• Title/Summary/Keyword: SSL

Search Result 290, Processing Time 0.036 seconds

A Study of PKI-Based E-commerce Security System Design under Java Code Environment (Java Code를 중심으로한 PKI기반 전자상거래 보안시스템 설계)

  • Bang, Kee-Chun;Noh, Si Choon
    • Convergence Security Journal
    • /
    • v.13 no.1
    • /
    • pp.51-57
    • /
    • 2013
  • RSA is the most widely used public key algorithms. Payment via the SSL communications, and user authentication using RSA secure shopping mall that can protect the user's valuable information in the process of building. SSL-based electronic signature technology and encryption protocols for this technology are electronic documents are delivered to the other party through a separate encryption process, the information sender to enter information on a web browser (user) and the recipient (the Web server of the site Manager), except you will not be able to decrypt the contents. Therefore, the information is encrypted during the transfer of electronic documents even if hackers trying to Sniffing because its contents can never understand. Of internet shopping mall in the user authentication 'and' Communications' SSL secure shopping mall built with the goal of the methodology are presented.

Texture and Descriptive Sensory Characteristics of Korean Rice Cakes (Karedduk) with a Mixture of Fructooligosaccharide and Emulsifier (프락토올리고당과 유화제 혼합사용 가래떡의 텍스처와 관능적 묘사 특성)

  • Kim, Sang-Sook;Chung, Hae-Young
    • Journal of the Korean Society of Food Science and Nutrition
    • /
    • v.41 no.6
    • /
    • pp.823-828
    • /
    • 2012
  • Texture and descriptive sensory characteristics of a Korean rice cake (Karedduk) with added mixtures of fructooligosaccharide (95%) and emulsifier, Sodium Stearoyl Lactylate-90 (SSL-90), were investigated after 2 and 24 hr of storage at $5^{\circ}C$. A central composite design was used for the arrangement of treatment. Different levels of fructooligosaccharide (95%), 0, 3, 6, 9, and 12%, were added to dry rice flour. Also, different levels of emulsifier, 0, 0.3, 0.6, 0.9, and 1.2%, were added to the same dry rice flour. The texture properties analysis using a Texture Analyzer revealed that the chewiness, gumminess, and hardness were significantly different. The effect of retarding retrogradation of Korean rice cakes (Karedduk) with added mixtures of fructooligosaccharide (95%) and SSL-90 showed an increasing trend as the amount of fructooligosaccharide (95%) increased. Overall, the instrumental texture properties were highly correlated with the sensory characteristics. The results suggested that Korean rice cakes (Karedduk) with the addition of a mixture of fructooligosaccharide (95%) and SSL-90 can be made from the mixture of 9% fructooligosaccharide (95%) and 0.9% SSL-90 in order to retard starch retrogradation.

Studies on the Preparation and Utilization of Filefish Protein Concentrate (FPC) -IV. The Production and Characteristics of Bread using FPC-Wheat Composite Flour- (말쥐치 농축단백질(濃縮蛋白質)의 제조(製造) 및 이용(利用)에 관(關)한 연구(硏究) -제 4 보 : 말쥐취 농축단백질(濃縮蛋白質)-밀가루 복합분(複合粉)을 이용(利用)한 제빵시험(試驗)-)

  • Yang, Han-Chul;Lim, Wang-Jin;Paik, Soon-Young
    • Korean Journal of Food Science and Technology
    • /
    • v.15 no.3
    • /
    • pp.269-276
    • /
    • 1983
  • Experiments were performed to study the rheological and baking properties of bread fortified with various amounts of filefish protein concentrate (FPC). Doughs were prepared from mixtures containing wheat flour and 5,10,15 and 20% of FPC. Standard methods were used to evaluate the rheology of doughs and characteristics of bread. The results were as follows. 1. The water absorption of the fortified doughs increased as FPC increased. FPC caused an increase in development time and stability as measured by Farinograph. 2. In the extensigraph test, FPC yielded a decrease in extensibility and an increase in resistance to extension. 3. Baking tests demonstrated that addition of FPC decreased the volume of loaf and made the crumb darker and coarser. 4. Additional tests were made to examine effect of sodium stearoyl lactylate (SSL) added at 0.25, 0.50, 1.00 and 2.00% on doughs containing 10% headed & gutted FPC. The most appropriate amount of SSL as an additive was 0.5%. 5. In the farinograph, adding 0.5% SSL could delay dough development time and greatly increase stability. 6. When 0.5% SSL was added on doughs containing 5,10,15 and 20% headed & gutted FPC, baking quality was greatly improved. The breads containing up to 10% were acceptable by the addition of SSL, but not in higher level of FPC. 7. The results of sensory evaluations of bread showed that the color, texture and taste of bread containing 5% whole FPC and 5, 10% headed & gutted FPC were reasonably gacceptable.

  • PDF

Effects of Emulsifiers on Physical Properties of Rice Cookies (유화제의 첨가가 쌀 쿠키의 물성에 미치는 영향)

  • Lee, Joon-Kyoung;Jeong, Jie Hye;Lim, Jae Kag
    • Journal of the Korean Society of Food Science and Nutrition
    • /
    • v.41 no.11
    • /
    • pp.1565-1570
    • /
    • 2012
  • The effects of emulsifiers as additives on the physical properties of rice cookies were investigated in this study. The amounts of emulsifiers added were 3, 6, and 9% based on 100 g of rice flour. Peak viscosity of rice flour added with diacetyl tartaric ester of monoglyceride (DATEM) showed smaller decreases compared to addition of sodium stearoyl lactylate (SSL) or sucrose ester (SE). Hardness of dough as measured by TA increased upon addition of SSL, SE, and DATEM, whereas hardness of cookies increased upon addition of SSL and SE. In contrast, addition of DATEM did not increase hardness of cookies. Density of dough and cookies increased upon addition of SSL and SE, whereas density decreased upon addition of DATEM and spreadability showed the lowest values. From these results, it was confirmed that use of emulsifiers in cookies can control cookie texture. Compared to SSL and SE, DATEM increases hardness of dough and decreases densities of dough and cookies, making it effective in softening the texture of rice cookies.

Design and Implementation of Web Service System for secure Message Transmission in Electronic Commerce (전자상거래 환경에서의 안전한 메시지 전송을 위한 웹 서비스 시스템 설계 및 구현)

  • Park, Jong-Hoon;Kim, Chul-Won
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.14 no.8
    • /
    • pp.1855-1860
    • /
    • 2010
  • This paper describes construction of web services system for secure message transmission appling web services standards. This system composes single sign on module, SSL module and secure message module. We applied these modules to price comparison site. Single sign on module used SAML standards. This module was designed, in order to provide authentication and authorization. As SSL module processes message encryption among end to end, messages of this system are secure. Secure message module is designed according to WS-Security standards and processes authentication, XML signature and XML encryption.

End-to-end MQTT security protocol using elliptic curve cryptography algorithm (타원곡선암호 알고리즘을 이용한 종단간 MQTT 보안 프로토콜)

  • Min, Jung-Hwan;Kim, Young-Gon
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.19 no.5
    • /
    • pp.1-8
    • /
    • 2019
  • Internet of Things (IoT) is proliferating to provide more intelligent services by interconnecting various Internet devices, and TCP based MQTT is being used as a standard communication protocol of the IoT. Although it is recommended to use TLS/SSL security protocol for TCP with MQTT-based IoT devices, encryption and decryption performance degenerates when applied to low-specification / low-capacity IoT devices. In this paper, we propose an end-to-end message security protocol using elliptic curve cryptosystem, a lightweight encryption algorithm, which improves performance on both sides of the client and server, based on the simulation of TLS/SSL and the proposed protocol.

Study on Selftest Requirements in Cryptographic Module Validation Program with FIPS-OpenSSL Source Code Analysis (FIPS-OpenSSL 코드 분석을 통한 암호모듈 자가시험 보안요구사항 분석)

  • Seo, Seog Chung
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.29 no.5
    • /
    • pp.985-996
    • /
    • 2019
  • This paper analyzes the source code of FIPS-OpenSSL cryptographic module approved as FIPS cryptographic module in USA and shows how the selftest requirements are implemented as software cryptographic library with respect to pre-operational test and conditional tests. Even though FIPS-OpenSSL follows FIPS 140-2 standard, lots of security requirements are similar between FIPS 140-2 and Korean cryptographic module validation standards. Therefore, analysis from this paper contributes to help Korean cryptographic module vendors develop correct and secure selftest functions on their own cryptographic modules, which results in reducing the test period.

A Study on countermeasures against Mobile Application's SSL Pinning bypass (모바일 애플리케이션의 SSL Pinning 우회에 대한 대응방안 연구)

  • Shin, Sang-Gil;Kim, Mun-Hyeon
    • Proceedings of the Korea Information Processing Society Conference
    • /
    • 2017.04a
    • /
    • pp.270-272
    • /
    • 2017
  • 스마트폰 애플리케이션의 종류가 다양해지고 사용 빈도수가 높아지는 만큼 정보보안에 대한 중요성도 나날이 증가하고 있다. 최근 기업, 금융기관들은 스마트폰 애플리케이션 서비스에서 사용자와 서버 간 통신 시 MITM공격에 대비하기 위해 SSL Pinning 기술을 사용하고 있는데 본 연구에서는 이를 우회할 수 있는 방법을 소개하고 시연하며, 이에 대한 대응방안을 소개한다.

Security Analysis of Authentication Information in Transit using HTTP Proxy (HTTP 프락시를 활용한 인증정보 전달 안전성 분석)

  • Kim, Moon-Sun;Ahn, Kyung-Jin;Lee, Hyung-Hyo
    • Proceedings of the Korean Society of Computer Information Conference
    • /
    • 2011.01a
    • /
    • pp.237-240
    • /
    • 2011
  • 국내 주요 포탈사이트들은 SSL 보안프로토콜을 통해 ID/PW 방식의 사용자 인증정보를 전달하게 된다. 본 논문에서는 설정된 SSL 채널을 통해 전달되는 웹 브라우저와 포털 사이트 간 인증정보를 HTTP 프락시인 Paros를 이용하여 안전성을 분석한다.

  • PDF

Design of IDS Unified System for Integrity Managements (무결성 관리를 위한 IDS 통합 시스템 설계)

  • 김남진;강진수;김창수
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2003.10a
    • /
    • pp.203-206
    • /
    • 2003
  • 네트워크 상에서 송수신되는 데이터를 외부의 침입으로부터 보호하는 것은 매우 중요하며, 그 중 데이터의 무결성을 검증하고 보장하기 위한 방법으로 SSL(Secure Socket Layer)을 사용한다. 본 논문에서는 클라이언트와 서버간에 송수신되는 데이터의 무결성이 위배되었을 경우 그 정보를 검증 및 관리할 수 있도록 OpenSSL을 이용한 무결성 위배 데이터 검증 및 관리 시스템을 구성하고, 검증된 데이터를 IDS(Intrusion Detection System)로 전송하여 침입 탐지 정보와 무결성 검증 정보를 통합적으로 관리할 수 있는 IDS 통합 시스템을 제안 및 설계하였다.

  • PDF