• Title/Summary/Keyword: Vulnerability analysis

Search Result 1,280, Processing Time 0.029 seconds

A Case Study of Scour Vulnerability Evaluation for Shallow Foundations during Floods (홍수시 얕은기초의 세굴위험도 평가 사례연구)

  • Park, Jae-Hyun;Lee, Ju-Hyung;Chung, Moon-Kyung;Kwak, Ki-Seok
    • 한국방재학회:학술대회논문집
    • /
    • 2008.02a
    • /
    • pp.59-62
    • /
    • 2008
  • Scour vulnerability evaluation for shallow foundations was performed to assure bridge safety against scour in the national capital region. The case studies for 26 shallow foundations consisted of site investigation including boring test, bridge scour analysis for the design flood, bearing capacity evaluation of the bridge foundation before and after scour, and comprehensive evaluation of bridge scour vulnerability. Bridge scour vulnerability was determined based on the interdisciplinary concept considering predicted scour depth for the design floods and bearing capacity of foundation as well as dimensions of foundation. Nine of 26 shallow foundations showed the potential future vulnerability to scour with significant decrease in the bearing capacity of foundations due to scour and the remaining 17 were expected to maintain their stability against scour.

  • PDF

The Plan and Tools for Vulnerability Testing in Information Software-Based System

  • Kim, In-Jung;Lee, Young-Gyo;Won, Dong-Ho
    • Journal of Information Processing Systems
    • /
    • v.1 no.1 s.1
    • /
    • pp.75-78
    • /
    • 2005
  • Although many tests for stabilization of the software have been done, vulnerability test for a system run by combination of the software of various products has not been conducted enough. This has led to increased threats and vulnerability of system. Especially, web-based software system, which is public, has inherent possibility of exposure to attacks and is likely to be seriously damaged by an accident. Consequently, comprehensive and systematic test plans and techniques are required. Moreover, it is necessary to establish a procedure for managing and handling the results of vulnerability test. This paper proposes vulnerability test plans and designs for implementing automated tools, both of which can be complied with on web-based software systems.

Modeling Vulnerability Discovery Process in Major Cryptocurrencies

  • Joh, HyunChul;Lee, JooYoung
    • Journal of Multimedia Information System
    • /
    • v.9 no.3
    • /
    • pp.191-200
    • /
    • 2022
  • These days, businesses, in both online and offline, have started accepting cryptocurrencies as payment methods. Even in countries like El Salvador, cryptocurrencies are recognized as fiat currencies. Meanwhile, publicly known, but not patched software vulnerabilities are security threats to not only software users but also to our society in general. As the status of cryptocurrencies has gradually increased, the impact of security vulnerabilities related to cryptocurrencies on our society has increased as well. In this paper, we first analyze vulnerabilities from the two major cryptocurrency vendors of Bitcoin and Ethereum in a quantitative manner with the respect to the CVSS, to see how the vulnerabilities are roughly structured in those systems. Then we introduce a modified AML vulnerability discovery model for the vulnerability datasets from the two vendors, after showing the original AML dose not accurately represent the vulnerability discovery trends on the datasets. The analysis shows that the modified model performs better than the original AML model for the vulnerability datasets from the major cryptocurrencies.

A Study on the Definition of Security Requirements of Vulnerability Management in Analysis Step (분석단계에서 취약점 관리의 보안 요건 정의에 관한 연구)

  • Shin, Seong-Yoon;Lee, Hyun-Chang
    • Journal of the Korea Society of Computer and Information
    • /
    • v.20 no.3
    • /
    • pp.75-80
    • /
    • 2015
  • Vulnerability management is in compliance with security policies, and then, this is to ensure the continuity and availability of the business. In this paper, the application vulnerability management and IT infrastructure of the system is that it must be identified. And a viable vulnerability management plan should be drawn from the development phase. There are many that are not defined vulnerability in the area of identification and authentication, encryption, access control in identification and classification of vulnerabilities. They define the area without missing much in technical, managerial, and operational point of view. Determining whether the response of the identified vulnerability, and to select a countermeasure for eliminating the vulnerability.

Vulnerability Assessment of a Large Sized Power System Using Neural Network Considering Various Feature Extraction Methods

  • Haidar, Ahmed M. A;Mohamed, Azah;Hussian, Aini
    • Journal of Electrical Engineering and Technology
    • /
    • v.3 no.2
    • /
    • pp.167-176
    • /
    • 2008
  • Vulnerability assessment of power systems is important so as to determine their ability to continue to provide service in case of any unforeseen catastrophic contingency such as power system component failures, communication system failures, human operator error, and natural calamity. An approach towards the development of on-line power system vulnerability assessment is by means of using an artificial neural network(ANN), which is being used successfully in many areas of power systems because of its ability to handle the fusion of multiple sources of data and information. An important consideration when applying ANN in power system vulnerability assessment is the proper selection and dimension reduction of training features. This paper aims to investigate the effect of using various feature extraction methods on the performance of ANN as well as to evaluate and compare the efficiency of the proposed feature extraction method named as neural network weight extraction. For assessing vulnerability of power systems, a vulnerability index based on power system loss is used and considered as the ANN output. To illustrate the effectiveness of ANN considering various feature extraction methods for vulnerability assessment on a large sized power system, it is verified on the IEEE 300-bus test system.

Deduplication and Exploitability Determination of UAF Vulnerability Samples by Fast Clustering

  • Peng, Jianshan;Zhang, Mi;Wang, Qingxian
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.10 no.10
    • /
    • pp.4933-4956
    • /
    • 2016
  • Use-After-Free (UAF) is a common lethal form of software vulnerability. By using tools such as Web Browser Fuzzing, a large amount of samples containing UAF vulnerabilities can be generated. To evaluate the threat level of vulnerability or to patch the vulnerabilities, automatic deduplication and exploitability determination should be carried out for these samples. There are some problems existing in current methods, including inadequate pertinence, lack of depth and precision of analysis, high time cost, and low accuracy. In this paper, in terms of key dangling pointer and crash context, we analyze four properties of similar samples of UAF vulnerability, explore the method of extracting and calculate clustering eigenvalues from these samples, perform clustering by fast search and find of density peaks on a large number of vulnerability samples. Samples were divided into different UAF vulnerability categories according to the clustering results, and the exploitability of these UAF vulnerabilities was determined by observing the shape of class cluster. Experimental results showed that the approach was applicable to the deduplication and exploitability determination of a large amount of UAF vulnerability samples, with high accuracy and low performance cost.

Climate Change Adaptive Implementation Assessment Proposal for Local Governments Utilizing Vulnerability Index

  • Lee, Sangsin
    • Journal of Forest and Environmental Science
    • /
    • v.35 no.1
    • /
    • pp.47-53
    • /
    • 2019
  • This study applies the concept of climate change vulnerability assessment in order to suggest climate change adaptation effects in a quantitative manner, given that previous studies have hitherto rely on qualitative assessment, as climate change adaptive policies are currently being implemented by local governments of Korea. The vulnerability assessment tool used in this study is VESTAP ("Vulnerability assESsment Tool to build a climate change Adaptation Plan"), which was developed by the Korea Adaptation Center for Climate Change (KACCC), and applied to gauge the vulnerability of pine trees to diseases and pests within Chungcheongnam-do. The climate change adaptation project for vulnerability improvement was assessed only in terms of forest disaster prevention and change in regional climate change vulnerabilities within 16 regions of Chungcheongnam-do as the result of 2016 Climate Change Adaptation Project (Forest Disaster Prevention Project). As a result, it was observed that climate change adaptive capacity has improved according to change in the area of forestland with disaster prevention, and the vulnerability indicator decreased, confirming the impact of the climate change adaptation (forest disaster prevention) project. Also, analysis of regional climate change adaptation project scales and change in vulnerabilities allowed us to determine the regional propriety of climate change adaptation (forest disaster prevention) projects launched in 2016.

Grid Unit Based Analysis of Climate Change Driven Disaster Vulnerability in Urban Area (격자단위 분석기법을 적용한 도시 기후변화 재해취약성분석)

  • Hong, Jeajoo;Lim, HoJong;Ham, YoungHan;Lee, ByoungJae
    • Spatial Information Research
    • /
    • v.23 no.6
    • /
    • pp.67-75
    • /
    • 2015
  • Today, because human settlements are concentrated into urban area, urban planning and management technique considering the complexity, diversity, and advanced situations of urban living space is being requested. Especially, to effectively respond to large and diverse climate change driven disaster, it is necessary to develop urban planning technique including land use, infrastructure planning based on disaster vulnerability analysis. However, because current urban climate change disaster vulnerability analysis system(UC-VAS) is using census output area as spatial analysis unit, it is difficult to utilize the analysis results for specific urban planning. Instead, this study applies the grid manner to two study areas. The analysis results show that it can generate more detailed results and it can be used for detailed zoning decision by comparing with areal photos. Furthermore, by describing the limitation of the grid manner and providing professional way to secure additional scientific character and objectivity of the future urban climate change disaster vulnerability analysis system, it is expected that this study contributes to the effectiveness of system management.

A Method and Application of Vulnerability Analysis for Combat Systems Considering Threats and Defense Ability : Focused on PKM Model (위협의 특성과 장갑의 방호 성능을 고려한 전투 시스템의 취약성 분석 방법 및 활용 : 고속정 모델을 대상으로)

  • Hwang, Hun-Gyu;Kim, Bae-Sung;Kang, Ji-Won;Lee, Jang-Se
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.20 no.8
    • /
    • pp.1623-1631
    • /
    • 2016
  • There are many researches which analyze vulnerability for combat systems, have been progressing, and apply the analyzed result to reflect on design phase. Recently, there have been requirements for integrating the previous module based researches which conducted independently. In this paper, we propose an integrated vulnerability analysis method for the combat system considering characteristics of threats and protection performance of armors through an analysis of the advanced research. In addition, by applying the proposed method improves the existing hit probability analysis program and we are verified based on scenarios for improving survivability of PKM (Petrol Killer Medium) for vulnerability analysis confirmed the results. The proposed method improves reliability of vulnerability analysis by considering threats and defense ability. Also it able to satisfied with the integration requirements. Furthermore, we became buildup for the development of applied system and the method and integrated vulnerability analysis method for combat systems.

Fragility curves for the typical multi-span simply supported bridges in northern Pakistan

  • Waseem, Muhammad;Spacone, Enrico
    • Structural Engineering and Mechanics
    • /
    • v.64 no.2
    • /
    • pp.213-223
    • /
    • 2017
  • Bridges are lifeline and integral components of transportation system that are susceptible to seismic actions, their vulnerability assessment is essential for seismic risk assessment and mitigation. The vulnerability assessment of bridges common in Pakistan is very important as it is seismically very active region and the available code for the seismic design of bridges is obsolete. This research presents seismic vulnerability assessment of three real case simply supported multi-span reinforced concrete bridges commonly found in northern Pakistan, having one, two and three bents with circular piers. The vulnerability assessment is carried through the non-linear dynamic time history analyses for the derivation of fragility curves. Finite element based numerical models of the bridges were developed in MIDAS CIVIL (2015) and analyzed through with non-linear dynamic and incremental dynamic analyses, using a suite of bridge-specific natural spectrum compatible ground motion records. Seismic responses of shear key, bearing pad, expansion joint and pier components of each bridges were recorded during analysis and retrieved for performance based analysis. Fragility curves were developed for the bearing pads, shear key, expansion joint and pier of the bridges that first reach ultimate limit state. Dynamic analysis and the derived fragility curves show that ultimate limit state of bearing pads, shear keys and expansion joints of the bridges exceed first, followed by the piers ultimate limit state for all the three bridges. Mean collapse capacities computed for all the components indicated that bearing pads, expansion joints, and shear keys exceed the ultimate limit state at lowest seismic intensities.