust Model for Amazon S3 (Amazon S3 제로 트러스트 모델 설계 및 포렌식 분석)

  • Kyeong-Hyun Cho;Jae-Han Cho;Hyeon-Woo Lee;Jiyeon Kim
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.33 no.2
    • /
    • pp.295-303
    • /
    • 2023
  • As the cloud computing market grows, a variety of cloud services are now reliably delivered. Administrative agencies and public institutions of South Korea are transferring all their information systems to cloud systems. It is essential to develop security solutions in advance in order to safely operate cloud services, as protecting cloud services from misuse and malicious access by insiders and outsiders over the Internet is challenging. In this paper, we propose a zero trust model for cloud storage services that store sensitive data. We then verify the effectiveness of the proposed model by operating a cloud storage service. Memory, web, and network forensics are also performed to track access and usage of cloud users depending on the adoption of the zero trust model. As a cloud storage service, we use Amazon S3(Simple Storage Service) and deploy zero trust techniques such as access control lists and key management systems. In order to consider the different types of access to S3, furthermore, we generate service requests inside and outside AWS(Amazon Web Services) and then analyze the results of the zero trust techniques depending on the location of the service request.

Design and Operation of AWS S3 based on Zero Trust (제로 트러스트 기반 AWS S3 설계 및 운영)

  • Kyeong-Hyun Cho;Jae-Han Cho;Jiyeon Kim
    • Proceedings of the Korean Society of Computer Information Conference
    • /
    • 2023.01a
    • /
    • pp.107-108
    • /
    • 2023
  • 기업 및 공공기관의 클라우드 서비스 도입이 확산되면서 업무 시스템에 대한 보안 요구사항이 변화하고 있다. 기존에는 보호해야 할 정보자산이 물리적으로 외부와 분리된 내부 공간에 집중되었다면 클라우드 환경에서는 자산의 분포 범위가 넓어지면서 내부와 외부의 경계가 모호해진다. 따라서 경계 기반의 전통적인 보안 방식은 클라우드 기반 업무환경에 적합하지 않으며 정보 서비스를 이용하는 전 주기에서 암묵적인 신뢰를 배제하고 지속적으로 검증을 수행하는 제로 트러스트 기반의 업무 시스템 운영이 필요하다. 본 논문에서는 스토리지 클라우드 서비스인 아마존 웹 서비스 S3(Simple Storage Service)에 대하여 제로 트러스트 모델을 설계하고, 직접 서비스를 운영하며 제안된 제로 트러스트 모델의 안전성을 검증한다. 제로 트러스트 모델은 스토리지에 접근하는 사용자에 대한 인증 및 식별 기술, 스토리지 암호화 기술, 암호화 키 관리 기술을 활용하여 설계하였으며 제로 트러스트 기술 적용 시, 스토리지 보안성이 향상되는 것을 실제 서비스 운영을 통한 실험을 통해 확인하였다.

  • PDF

The Design and Implementation of Web Agents for vCard Service in Mobile Enviromnent (모바일 환경에서 vCard 서비스를 위한 웹 에이전트의 설계 및 구현)

  • Yun, Se-Mi;Jo, Ik-Seong
    • The KIPS Transactions:PartD
    • /
    • v.9D no.3
    • /
    • pp.477-486
    • /
    • 2002
  • vCard that is the electronic business card automates the exchange of personal information typically found on a traditional business card. vCard information contains not only simple text, but also graphics and multimedia data like pictures, company logos, Web addresses, and so on. This paper describes the design and implementation of Web-based vCard agent system for exchanging vCard, an electronic business card and searching another user's vCard in mobile phone environment. In today's business environment, such as that this information is typically exchanged on business cards. Our web agent system in this paper connect web server which provide vCard service and search, edit vCard information displayed by web browser of mobile phone and exchange vCard with another user through internet. Considering characteristics of wireless devices that have limited storage space, It also saves constructed XML documents that include user's informations in a web server and solves the security problem by exchanging not personal data or XML but encrypted directory name where XML document exits as exchanging vcard.

Field Study For The Improvement of Medication System and Method for Inpatients at General Hospital (입원환자의 투약체계와 방법의 개선을 위한 현장연구)

  • Yoo, Hyung-Sook;Kuwan, Young-Mi;Song, Mi-Sook;Kim, Hyung-Ae;Park, Kyung-Sook
    • Journal of Korean Academy of Nursing Administration
    • /
    • v.1 no.1
    • /
    • pp.147-211
    • /
    • 1995
  • Medication is a kind of medical service and a therapeutic nursing function which takes large portion of nursing service and requires complicated procedures. So many different medical personnel should be involved and cooporate each other in order to accomplish medication. Medication is also a vital nursing service, So nurse feels heavy responsibi lity in that she gives medication to the patient finally, so she has much responsibility if medication error is happened. Therefore it seems very important to clarify the problem of medication system and method, and find the subculture of medication situation because it may promote nursing productivity. The study was conducted to 1. Describe and interpret medication situation. 2. Find out the problem of medication system and method and on alternatives. 3. Compare the medication system and method of hospitals which are located in Seoul with object hospital Ethnographic methodology was used to study medication situation by doing participant observation and interview of health care personnel. Ten nurses and three nurse aids were interviewed. Two residents and internists, two phamacists and two accountants were also interviewed. Data was obtained and analized according to Developmental Research Sequence introduced by Spradly. On the basis of this data the results were as follows. 1. The overall flow of medication system was devided into six stage : first, checking doctor's order : second writing doctor's order, : third, transfering slip into the related departments such as account department, pharmacy : fourth, distribution of medication from pharmacy to unit : fifth, identifing medication by nurses : and finally, medicating to the patient. Behaviorors have been under a lot of stress in that they have to do much works, especially paperworks, So too much time were needed. They also have been suffered interpersonal conflicts among health care personnel and role conflicts in the process of doing medication service. 2. In the process of checking order, the problem was that too much time was required for checking order and paperwork. The more the order changes the more the paperwork is. Nurses have been suffering difficulties in calling internist in order to get bill. Even if writing down slip for medication order is doctor's job, Sometimes nurse has been expected to write slip by doctors or nurse would write slip beacuse of two much complexities and efforts for calling doctors. If the slip were incorrect, much time complicated procedures were more required for correcting it. So delay of administering drug would be resulted consequently. Drugs were delivered from pharmacy to units by delivery agent and phamacist. But because drugs were delivered without arranging room number of patient. Nurse should rearrange drugs in order of the room number So it had made waste time and effort, and Even when emergency drugs were needed, Prompt delivery of drug was not easy because of many reasons. For nurses, it took too long in the identification of the right drug. Actually nurses have heavy burden when medication error happens because nurse is the final actor who gives medication to the patient, So every three shift nurse ought to check drugs as soon as every shift begins. That's why it took too much time due to repeated confirming procedure. When nurses had to go patient room in order to give medications, there were difficulties in watching patient until the patient take medicine correctly. So it was impossible to check every patient wheather he took medicine or not especially in hectic situation. 3. There were many hospitals in Seoul which have similar medication system and method as object hospital according to the results of questionaire. This means that many hospitals have been suffering srimilar problems which were identified in object hospital. 4. Recommendations for promoting simplification of medication system and method were the following : Redesigning of slip from two pieces of paper into one : early discharge announcement system, and slip confirming through computer and controlling of period of prescreption from one day to two or three days : designing personal drug storage box for each patient and using it. If nurses follow the recommendations, they will make medication short & simple, and also have enough time of direct nursing care 5. Even though there were many difficulties in medicating patients. Medication itself has been considered as a caring among nurses because it makes rapport between nurse and patient. So nurses had better accept medication as a portion of nusing service not a original portion of phamacist. There are some limits in this research in terms of confining to only one unit of one hospital, and treating it especially in view of nurses' aspects, So further researchs should be continnued from various kmds of viewpoints of doctors, phamacists and so on. ${\cdot\cdot\cdot}$. Especially esthnographic study of computerized medication system and method seems to be followed.

  • PDF

A Study on Improving Scheme and An Investigation into the Actual Condition about Components of Physical Distribution System (물류시스템 구성요인에 관한 실태분석과 개선방안에 관한 연구)

  • Kim, Kyeong-Cho
    • Journal of Distribution Science
    • /
    • v.7 no.4
    • /
    • pp.47-56
    • /
    • 2009
  • The purpose of this study is to present an alternative improving the efficient and reasonable of the physical distribution system management is influenced by many factors. Therefore, the study depends on the documentary method and survey method to achieve the purpose of this study. The major components of a physical distribution system are refers to as elements, include warehouse·storage system, transportation system, inventory system, physical distribution information system. The factors used in this study are ① factor of product(quality·A/S·added value of product·adaption of product·technical competitive power to other enterprises), ② factor of market(market channel·kinds of customer·physical distribution share), ③ factor of warehouse·storage(warehouse design·size·direction·storage ability·warehouse quality), ④ factor of transportation(promptness·reliability·responsibility·kinds of transportation·cooperation united transportation system·national transportation network), ⑤ factor of packaging (packaging design·material·educating program·pollution degree measure program), ⑥ factor of inventory(ordinary inventory criterion·consistence for inventories record), ⑦ factor of unloaded(unloaded machine·having machine ratio), ⑧ factor of information system (physical distribution quantity analysis·usable computer part), ⑨ factor of physical distribution cost(sales ratio to product) ⑩ factor of physical distribution system(physical distribution center etc). The implication of this study can be summarized as follows: ① In firms that have not adopted a systems integrative approach, physical distribution is a fragmented and often uncoordinated set of activities spread throughout various functions with function having its own set of priorities and measurements. ② The physical distribution is recognized as more an important strategic factor than a simple cost reduction factor, ③ It can be used a strategic competition tool to enterprise.

  • PDF

A Study on Trade Automation in Korea (한국의 무역자동화에 관한 고찰)

  • 전재경;이재승
    • Journal of the Korea Society of Computer and Information
    • /
    • v.3 no.3
    • /
    • pp.139-150
    • /
    • 1998
  • Due to development of science and telecommunication with wide-spread computer supply, it could be done through computer automatically instead of manpower-work for paper transportation & paper approval. It is developed to so-called Factory Automation. Further, it is developed to Office Automation. Trading companies & concerned trade authorities are interested in Trade Automation that such technique is applied to trade work. Generally, Trade Automation means to realize paperless trade by exchanging electronic papers through inter-computers after concerned trade operators transformed various papers to electronic papers that computer could read. In case Trade Automation fix in the trade business, it is expected one of innovations among traditional paper work of trade business, namely without going import-export authorities, Customs office, Banks. Shipping companies, Marine insurance companies on hand-carrying papers, it could be fast, simple, correct to finish every trade procedures such as commercial business, foreign currency, customs clearance, transportations, insurance. terms of payment, etc., with Electronic Data Interchange through computer facilities. Especially, telecommunication for trade form could be helpful to proceed trade paper with one-run-method Further we can anticipate 6 effects for Trade Automation as belows : First, as explained just above articles, with completion for Trade Automation, every trade procedures can be done by computer. so, time to work can be diminished. namely. logistics cost including accessory costs for trade procedures can be saved much. Second, viewing to private enterprise, effect of Office Automation can be maximized and rapid, correct exchange for various trade informations could raise efficiency of enterprise management establishing rational production, storage, transportation and could raise competition improving standard for consumers's service. Third, establishing Trade Automation systems makes it easier piling-up of harbor cargo by pre-transmission of electronic paper & trade informations make it possible to finish customs clearance in advance and can be dispatched upon cargo arrival. Fourth, most of concerned trade authorities such as import-export approval office. financial authorities, transport & insurance companies concentrated in Metropolitan area(Seoul, In -Cheon, Kyung-Ki). Therefore, in case Trade Automation could be realized. it is possible to proceed trade business instantly in every country area by computer facilities. Also. it contribute well-balanced development for suburb. region area by suburb dispersion of trading companies. Fifth, on the way to Trade Automation establishment & its enlargement process. producing enormous demand for over-all telecommunication such as hardware. software. network makes opportunity to progress telecommunication industry & concerned industries. Finally. Trade Automation accelerate change of employment structure leading unnecessary labors on the industries of office & logistics to manufacturing area.

  • PDF