• Journal of Industrial Convergence
• /
• v.16 no.2
• /
• pp.25-31
• /
• 2018

An APT attack is a new hacking technique that continuously attacks specific targets and is called an APT attack in which a hacker exploits various security threats to continually attack a company or organization's network. Protect employees in a specific organization and access their internal servers or databases until they acquire significant assets of the company or organization, such as personal information leaks or critical data breaches. Also, APT attacks are not attacked at once, and it is difficult to detect hacking over the years. This white paper examines ongoing APT attacks and identifies, educates, and proposes measures to build a security management system, from the executives of each organization to the general staff. It also provides security updates and up-to-date antivirus software to prevent malicious code from infiltrating your company or organization, which can exploit vulnerabilities in your organization that could infect malicious code. And provides an environment to respond to APT attacks.

• Journal of Korea Multimedia Society
• /
• v.3 no.1
• /
• pp.63-76
• /
• 2000

Most work done in CSCW (Computer Supported Collaborative Work) system has been targeted toward supporting the exchange of documents or messages among group members, and yet support for cognitive aspects such as group organization, division and merge of work, and work flow control. The objective of the study is to provide CSCW environment for the engineering design process such as CAD (Computer Aided Design) and CASE (Computer Aided Software Engineering). The proposed DCWA (Distributed Collaborative Writing Aid) system suggests a mechanism that unifies the group organization, work division, and work flow control in the CAO, CASE, and software simulation tool. In particular, CAD relates the group and work partition by providing expressing the relation of drawing object (e.g., binding, attachment, and proportional scaling) which is owned by different members of group, and CASE combining with the simulation tool supports the flexibility of the work flow control. Simulating the prototype before manu-facturing a product can reduce time and cost in development.

• Journal of Convergence Society for SMB
• /
• v.1 no.1
• /
• pp.45-53
• /
• 2011

There are always many kinds of risks in software development such as frequent changes of requirements. Especially those risks related to the software characteristic of non-visibility can be threat to the project success. That lead us to the need of process implementation to reduce and minimize those risks. Although, most of the organization recognizes the importance of risk management, actual implementation requires professional knowledge in this area. CMMI, the de facto standard in process reference model, also emphasizes on risk management process area but only provides goals and practices to be implemented, not detail procedure and methods. In this paper, we developed Risk management implementation model based on IDEAL, the process improvement model based on CMMI. The proposed model will help the organizations to implement risk management process which is proper to their situation in the factor of organization size and project characteristics.

• International journal of advanced smart convergence
• /
• v.10 no.3
• /
• pp.257-278
• /
• 2021

As the definition of the vendor-oriented implementation method, which was utilized in adopting an ERP system, has been centered around the project construction business, it was difficult for the EPR adopting organization to systematically prepare ERP projects and have enough deliberative opportunities to change-related policies. Furthermore, this method does not have a fully standardized construction process. Accordingly, by defining an organization that wants to adopt an ERP system as a customer, this paper develops the customer-based ERP construction process framework that assists both customers and developers who construct the system. For this purpose, this paper reviews the previous research and collects the construction processes of the commercial ERP SW vendor and ERP construction cases while proposing the three-layer process framework to construct ERP through the KJ method. The ERP process framework consists of 7 processes, 32 activities, 141 tasks while providing definitions for concepts of each component. Furthermore, the proposed processes and phases were set in order of the recommended execution, while the activities were suggested as an open-ended type so that the application and usability can be increased and polished by reflecting experts' opinions. The contribution of this study is to standardize the ERP project process by transforming the previous supplier-based ERP construction method into the customer-based one while providing important procedure and activity frameworks that apply to diverse ERP solutions per vendor. At the same time, this study provides an theoretical foundation to develop the construction process for the customer -based Cloud ERP. In practice, At the beginning of the ERP system construction project, it provides communication or process tailoring tools for the stakeholder.

• Journal of Software Assessment and Valuation
• /
• v.16 no.2
• /
• pp.163-172
• /
• 2020

Recently, concepts of the Fourth Industrial Revolution technologies such as artificial intelligence, big data, and cloud computing have been introduced and the limits of individual or team development policies are being reviewed. Also, a lot of latest technology source codes have been opened to the public, and related studies are being conducted based on them. Meanwhile, the company is applying the strengths of the open source software development methodology to proprietary software development, and publicly announcing support for open source development methodology. In this paper, we introduced several software development methodology such as open source model, inner source model, and the similar DevOps model, which have been actively discussed recently, and compared their characteristics and components. Rather than claiming the excellence of a specific model, we argue that if the software development policy of an individual or affiliated organization is established according to each benefit, they will be able to achieve software quality improvement while satisfying customer requirements.

• Journal of the Korea Society of Computer and Information
• /
• v.14 no.11
• /
• pp.123-134
• /
• 2009

As the embedded software for weapon system is embossed, the information management system is required to service and manage the technical information of embedded software systematically. But the technical information documents are managed by its own organization separately, it's hard to service the information and share it with anyone who need. In this paper, to manage the embedded software information systematically, we analyze the information management system built in 2004 and the defence law/rule. Also we distinguish the software information from defence laws to manage systematically and analyze the requirements of the information system. Based on these, we suggest implementing the management system to increase efficiency of managing the weapon embedded software information. Through this, we can improve the utilization and reusability of the weapon embedded software.

• Journal of Korea Multimedia Society
• /
• v.16 no.2
• /
• pp.241-253
• /
• 2013

A Shipbuilding design program used in the shipbuilding industry tends to be shifted from the TRIBON software to the AM(AVEVA MARINE) software these days. Many large domestic shipbuilding companies have been using the AM instead of the TRIBON. New design software requires education programs for the necessary personnel. However the education programs for the AM are largely based on offline education. They suffer from constraints in space and time, and from high costs. This paper describes a development of online contents for the AM software that are focused for cyber education. It covers the applied process and the organization of the contents. The details of the development decisions including the security issue for the contents are described also.

• Genomics & Informatics
• /
• v.18 no.1
• /
• pp.11.1-11.3
• /
• 2020

In genome-wide association studies, pathway-based analysis has been widely performed to enhance interpretation of single-nucleotide polymorphism association results. We proposed a novel method of hierarchical structural component model (HisCoM) for pathway analysis of common variants (HisCoM for pathway analysis of common variants [HisCoM-PCA]) which was used to identify pathways associated with traits. HisCoM-PCA is based on principal component analysis (PCA) for dimensional reduction of single nucleotide polymorphisms in each gene, and the HisCoM for pathway analysis. In this study, we developed a HisCoM-PCA software for the hierarchical pathway analysis of common variants. HisCoM-PCA software has several features. Various principle component scores selection criteria in PCA step can be specified by users who want to summarize common variants at each gene-level by different threshold values. In addition, multiple public pathway databases and customized pathway information can be used to perform pathway analysis. We expect that HisCoM-PCA software will be useful for users to perform powerful pathway analysis.

• The Journal of the Korea Contents Association
• /
• v.10 no.6
• /
• pp.134-143
• /
• 2010

This paper proposes a framework for classifying metric-based software quality prediction models, especially case of software criticality, into four types. Models are classified along two vectors: input metric forms and the necessity of past project data. Each type has its own characteristics and its strength and weakness are compared with those of other types using newly defined criteria. Through this qualitative evaluation each organization can choose a proper model to suit its environment. My earlier studies of criticality prediction model implemented specific models in each type and evaluated their prediction performances. In this paper I analyze the experimental results and show that the characteristics of a model type is the another key of successful model selection.

• Journal of KIISE:Software and Applications
• /
• v.34 no.3
• /
• pp.212-218
• /
• 2007

Not enough verification or enough design of test is not performing in many software developments organization as yet. Therefore, defects that can be detected and corrected during the beginning phases of development are usually found during dynamic testing, it is often observed that testing is inefficient compared to effort for testing. This study aims to suggest a method for effective testing through case study. It is useful in case of not verification and not enough design of test in the previous phase than coding. We show in a concrete way major activities that determine prioritization of testing and level of test case design through static testing, i.e. code review and analysis of code quality. And also we show role between test team and development team.