• Journal of the Korea Society of Computer and Information
• /
• v.14 no.12
• /
• pp.157-167
• /
• 2009

Recently, the leakage of confidential information and personal information is taking place on the Internet more frequently than ever before. Most of such online security incidents are caused by attacks on vulnerabilities in web applications developed carelessly. It is impossible to detect an attack on a web application with existing firewalls and intrusion detection systems. Besides, the signature-based detection has a limited capability in detecting new threats. Therefore, many researches concerning the method to detect attacks on web applications are employing anomaly-based detection methods that use the web traffic analysis. Much research about anomaly-based detection through the normal web traffic analysis focus on three problems - the method to accurately analyze given web traffic, system performance needed for inspecting application payload of the packet required to detect attack on application layer and the maintenance and costs of lots of network security devices newly installed. The UTM(Unified Threat Management) system, a suggested solution for the problem, had a goal of resolving all of security problems at a time, but is not being widely used due to its low efficiency and high costs. Besides, the web filter that performs one of the functions of the UTM system, can not adequately detect a variety of recent sophisticated attacks on web applications. In order to resolve such problems, studies are being carried out on the web application firewall to introduce a new network security system. As such studies focus on speeding up packet processing by depending on high-priced hardware, the costs to deploy a web application firewall are rising. In addition, the current anomaly-based detection technologies that do not take into account the characteristics of the web application is causing lots of false positives and false negatives. In order to reduce false positives and false negatives, this study suggested a realtime anomaly detection method based on the analysis of the length of parameter value contained in the web client's request. In addition, it designed and suggested a WAF(Web Application Firewall) that can be applied to a low-priced system or legacy system to process application data without the help of an exclusive hardware. Furthermore, it suggested a method to resolve sluggish performance attributed to copying packets into application area for application data processing, Consequently, this study provide to deploy an effective web application firewall at a low cost at the moment when the deployment of an additional security system was considered burdened due to lots of network security systems currently used.

• Journal of Astronomy and Space Sciences
• /
• v.36 no.1
• /
• pp.21-33
• /
• 2019

This paper focuses on the interpretation of radiation fluxes from active galactic nuclei. The advantage of positron annihilation spectroscopy over other methods of spectral diagnostics of active galactic nuclei (therefore AGN) is demonstrated. A relationship between regular and random components in both bolometric and spectral composition of fluxes of quanta and particles generated in AGN is found. We consider their diffuse component separately and also detect radiative feedback after the passage of high-velocity cosmic rays and hard quanta through gas-and-dust aggregates surrounding massive black holes in AGN. The motion of relativistic positrons and electrons in such complex systems produces secondary radiation throughout the whole investigated region of active galactic nuclei in form of cylinder with radius R= 400-1000 pc and height H=200-400 pc, thus causing their visible luminescence across all spectral bands. We obtain radiation and electron energy distribution functions depending on the spatial distribution of the investigated bulk of matter in AGN. Radiation luminescence of the non-central part of AGN is a response to the effects of particles and quanta falling from its center created by atoms, molecules and dust of its diffuse component. The cross-sections for the single-photon annihilation of positrons of different energies with atoms in these active galactic nuclei are determined. For the first time we use the data on the change in chemical composition due to spallation reactions induced by high-energy particles. We establish or define more accurately how the energies of the incident positron, emitted ${\gamma}-quantum$ and recoiling nucleus correlate with the atomic number and weight of the target nucleus. For light elements, we provide detailed tables of all indicated parameters. A new criterion is proposed, based on the use of the ratio of the fluxes of ${\gamma}-quanta$ formed in one- and two-photon annihilation of positrons in a diffuse medium. It is concluded that, as is the case in young supernova remnants, the two-photon annihilation tends to occur in solid-state grains as a result of active loss of kinetic energy of positrons due to ionisation down to thermal energy of free electrons. The single-photon annihilation of positrons manifests itself in the gas component of active galactic nuclei. Such annihilation occurs as interaction between positrons and K-shell electrons; hence, it is suitable for identification of the chemical state of substances comprising the gas component of the investigated media. Specific physical media producing high fluxes of positrons are discussed; it allowed a significant reduction in the number of reaction channels generating positrons. We estimate the brightness distribution in the ${\gamma}-ray$ spectra of the gas-and-dust media through which positron fluxes travel with the energy range similar to that recorded by the Payload for Antimatter Matter Exploration and Light-nuclei Astrophysics (PAMELA) research module. Based on the results of our calculations, we analyse the reasons for such a high power of positrons to penetrate through gas-and-dust aggregates. The energy loss of positrons by ionisation is compared to the production of secondary positrons by high-energy cosmic rays in order to determine the depth of their penetration into gas-and-dust aggregations clustered in active galactic nuclei. The relationship between the energy of ${\gamma}-quanta$ emitted upon the single-photon annihilation and the energy of incident electrons is established. The obtained cross sections for positron interactions with bound electrons of the diffuse component of the non-central, peripheral AGN regions allowed us to obtain new spectroscopic characteristics of the atoms involved in single-photon annihilation.