• Title/Summary/Keyword: Weakness Analyzer

Search Result 11, Processing Time 0.025 seconds

Design and Implementation of A Weakness Analyzer for Mobile Applications (모바일 애플리케이션을 위한 취약점 분석기의 설계 및 구현)

  • Mun, Il-Yong;Oh, Se-Man
    • Journal of Korea Multimedia Society
    • /
    • v.14 no.10
    • /
    • pp.1335-1347
    • /
    • 2011
  • The dissemination and use of mobile applications have been rapidly expanding these days. And in such a situation, the security of mobile applications has emerged as a new issue. Although the safety of general software such as desktop and enterprise software is systematically achieved from the development phase to the verification phase through secure coding, there have been not sufficient studies on the safety of mobile applications yet. This paper deals with deriving weakness enumeration specialized in mobile applications and implementing a tool that can automatically analyze the derived weakness. Deriving the weakness enumeration can be achieved based on CWE(Common Weakness Enumeration) and CERT(Computer Emergency Response Team) relating to the event-driven method that is generally used in developing mobile applications. The analysis tool uses the dynamic tests to check whether there are specified vulnerabilities in the source code of mobile applications. Moreover, the derived vulnerability could be used as a guidebook for programmers to develop mobile applications.

Evaluation of Static Analyzers for Weakness in C/C++ Programs using Juliet and STONESOUP Test Suites

  • Seo, Hyunji;Park, Young-gwan;Kim, Taehwan;Han, Kyungsook;Pyo, Changwoo
    • Journal of the Korea Society of Computer and Information
    • /
    • v.22 no.3
    • /
    • pp.17-25
    • /
    • 2017
  • In this paper, we compared four analyzers Clang, CppCheck, Compass, and a commercial one from a domestic startup using the NIST's Juliet test suit and STONESOUP that is introduced recently. Tools showed detection efficacy in the order of Clang, CppCheck, the domestic one, and Compass under Juliet tests; and Clang, the domestic one, Compass, and CppCheck under STONESOUP tests. We expect it would be desirable to utilize symbolic execution for vulnerability analysis in the future. On the other hand, the results of tool evaluation also testifies that Juliet and STONESOUP as a benchmark for static analysis tools can reveal differences among tools. Finally, each analyzer has different CWEs that it can detect all given test programs. This result can be used for selection of proper tools with respect to specific CWEs.

Development of Safe Korean Programming Language Using Static Analysis (정적 분석을 이용한 안전한 한글 프로그래밍 언어의 개발)

  • Kang, Dohun;Kim, Yeoneo;Woo, Gyun
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.5 no.4
    • /
    • pp.79-86
    • /
    • 2016
  • About 75% of software security incidents are caused by software vulnerability. In addition, the after-market repairing cost of the software is higher by more than 30 times than that in the design stage. In this background, the secure coding has been proposed as one of the ways to solve this kind of maintenance problems. Various institutions have addressed the weakness patterns of the standard software. A new Korean programming language Saesark has been proposed to resolve the security weakness on the language level. However, the previous study on Saesark can not resolve the security weakness caused by the API. This paper proposes a way to resolve the security weakness due to the API. It adopts a static analyzer inspecting dangerous methods. It classifies the dangerous methods of the API into two groups: the methods of using tainted data and those accepting in-flowing tainted data. It analyses the security weakness in four steps: searching for the dangerous methods, configuring a call graph, navigating a path between the method for in-flowing tainted data and that uses tainted data on the call graph, and reporting the security weakness detected. To measure the effectiveness of this method, two experiments have been performed on the new version of Saesark adopting the static analysis. The first experiment is the comparison of it with the previous version of Saesark according to the Java Secure Coding Guide. The second experiment is the comparison of the improved Saesark with FindBugs, a Java program vulnerability analysis tool. According to the result, the improved Saesark is 15% more safe than the previous version of Saesark and the F-measure of it 68%, which shows the improvement of 9% point compared to 59%, that of FindBugs.

Urinary Mercury Levels Among Workers in E-waste Shops in Nakhon Si Thammarat Province, Thailand

  • Decharat, Somsiri
    • Journal of Preventive Medicine and Public Health
    • /
    • v.51 no.4
    • /
    • pp.196-204
    • /
    • 2018
  • Objectives: To determine urinary mercury levels in e-waste workers in Southern Thailand and the airborne mercury levels in the e-waste shops where they worked, to describe the associations between urinary and airborne mercury levels, and to evaluate the prevalence of mercury exposure-related health effects among e-waste workers. Methods: A cross-sectional study was conducted by interviewing 79 workers in 25 e-waste shops who lived in Nakhon Si Thammarat Province, Thailand. Information on general and occupational characteristics, personal protective equipment use, and personal hygiene was collected by questionnaire. Urine samples were collected to determine mercury levels using a cold-vapor atomic absorption spectrometer mercury analyzer. Results: The e-waste workers' urinary mercury levels were $11.60{\mu}5.23{\mu}g/g$ creatinine (range, 2.00 to $26.00{\mu}g/g$ creatinine) and the mean airborne mercury levels were $17.00{\mu}0.50{\mu}g/m^3$ (range, 3.00 to $29.00{\mu}g/m^3$). The urinary and airborne mercury levels were significantly correlated (r=0.552, p<0.001). The prevalence of self-reported symptoms was 46.8% for insomnia, 36.7% for muscle atrophy, 24.1% for weakness, and 20.3% for headaches. Conclusions: Personal hygiene was found to be an important protective factor, and should therefore be stressed in educational programs. Employers should implement engineering measures to reduce urinary mercury levels and the prevalence of associated health symptoms among e-waste workers.

Biomechanical Testing of Anterior Cervical Spine Implants: Evaluation of Changes in Strength Characteristics and Metal Fatigue Resulting from Minimal Bending and Cyclic Loading

  • Kim, Sung-Bum;Bak, Koang-Hum;Cheong, Jin-Hwan;Kim, Jae-Min;Kim, Choong-Hyun;Oh, Seong-Hoon
    • Journal of Korean Neurosurgical Society
    • /
    • v.37 no.3
    • /
    • pp.217-222
    • /
    • 2005
  • Objective: To achieve optimal fit of implant, it is necessary to bend the implant during spine surgery. Bending procedure may decrease stiffness of plate especially made of titanium and stainless steel. Typically titanium suffers adverse effects including early crack propagation when it is bent. We investigate whether 6 degree bending of titanium plates would decrease the stiffness after full cyclic loading by comparing with non-bending titanium plates group. Methods: Authors experimented 40 titanium alloy plates of 57mm in length, manufactured by 5 different companies. Total 40 plates were divided into two groups (20 bent plates for experimental group and 20 non-bent plates for control group). Twenty plates of experimental group were bent to 6 degree with 3-point bending technique and verified with image analyzer. Using the electron microscope, we sought for a initial crack before and after 3-point bending. Mechanical testing by means of 6000 cyclic axial-compression loading of 35N in compression with moment arm of 35mm-1.1 Nm was conducted on each plate and followed by the electron microscopic examination to detect crack or fissure on plates. Results: The stiffness was decreased after 6000 cyclic loading, but there was no statistically significant difference in stiffness between experimental and control group. There was no evidence of change in grain structure on the electron microscopic magnification. Conclusion: The titanium cervical plates can be bent to 6 degree without any crack or weakness of plate. We also assume that minimal bending may increase the resistance to fatigue fracture in cervical flexion-extension movement.

A Study about Correlations between the Interpretations of Autonomic Bioelectric Response Recorder (ABR-2000) and Diagnosis System of Oriental Medicine (DSOM) / 3D Blood Pressure Pulse Analyzer (3D-MAC) (생체전기자율반응 측정기와 한방진단시스템 및 맥진기 검사 해석의 상관성 연구)

  • Ok, Jin-Yoo;Lee, In-Seon
    • The Journal of Korean Obstetrics and Gynecology
    • /
    • v.31 no.2
    • /
    • pp.31-48
    • /
    • 2018
  • Objectives: This study was performed to observe the correlations between the results of ABR-2000 and DSOM / 3D-MAC to evaluate the feasibility of ABR-2000 as a oriental medical diagnostic criteria. Methods: We studied 547 women visiting ${\bigcirc}{\bigcirc}$ hospital from December 2012 to June 2015. The subjects were categorized in two groups, 'Hypotonia' and 'Non-Hypotonia' by the result of ABR-2000 and assessed the result of DSOM, 3D-MAC for each group. The differences of pulse wave factors by group also studied. Results: 1. There was no significant difference between two groups about the output frequency of pathogenic factors in DSOM while the result showed the higher correlation in Hypotonia group in terms of the companion tendency of pathogenic factors and syndromes formed by the combination of pathogenic factors. 2. The pulse waves of Hypotonia group were mostly slow, weak, tense and stiff than Non-Hypotonia group. Conclusions: 1. In Hypotonia group, yin deficiency (陰虛) factor was frequently accompanied and consumption (虛損) of various organs based on the yin deficiency (陰虛) was observed. It means chronic and severe condition of exhaustion syndrome (虛勞). 2. The result of 3D-MAC also means pathological feature of yin syndrome (陰 證) and consumption (虛損). Besides, lower scores of Body Surface Area (BSA), body weight, and Body Mass Index (BMI) were associated with body weakness (體瘦), a symptom of exhaustion syndrome (虛勞).

Rheological Properties of Dough with Added Corni fructus Flour (산수유 첨가에 따른 밀가루 반죽의 물리적 특성)

  • Shin, Ji-Woong;Shin, Gil-Man
    • Food Science and Preservation
    • /
    • v.15 no.3
    • /
    • pp.390-395
    • /
    • 2008
  • The rheological properties of dough made with 0% 1 % 2% or 3% Corni fructus flour were investigated Rapid Visco Analyzer (RVA) analysis showed that the initial pasting temperature increased with increasing Corni fructusflour content, while the peak viscosity decreased. The water absorption, stability, development time, elasticity and valorimeter value of the dough, as determined using a farinograph and alveograph, decreased with increasing amounts of Corni fructusflour, while weakness increased. The extensibility, fermented volume and consistency of the dough increased gradually with increasing Corni fructus flour content. These results indicate that the addition of Corni fructus flour affects the rheological properties of bread.

Rheological Properties of Dough Added with Pine Needle Powder (솔잎분말 첨가에 따른 밀가루 반죽의 물리적 특성)

  • Shin, Gil-Man;Im, Jong-Cheol
    • Food Science and Preservation
    • /
    • v.15 no.3
    • /
    • pp.405-410
    • /
    • 2008
  • The rheological properties of dough made with 0%, 1%, 2% or 3% pine needle powder were investigated The approximate composition of the pine needle powder was moisture content 58.1% crude protein 4.1% crude fat 3.9% crude ash 0.9%, and crude fiber 9.3%. Rapid Visco Analyzer (RVA) analysis showed that the initial posting temperature increased with increasing pine needle powder content, while the peak viscosity decreased The water absorption, stability, development time, elasticity and valorimeter value of the dough, as determined using a farinograph and alveograph, decreased with increasing content of pine needle powder, while weakness increased. The extensibility, fermented volume and consistency of the dough decreased gradually with increasing pine needle powder content. These results indicate that addition of pine needle powder affects the rheological properties of bread.

Multiplexing of UHDTV Based on MPEG-2 TS (MPEG-2 TS 기반의 UHDTV 다중화)

  • Jang, Euy-Doc;Park, Dong-Il;Kim, Jae-Gon;Lee, Eung-Don;Cho, Suk-Hee;Choi, Jin-Soo
    • Journal of Broadcast Engineering
    • /
    • v.15 no.2
    • /
    • pp.205-216
    • /
    • 2010
  • In this paper, a method of MPEG-2 Transport Stream (TS) multiplexing for Ultra HDTV (UHDTV) and its design and implementation as a SW tool is described. In practice, UHD video may be divided into several HD videos and each video is encoded in parallel. Therefore, it is necessary to synchronize and multiplex multiple bitstreams encoding each HD video for transmitting and storing UHD video. In this paper, it is assumed that 4 HD videos partitioning a UHD spatially are encoded as H.264/AVC and two 5.0 channel audios are encoded by AC-3. Therefore, 4 H.264/AVC elementary streams (ESs) and 2 AC-3 ESs is mainly considered in the TS multiplexing of UHD. For the carriage of H.264/AVC and AC-3 over MPEG-2 TS, PES packetization and TS multiplexing are designed and implemented based on the extended specification of the MPEG-2 Systems and ATSC (Digital audio compressed standard), respectively. The implemented UHD TS multiplexing tool emulates real time HW operation in the time unit corresponding to the duration of one TS packet transmission in a given TS rate. In particular, in order to satisfy the timing model, the buffers defined in the TS System Target Decoder (T-STD) are monitored and their statuses are considered in the scheduling of TS multiplexing. For UHD multiplexing, two kinds of multiplexing structures, which are UHD re-multiplexing and UHD program multiplexing, are implemented and their strength and weakness are investigated. The developed UHD TS multiplexing tool is tested and verified in terms of the syntax and semantics conformance and functionalities by using a commercial analyzer and real-time presentation tools.

Quality Characteristics of Bread Made from Domestic Korean Wheat Flour Containing Cactus Chounnyuncho (Opuntia humifusa) Powder (천년초 선인장 분말을 첨가한 우리밀 식빵의 품질특성)

  • Kim, Kyung-Tae;Choi, A-Rum;Lee, Kyung-Seok;Joung, Yong-Myeon;Lee, Ki-Young
    • Korean journal of food and cookery science
    • /
    • v.23 no.4 s.100
    • /
    • pp.461-468
    • /
    • 2007
  • The quality characteristics of bread made from domestic Korean wheat flour that contained different amounts of cactus Chounnyuncho (Opuntia humifusa) powder were investigated. The water absorption and peak time, as determined by a farinograph, increased with increasing amounts of cactus powder, while stability, elasticity, and weakness decreased (p<0.05). RVA(Rapid Visco Analyzer) analysis showed that wheat flour retrogradation was retarded by increasing cactus powder content (p<0.05). The fermentation time of the bread increased with increasing cactus powder content, while the fermented volume and baking loss decreased (p<0.05). According to the sensory test, the most preferred bread contained 3% cactus powder (p0.05).