• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.16 no.2
• /
• pp.71-80
• /
• 2006

To guarantee secure communication in wireless sensor networks, secret keys should be securely established between sensor nodes. Recently, a simple key distribution scheme has been proposed for pair-wise key establishment in sensor networks by Anderson, Chan, and Perrig. They defined a practical attack model for non-critical commodity sensor networks. Unfortunately, the scheme is vulnerable under their attack model. In this paper, we describe the vulnerability in their scheme and propose a modified one. Our scheme is secure under their attack model and the security of our scheme is proved. Furthermore, our scheme does not require additional communication overhead nor additional infrastructure to load potential keys into sensor nodes.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2013.11a
• /
• pp.727-730
• /
• 2013

소셜 네트워크 서비스는 사용자간의 통신수단 및 자신을 표현하는 하나의 수단으로 사용되면서 다양한 정보를 보유하고 있다. 이러한 소셜 네트워크 서비스를 모바일 디바이스를 통하여 사용하는 사용자가 늘어 가고 있다. 소셜 네트워크 서비스를 컴퓨터 디바이스를 통하여 사용하는 경우 컴퓨터 디바이스 내부에는 캐쉬, 히스토리와 같은 일반적인 웹 서비스 이용 로그 기록을 남기게 된다. 모바일 디바이스를 사용하여 소셜 네트워크 서비스를 이용하는 경우 원활한 서비스 이용을 위하여 사용자의 개인 정보, 친구 정보, 대화 내용과 같은 유출되면 악용 될 수 있는 민감한 정보를 모바일 디바이스 내부에 저장하여 서비스 한다. 이러한 민감한 데이터는 적절한 보안 관리가 실행되어야 한다. 하지만, 다양한 보안 취약점이 존재한다. 본 논문에서는 이러한 모바일 소셜 네트워크 서비스 데이터 관리 보안 취약점에 대하여 분석하고 대응방안에 대하여 연구한다.

• Journal of Digital Convergence
• /
• v.11 no.12
• /
• pp.453-458
• /
• 2013

In a wireless LAN environment, security is the most important. Security of 802.11 standard has many vulnerabilities of the network attack. IEEE has created mechanisms to security for this vulnerability. But the vulnerabilities is characteristic of broadcast in the air in wireless LAN, it is more disclosure then other network environments. In a wireless LAN environment, it can be accessed to the wireless LAN after authentication. Authentication process is one of most important because of the first security step. However, in the authentication process is not mentioned in the method of reducing the disclosure maximum fundamental. Therefore, in this research, the vulnerability of 802.11 are presented and how to do de-authentication in 802.11.

• Journal of Digital Contents Society
• /
• v.17 no.6
• /
• pp.499-507
• /
• 2016

The era of IoT, which figures exchanging data from the internet between things is coming. Recently, former electric power energy policy paradigm, namely Supply side paradigm, is changing, because electric power energy consumption is rapidly increasing. As new paradigm for this limit, convergence of existing electric power grid and ICT(Information and Communication Technology) will accelerate intellectualization of electric power device, its operation system. This change brought opened electric power grid. Consequently, attacks to the national electric power grid are increasing. On this paper, we will analyze security threats of existing IoT, discuss security weakness on electric power industry IoT and suggest needed security requirements, security technology.

• Journal of Digital Convergence
• /
• v.12 no.8
• /
• pp.289-294
• /
• 2014

Recently, the various web service and applications are provided to the user. As to these service, because of providing the service to the authenticated user, the user undergoes the inconvenience of performing the authentication with the service especially every time. The OAuth(Open Authorization) protocol which acquires the access privilege in which 3rd Party application is limited on the web service in order to resolve this inconvenience appeared. This OAuth protocol provides the service which is convenient and flexible to the user but has the security vulnerability about the authorization acquisition. Therefore, we propose the method that analyze the security vulnerability which it can be generated in the OAuth 2.0 protocol and secure user authority authentication method.

• Journal of Digital Convergence
• /
• v.14 no.11
• /
• pp.313-318
• /
• 2016

Recently, the smart farm development using a PC and smart phone to manag the farm for improving competitiveness is in progress. In the smart farm, by using the various ICT technology including RFID, Wi-Fi, ZigBee, Wireless LAN, and etc., the growing environment of the crop and animals can be managed with the remote. By using the network including not only the TCP/IP based wired network but also ZigBee, Wireless LAN, and etc., each of the devices installed in the smart farm transmits the growing environment data to the server. So, smart farms have information and network security vulnerability. Therefore, we propose the method that analyzes the security vulnerability which can begenerated in the smart farm and user authentication method.

• Journal of the Korean Institute of Gas
• /
• v.26 no.4
• /
• pp.18-26
• /
• 2022

The Korean government is conducting heat-using equipment(industrial boiler) inspection in accordance with the Energy Use Rationalization Act because of the heat-using equipment(industrial boiler)'s risks such as explosion and fire, and safe use and management. This paper aimed to setup the safe and performance vulnerabilities from database based on the inspection results for heat-using equipment(industrial boiler). This study surveyed the inspection results of 1,249 heat-using equipment(industrial boiler) which were failed inspection of heat-using equipment(industrial boiler) from january 2016 to december 2020. And the analysis method is to inform safety and performance vulnerability categories of heat-using equipment(industrial boiler) by statistically analyzing the failure reasons of boiler type and inspection type which are high variance in failure rate. The safety and performance vulnerability categories was abbreviated into 18 cases. And each catagory's main reason for failure was suggested by additional analyzing the opinions of inspectors. This paper would be the basic source and the comprehensive information dealing with the safety and performance vulnerability of heat-using equipment(industrial boiler).

• Land and Housing Review
• /
• v.15 no.2
• /
• pp.57-71
• /
• 2024

This study aims to develop an evaluation method for solar power facilities considering disaster impacts and to analyse the vulnerabilities of existing facilities. Haenam-gun in Jeollanam-do, where the reassessment of existing facilities is urgent, was selected as the study area. To evaluate the vulnerability from a more objective perspective, principal component analysis and entropy methods were utilised. Seven vulnerability assessment indicators were selected: maximum hourly rainfall, maximum wind speed, number of typhoon occurrence days, number of rainfall days lasting more than five days, maximum daily rainfall, impermeable area ratio, and population density. Among these, maximum hourly rainfall, maximum wind speed, maximum daily rainfall, and number of rainfall days lasting more than five days were found to have the highest weights. The overlay of the derived weights showed that the southeastern regions of Haenam-eup and Bukil-myeon were classified as Grade 1 and 2, whereas the northern regions of Hwawon-myeon, Sani-myeon, and Munnae-myeon were classified as Grade 4 and 5, indicating differences in vulnerability. Of the 2,133 facilities evaluated, 91.1% were classified as Grade 3 or higher, indicating a generally favourable condition. However, there were more Grade 1 facilities than Grade 2, highlighting the need for countermeasures. This study is significant in that it evaluates solar power facilities considering urban disaster resilience and is expected to be used as a basic resource for the installation of new facilities or the management and operation of existing ones.

• KIPS Transactions on Computer and Communication Systems
• /
• v.4 no.5
• /
• pp.171-176
• /
• 2015

Because the specific security technology alone can not cope with sophisticated attacks, various security management models are applied. But, they do not focus on the vulnerability of the highest part because they offer so many common security management criteria. By analyzing the main information and confidential leakage cases inflicting enormous damage to our society, we found that attackers are using mainly an interface vulnerabilities - the paths that connect the internal and external of the organization, such as e-mail, web server, portable devices, and subcontractor employees. Considering the reality that time and resources to invest in security domain are limited, we point out the interface security vulnerabilities the possibility of attackers to exploit and present a convergence method of security measures. Finally, based of ROI(Return on Investment), we propose the real-time security management system through the intensive and continuous management.

• Information Systems Review
• /
• v.14 no.3
• /
• pp.131-141
• /
• 2012

Depending on the sophistication of IT, it is increasing more and more information leaks and breaches. Accordingly the majority of companies have expand investment protection for the information. However, companies still have been exposed the vulnerability of information leakage. Especially, small IT service businesses than large corporations relatively have some limitations in the points of resources and manpower business activities. For studies on information security for small IT service companies so far, however, there have been insufficient studies considering small business scales and business characteristics of IT services. In this study, we made to design an information security management model for establishing security measures of small IT service companies which are classified SI/SM, DB, IR and IP industry that depending on how the value creation of the business. In detail, we performed an empirical analysis for small IT service business to consider business characteristics and we proposed security implementation strategies based on the analysis results.