• 한국컴퓨터정보학회논문지
• /
• 제24권4호
• /
• pp.65-71
• /
• 2019

IAs smart device penetration rate is more than 90%, mobile transaction ratio using smart device is increasing. Smart contracts are used in various areas of real life including smart trading. By applying smart contracts to the platform for smart transactions through block-chain technology, the threat of hacking or forgery can be reduced. However, various threats to devices in smart transactions can pose a threat to the use of block chain Etherium, an important element in privilege and personal information management. Smart contract used in block chain Ethereum includes important information or transaction details of users. Therefore, in case of an attack of privilege elevation, it is very likely to exploit transaction details or forge or tamper with personal information inquiry. In this paper, we propose a detection and countermeasure method for privilege escalation attack, which is especially important for block chain for secure smart transaction using block chain Ethereum. When comparing the results of this study with the results of similar applications and researches, we showed about 12~13% improvement in performance and suggested the future countermeasures through packet analysis.

• Journal of Multimedia Information System
• /
• 제9권1호
• /
• pp.33-42
• /
• 2022

In this paper, we have recently created self-driving cars and self-parking systems in human-friendly cars that can provide high safety and high convenience functions by recognizing the internal and external situations of automobiles in real time by incorporating next-generation electronics, information communication, and function control technologies. And with the development of connected cars, the ITS (Intelligent Transportation Systems) market is expected to grow rapidly. Intelligent Transportation System (ITS) is an intelligent transportation system that incorporates technologies such as electronics, information, communication, and control into the transportation system, and aims to implement a next-generation transportation system suitable for the information society. By combining the technologies of connected cars and Internet of Things with software features and operating systems, future cars will serve as a service platform to connect the surrounding infrastructure on their own. This study creates a research methodology based on the Enhanced Security Model in Self-Driving Cars model. As for the types of attacks, Availability Attack, Man in the Middle Attack, Imperial Password Use, and Use Inclusive Access Control attack defense methodology are used. Along with the commercialization of 5G, various service models using advanced technologies such as autonomous vehicles, traffic information sharing systems using IoT, and AI-based mobility services are also appearing, and the growth of smart transportation is accelerating. Therefore, research was conducted to defend against hacking based on vulnerabilities of smart cars based on artificial intelligence blockchain.

• ETRI Journal
• /
• 제28권3호
• /
• pp.320-328
• /
• 2006

Using biometrics to verify a person's identity has several advantages over the present practice of personal identification numbers (PINs) and passwords. To gain maximum security in a verification system using biometrics, the computation of the verification as well as the storing of the biometric pattern has to take place in a smart card. However, there is an open issue of integrating biometrics into a smart card because of its limited resources (processing power and memory space). In this paper, we propose a speaker verification algorithm using a support vector machine (SVM) with a very few features, and implemented it on a 32-bit smart card. The proposed algorithm can reduce the required memory space by a factor of more than 100 and can be executed in real-time. Also, we propose a hardware design for the algorithm on a field-programmable gate array (FPGA)-based platform. Based on the experimental results, our SVM solution can provide superior performance over typical speaker verification solutions. Furthermore, our FPGA-based solution can achieve a speed-up of 50 times over a software-based solution.

• 정보보호학회논문지
• /
• 제23권4호
• /
• pp.757-766
• /
• 2013

안드로이드 사용자의 증가와 함께 안드로이드를 타겟으로 하는 악성코드가 급격하게 증가하고 있으며, 대부분의 악성코드는 사용자의 개인정보 유출을 목적으로 하고 있다. 최근 국내에서도 악성코드를 이용해 개인정보를 유출하고, 소액결제를 시도하는 '체스트'라는 악성코드가 출현하여 금전피해를 발생시켰다. 안드로이드 플랫폼에서 개인정보 유출을 탐지하기 위한 다양한 기법들이 제안되었지만, 기존 기법들은 안드로이드 보안모델의 특성상 사용자의 스마트폰에 적용이 어려운 한계를 가지고 있다. 본 논문에서는 커널레벨의 시스템 콜 후킹과 white-list 기반의 접근정책을 이용해 허용되지 않은 개인정보의 접근과 인터넷 연결을 실시간으로 탐지하고, 차단하는 기법을 제안하였다. 또한 구현을 통해 실제 사용자의 스마트폰에 적용이 가능함을 증명하였다.

• 한국멀티미디어학회논문지
• /
• 제19권5호
• /
• pp.918-923
• /
• 2016

IoT should be considered security risk environments such as various platforms and services including smart devices that can be mounted on household electric appliances, healthcare, car, and heterogeneous networks that are connected to the Internet, cloud services and mobile Apps.. In this paper, we provide analysis of new security threats, caused by open-platform of IoT and sensors via the Internet. Also, we present the key recovery mechanism that is applied to IoT. It results to have compatibility with given research, reduces network overhead, and performs key recovery without depending on key escrow agencies or authorized party.

• 한국정보통신학회논문지
• /
• 제20권11호
• /
• pp.2014-2020
• /
• 2016

일반적으로 스마트 도어락을 이용한 공공 시설물 관리 시스템은 블루투스 무선 통신 구간에서 항상 보안 취약점을 가지게 된다. 특히 인증 절차 과정에서 비밀키와 같은 중요한 정보를 교환할 때는 주로 무선 구간에서 공격자에 노출될 위험이 높다. 그러므로 무선 구간에서 교환되는 정보는 적절하게 암호화되어 전송될 필요가 있다. 지하철 환기구와 같은 공공 시설물 관리 시스템의 보안 취약점을 분석하기 위해서 GNU Radio 플랫폼과 HackRF 장비의 도입을 통해 소프트웨어적 전력분석 공격이 효율적으로 수행 가능함을 확인하였다. 실험장비를 통해 얻어진 무선 패킷은 패킷 타입, CRC, 데이터 길이 및 데이터 등으로 간단하게 디코딩할 수 있으며 이는 보안취약점 개선에 활용될 예정이다.

• 디지털융복합연구
• /
• 제17권10호
• /
• pp.13-21
• /
• 2019

제한된 네트워크 자원과 불균등한 전파 자원 분배로 인해 전파자원 부족 문제와 서비스 품질 열화가 발생하고 있다. 또한, 기존 중앙집중식 전파 공유 방식은 전파 공유 활성화를 위한 근본적인 해결책이 되지 못하고 있으며 비용, 편의성, 보안성 관점에서 비효율적이다. 본 논문에서는 전파자원을 분배하고 공유할 수 있는 저비용, 고신뢰, 고효율 플랫폼으로서 블록체인 기반의 스펙트럼 쉐어링 플랫폼을 제안하고 이를 실현하기 위한 법적 쟁점을 분석하였다. 스펙트럼 쉐어링 플랫폼에서는 와이파이 AP 전파 정보와 LTE 모바일 핫스팟 전파 정보를 블록체인에 등록하고, 전파 공유자와 전파 사용자가 스마트 컨트랙트 통해 개인 간 (P2P) 전파 공유 계약을 빠르고 효율적으로 체결한다. 전파 공유에 대한 대가와 품질 관리에 대한 보상인 암호화폐는 선순환적인 전파 공유 오픈 플랫폼 생태계를 활성화할 것이며, 스펙트럼 쉐어링 플랫폼을 통해 편리하고 효율적인 공공 무선 인프라를 제공할 수 있다.

• International Journal of Internet, Broadcasting and Communication
• /
• 제15권3호
• /
• pp.231-238
• /
• 2023

As the demand for distance education increases, interest in the management of learners' rights is increasing. Blockchain technology is a technology that guarantees the integrity of the learner's learning history, and enables learner-led learning control, data security, and sharing of learning resources. In this paper, we proposed a blockchain technology-based learning management system based on Hyperledger Fabric that can be verified through permission between nodes among blockchain platforms. Learning resources can be shared differentially according to the learning progress. Also the percentage of individual learners that can be managed. As a result of the study, the superiority of the platform in terms of convenience compared to the existing platform was demonstrated. As a result of the performance evaluation for the research in this paper, it was confirmed that the convenience was improved by more than 5%, and the performance was 4-5% superior to the existing platform in terms of learner satisfaction.

• 한국멀티미디어학회논문지
• /
• 제23권2호
• /
• pp.262-273
• /
• 2020

This paper analyzes the existing copyright management and copyright sharing model and discusses the limitations. It then proposes a consortium Blockchain-based copyright management model in which the service platform participates as a node, and discusses how to combine the My Data concept with Blockchain and smart contracts. Also, Blockchain-based CP-ABE is introduced and applied to the proposed model as a way for users to define access policies and store copyright data in encrypted form on the storage of the online service providers (OSP). Compared with the existing copyright management model, the proposed model allows the copyright holder to focus on copyright registration, license content design, and sharing, as the data subject. And it is expected to be able to transparently manage the usage records and the basis for the settlement of the copyrighted data that are shared and used on each platform.

• International Journal of Computer Science & Network Security
• /
• 제21권12호
• /
• pp.29-34
• /
• 2021

The Qur'an is regarded as the holy book by Islam followers; they assert that God wants humankind to understand its meanings and implement best practices. Numerous individuals have attempted to understand the meaning of its verses and explore its Extraordinary Vocabulary; however, few people successfully studied and researched the different meanings of that holy text. Only a limited segment of the society comprising scholars, students, and intellectuals have grasped the teachings of the Qur'an. A majority of the general population, specifically youngsters, spend ample time using mobile phones. In this context, many innovative educational platforms have recently been launched to attract the general public to learn and use knowledge. Research has provided the positive impact of such smart platforms. This concept is about an innovative smartphone platform to help users understand and reason the Qur'an by helping with the book vocabulary explained by expert scholars. This work proposes creating an engaging digital format using innovative technologies. This idea is inspired by youngsters who demonstrate an immense interest in online learning. Qur'an vocabulary is the prerequisite to building a better understanding that allows users to get precise meaning.