• KIPS Transactions on Computer and Communication Systems
• /
• v.1 no.1
• /
• pp.55-60
• /
• 2012

Recent botnets are widely using the DNS services at the connection of C&C server in order to evade botnet's detection. It is necessary to study on DNS analysis in order to counteract anomaly-based technique using the DNS. This paper studies collection of DNS traffic for experimental data and supervised learning for DNS traffic-based malicious domain classification such as query of domain name corresponding to C&C server from zombies. Especially, this paper would aim to determine significant features of DNS-based classification system for malicious domain extraction by the Principal Component Analysis(PCA).

• The Journal of The Korea Institute of Intelligent Transport Systems
• /
• v.8 no.3
• /
• pp.52-63
• /
• 2009

Recently in Korea, in the case of metropolis, the urban signalized intersections are controlled by traffic information center or ITS center. Cheon-an City also established traffic information center through the 1st.-$\sim$3rd. ITS public construction and has managed this center that includes bus information service, traffic information collection and providing service, parking information service, and traffic responsive control system. In the Cheon-an metropolitan traffic signal operation, traffic signal controllers were grouped by the each main traffic flow axes and performed with coordinated signal timing for the signalized arterials, and also cycle and split changed by realtime traffic demands. Cheon-an urban traffic responsive control system was evaluated by intersection delay and speed, then it was verified that the delay decreased and vehicle speed improved. However, the rural signal control system to connect adjacency town was evaluated to have lower status than urban area due to the unimproved TOD (Time of day) plan. Therefore actuated signal control was examined for substitutive control system in isolated signal intersection. The aim of this article is to compare actuated signal control with TOD mode in the rural intersection of Cheon-an and to fine superiority of these two control mode, with evaluation of vehicle delay by using HCM(2000) method and by micro-simulation CORSlM. The result of field test show that actuated signal control gave better performance in delay comparison than the existing TOD signal control. And simulation outcome verified that non-optimized TOD has higher delay than optimized TOD mode, non-optimal actuated mode, and optimal actuated signal control mode. Particularly, these three modes delays had not different values according to the paired sample t-test. This is because small traffic demands were loaded in each links. This suggested actuated signal control is expected to be more effective than TOD mode in some rural isolated intersections which frequently need to survey for traffic volume.

• The Journal of The Korea Institute of Intelligent Transport Systems
• /
• v.15 no.6
• /
• pp.10-23
• /
• 2016

With requiring circumspections using big data, this study attempts to develop and apply the search method for audit issues relating to the ITS policy or program. For the foregoing, the auditing process of the board of audit and inspection was converged with the theoretical frame of boundary analysis proposed by William Dunn as an analysis tool for audit issues. Moreover, we apply the text mining technique in order to computerize the analysis tool, which is similar to the boundary analysis in the concept of approaching meta-problems. For the text mining analysis, specific model we applied the antisymmetry-symmetry compound lexeme-based LDA model based on the Latent Dirichlet Allocation(LDA) methodologies proposed by David Blei. The several prime issues were founded through a case analysis as follows: lack of collection of traffic information by the urban traffic information system, which is operated by the National Police Agency, the overlapping problems between the Ministry of Land, Infrastructure and Transport and the Advanced Traffic Management System and fabrication of the mileage on digital tachograph.

• Journal of Korean Society of Transportation
• /
• v.26 no.1
• /
• pp.79-88
• /
• 2008

VMS based dispersion of traffic flows enables to decrease delay and congestion. Such being the case, there has been growing interests in VMS operation strategy. The strategy is based on driver's behavior or diversion rate. However, it was not easy to obtain each in practice. The diversion rate, thus far, was investigated by stated preference analysis or simulators. As an alternative, in this paper, a new method to obtain diversion flow rate was suggested using the toll collection system and freeway traffic management system data. A large gap of diversion rate between stated preference analysis and field survey was observed. Out of surveyed 8 tollgate data, the diversion rate was about 7% and was quite lower compared with that of 21%${\sim}$87% from stated preference analysis or simulators. With this at hand, a more careful information provision strategy should be devised and employed to correctly account this kind of differences.

• Spatial Information Research
• /
• v.13 no.3 s.34
• /
• pp.309-321
• /
• 2005

To analyze travel demand fur transportation policy and transportation planning, it is important to construct realistic and reliable traffic data. And it needs a user friendly system to demonstrate transportation problems in the transportation planning and transportation management aspect. Generally, to construct network for analysis and collection about social and economical data is a core of transportation planning model. However, it takes a lot of time and effect. To overcome this problem GIS is more effective and efficient in data processing, such as selecting, editing and visualizing, etc. However, it is an early stage to use CIS in the transportation problems. This paper shows a new GIS-T system. The system can give traffic information and plan transportation planning using GIS which has ability as spatial representation and spatial analysis. To build this system, we design interfaces that are able to communicate transportation package for analysis with GIS and manage network efficiently, such as editing and examination. And we also develop a module for traffic information processing to handle spatial data and add it on the system. The proposed system shows more realistic transportation network modeling because the system presents more effective conditions to analyze network. And it can be a tool that can analyze various transportation problems.

• KSCE Journal of Civil and Environmental Engineering Research
• /
• v.33 no.3
• /
• pp.1115-1122
• /
• 2013

Recently the demands for traffic information tend to increase, and travel time might one of the most important traffic information. To effectively estimate exact travel time, highly reliable traffic data collection is required. BIS(Bus Information System) data would be useful for the estimation of the route travel time because BIS is collecting data for the bus travel time on the main road of the city on real-time basis. Traditionally use of BIS data has been limited to the realm of bus operating but it has not been used for a variety of traffic categories. Therefore, this study estimates a route travel time on road networks in urban areas on the basis of real-time data of BIS and then eventually constructs regression models. These models use an explanatory variable that corresponds to bus travel time excluding service time at the bus stop. The results show that the coefficient of determination for the constructed regression model is more than 0.950. As a result of T-test performance with assistance from collected data and estimated model values, it is likely that the model is statistically significant with a confidence level of 95%. It is generally found that the estimation for the exact travel time on real-time basis is plausible if the BIS data is used.

• The Transactions of the Korea Information Processing Society
• /
• v.7 no.4
• /
• pp.1193-1200
• /
• 2000

A network topology has been an important factor for an efficient network management, but data collection for the network configuration has been done manually or semi automatically by a network administrator or an expert. Requirements to generate an intro-domain network topology ar usually either all IP addresses with subne $t^ernet mask or the network identification of all IP addresses. The amounts of traffic are generally high in the semi-automatic system due to using large number of low-level protocols and commands to get rather simple data. In this paper, we propose an algorithm which can be executed with only publicly available input. It can find all IP addresses as well as the network boundary of an intra-domain by using an intelligent method developed in this algorithm. The collected data will be used to draw a network map automatically by using a proposed network topology generation algorithm.hm.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2007.11a
• /
• pp.47-49
• /
• 2007

교통정보수집 시스템이란 CCTV나 웹캠을 통해 얻어진 영상을 토대로 차선별, 혹은 주행방향별 교통량과 통과 차량들의 속도를 실시간으로 측정하는 시스템이다. 차선별로 각각 두 개의 라인을 설정하고 이를 이용하여 차선별 속도와 교통량을 측정한다. 이 때 차선별로 설정된 두 라인에 해당하는 영역에 대해서 배경 값을 지속적으로 갱신한다. CCTV와 웹캠을 이용하여 수집한 영상을 실험에 사용한 결과 평균 86.2%의 차선별 주행차량 검지율을 보였으며, 검지된 차량들을 차선별 방향별로 구분하여 평균 속도를 측정하였다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.22 no.4
• /
• pp.771-783
• /
• 2012

This paper proposes a scheme to collect video data of the vehicle black box in order to strengthen the public safety. The existing schemes, such as surveillance system with the fixed CCTV and car black box, have privacy issues, network traffic overhead and the storage space problems because all video data are sent to the central server. In this paper, the central server only collects the video data related to the accident or the criminal offense using the GPS information and time in order to investigation of the accident or the criminal offense. The proposed scheme addresses the privacy issues and reduces network traffic overhead and the storage space of the central server since the central server collects the video data only related to the accident and the criminal offense. The implementation and experiment shows that our service is feasible. The proposed service can be used as a component of remote surveillance system to prevent the criminal offense and to investigate the criminal offense.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.8 no.12
• /
• pp.1841-1848
• /
• 2013

In this paper, the plans for improvement of real-time security monitoring accuracy and expansion of control region were investigated through comprehensive and systematic collection and analysis of the anomalous activities that inflow and outflow in the network on a large scale in order to overcome the existing security monitoring system based on stylized detection patterns which could correspond to only very limited cyber attacks. This study established an anomaly observation system to collect, store and analyze a diverse infringement threat information flowing into the darknet network, and presented the information classification system of cyber threats, unknown anomalies and high-risk anomalous activities through the statistics based trend analysis of hacking. If this security monitoring system utilizing darknet traffic as presented in the study is applied, it was indicated that detection of all infringement threats was increased by 12.6 percent compared with conventional case and 120 kinds of new type and varietal attacks that could not be detected in the past were detected.