• Title/Summary/Keyword: exact analysis

Search Result 2,627, Processing Time 0.031 seconds

A Study on Geology of Clay Mineral Deposits of Pohang-Ulsan Area and their Physico-Chemical Properties (포항-울산간의 점토자원의 지질과 그 물리화학적 특성에 관한 연구)

  • Kim, Ok Joon;Lee, Ha Young;Kim, Suh Woon;Kim, Soo Jin
    • Economic and Environmental Geology
    • /
    • v.4 no.4
    • /
    • pp.167-215
    • /
    • 1971
  • I. Purpose and Importance of the Study The purpose of the present study is to clarify to geological, mineralogical, and physico-chemical properties of the clay minerals deposits imbedded in the Tertiary sediments in the areas between. Pohang and Ulsan along southeastern coastal region of Korea. These clays are being mined and utilized for filter and insecticide after activation or simple pulverizing, nontheless activated clays are short coming as chemical industry in Korea has been rapidly grown in recent years. In spite of such increase in clay demand, no goological investigation on clay deposits nor physico-chemical properties of the clays have been carried out up to date. Consequently activated clays produced in Korea is not only of low grade but also of shortage in supply, so that Korea has to import activated clays of better grade. The importance of the present study lies, therefore, on that guiding principle could be laid down by knowing stratigraphical horizons, of clay deposits and fundamental data of improving grade of activated clays might be derived from the results of physico-chemical examinations. II. Contents and Scope of the study The contents of the study are pinpointed down in the following two subjects: 1) General geological investigation of Tertiary formations distributed in the areas between Pohang and UIsan, and detail geological study of the bentonitic clay deposits imbedded in them. 2) To clarifty physico-chemical characteristics of the clays by means of chemical analysis, X-ray diffraction and electron microscope. The scope of the study involves the following there points: i) Regional geological investigation-This investigation has been carried out in order to find out the distribution of Tertiary sediments and exact location of clay mineral deposits in the areas between Pohang and UIsan. ii) Detail geological investigation-This has been concentrated in and around the clay deposits which. had been found out by the regional investigation. iii) Laboratory researchs include i) age determination and correlation of Tertiary sediments by paleontological study, and ii) Chemical analysis, X-ray diffraction, and electron microscopic studies on clays, samples taken from various clay deposits. III. Research Results and Suggestions 1) The geology of the area investigated is composed mainly of Janggi and Beomgokri groups of Miocene age in ascending order rested on the upper Silla system, Balkuksa granite and volcanic rocks of upper Cretaceous age as base. 2) Janggi group is composed in ascending order of Janggi conglomerate, Nultaeri rhyolitic tuff, Keumkwangdong shale, two beds of lignite-bearing formations which consist of alternation of conglomerate, sandstone and mudstone, and andesitic, rhyolitic, and basaltic tuff beds. 3) Beomgokri group is mainly composed of andesitic to rhyolitic tuff interlayered by conglomerate and tuffaceous sandstone. In the areas around boundary between North-and South Kyeongsang-do is distributed Haseori farmation which is composed of conglomerate, sandstone, mudstone and andesitic to rhyolitic tuff, and which is correlated to Eoilri formation of Janggi group. 4) Clay deposits of the area are interbedded in Eoilri, Haseori, Nultaeri tuff, Keumkwangdong shale, upper and lower horizon of the lower lignite-bearing seam, and Keumori rhyolitic tuff formations of Janggi group; and are genetically classi.fied into four categories, that is, i) those derived from volcanic ash beds(Haseori and Daeanri deposits), ii) those of secondary residual type from rhyolitic tuff beds(Seokupri deposits), iii) Clay beds above and beneath the lignite seams, (Janggi and Keumkwangdong deposits), and iv) those derived from rhyolitic tuff beds(Sangjeong and Tonghae deposits). 5) Mineral constituents of clay deposits are, according to X-ray diffraction, montmorillonite accompanied in different degree by cristobalite, plagioclase, quartz, stilbite, and halloysite in rare occasion. The clays are grouped according to mineral composition into four types; i) those consist mostly of montmorillonite, ii) those composed of montmorillonite and cristobalite, iii) those composed of montmorillonite and plagioclase, and iv) those composed of montmorillonite, plagioclase and quartz. 6) Clays interbedded in Haseori formation and vicinity of lignite seams belong to the first type, are of good quality and derived either from volcanic ash bed, or primary clay beds near lignite seams. Clays belonged to other types are derived from weathering of rhyolitic tuff formations and their quality varies depending upon original composition and degree of weathering. Few clays in secondary residual type contain small amount of halloysite. 7) Judging from analytical data, content of silica($SiO_2$) varies proportionally with content of cristobalite, and alumina($Al_2O_3$) content does not vary with that of plagioclase, but increases in the sedimentary bedded type of deposits. 8) It is unknown whether or not these days could be upgraded by beneficiation since no grain size of these impurities nor beneficiation test had been studied. 9) Clay beds derived from valcanic ash layers or sedimentary layers at the vicinity of lignite seams are thin in thickness and of small, discontinueous lenticular shape, although they are of good quality; and those derived from rhyolitic tuff formations or residual type from tuff are irregular in both occurrence and quality. It is, therefore, not only very difficult but also meaningless to calculate its reserve, and reserve estimation, even if done, will greatly be deviated from practically minable one. Consequently, way of discovery and exploitation of clay deposits in the area under consideration is to check the geologically favorable areas whenever needed.

  • PDF

THE EFFECT OF ALTERED FUNCTIONAL FORCE ON THE EXPRESSION OF SPECIFIC MRNAS IN THE DEVELOPING MOUSE MANDIBLE (하악골의 발육중인 생쥐에서 기능력의 변화가 특이-유전자 발현에 미치는 영향)

  • Kim, Hyung-Tae;Park, Joo-Cheol;Lee, Chang-Seop;Park, Heon-Dong
    • Journal of the korean academy of Pediatric Dentistry
    • /
    • v.30 no.2
    • /
    • pp.308-319
    • /
    • 2003
  • Mechanical forces are known to have an effect on bone formation, maintenance and remodeling, and there is evidence that the development of the mandibular condyle in the rat or mouse is influenced by altered functional force. However, studies are lacking in molecular-biologic mechanism such as the identification of differentiation factor induced from functional force. Here a mouse model was used to investigate the functional stress-responsive gene or factors which is related to the altered force by comparing the expression genes of functional state and hypo-functional state of the mouse mandible. ICR mice were provisioned with either a soft, mushy diet (soft-diet group) or hard rat pellets (hard-diet group) beginning at weaning for the alteration of functional force and subsequently sacrificed at 89 days of age. Incisor of mice in group 1 were trimmed twice a week to reduce occlusal forces. After killing the animals, mandibular bone including condyle were collected for RNA extraction, subtractive hybridization, northern blot analysis and mRNA in-situ hybridization. The results as follows; 1. A total of 39 clones were sequenced, and 11 individual sequence types were subsequently identified by subtractive hybridization, as 28 clones were represented twice in the analyzed sets. 2. Consequently four candidate clones, FS-s (functional stress-specific)2, -5, -18, and -22 were identified and characterized by homolgy search and northern analysis. Four of these clones, FS-s2, -5, -18, and -22, were shown to be expressed differentially in the hard-diet group. 3. Histologic sections showed that osteoblastic activity along the bone trabeculae and active bone remodeling were significantly lower in soft than in hard diet animals. A soft diet seems to enable a longer period of endochondral ossification in the mandibular condyle. 4. Although the mRNAs of FS-s2, -5, -18, and -22 were expressed rarely by cells of the soft-diet group, highest expression was detected in the cells of the hard-diet group. Together with the above results, it is suggested that FS-s2, -5, -18, and -22 could act as an important factors controlling the tissue changes in response to functional stress. The exact functional significance of these findings remains to be established.

  • PDF

Optimum Design of Two Hinged Steel Arches with I Sectional Type (SUMT법(法)에 의(依)한 2골절(滑節) I형(形) 강재(鋼材) 아치의 최적설계(最適設計))

  • Jung, Young Chae
    • KSCE Journal of Civil and Environmental Engineering Research
    • /
    • v.12 no.3
    • /
    • pp.65-79
    • /
    • 1992
  • This study is concerned with the optimal design of two hinged steel arches with I cross sectional type and aimed at the exact analysis of the arches and the safe and economic design of structure. The analyzing method of arches which introduces the finite difference method considering the displacements of structure in analyzing process is used to eliminate the error of analysis and to determine the sectional force of structure. The optimizing problems of arches formulate with the objective functions and the constraints which take the sectional dimensions(B, D, $t_f$, $t_w$) as the design variables. The object functions are formulated as the total weight of arch and the constraints are derived by using the criteria with respect to the working stress, the minimum dimension of flange and web based on the part of steel bridge in the Korea standard code of road bridge and including the economic depth constraint of the I sectional type, the upper limit dimension of the depth of web and the lower limit dimension of the breadth of flange. The SUMT method using the modified Newton Raphson direction method is introduced to solve the formulated nonlinear programming problems which developed in this study and tested out throught the numerical examples. The developed optimal design programming of arch is tested out and examined throught the numerical examples for the various arches. And their results are compared and analyzed to examine the possibility of optimization, the applicablity, the convergency of this algorithm and with the results of numerical examples using the reference(30). The correlative equations between the optimal sectional areas and inertia moments are introduced from the various numerical optimal design results in this study.

  • PDF

Clinical Analysis of Patients with Abdomen or Neck-penetrating Trauma (복부와 경부 관통상 환자에 대한 임상적 고찰)

  • Noh, Ha-Ny;Kim, Kwang-Min;Park, Joon-Beom;Ryu, Hoon;Bae, Keum-Seok;Kang, Seong-Joon
    • Journal of Trauma and Injury
    • /
    • v.23 no.2
    • /
    • pp.107-112
    • /
    • 2010
  • Purpose: Recently, the change to a more complex social structure has led to an increased frequency of traumas due to violence, accident and so on. In addition, the severity of the traumas and the frequency of penetrating injuries have also increased. Traumas to cervical and abdominal areas, what are commonly seen by general surgeons, can have mild to fatal consequences because in these areas, various organs that are vital to sustaining life are located. The exact location and characteristics of the injury are vital to treating patients with the trauma to these areas. Thus, with this background in mind, we studied, compared, and analyzed clinical manifestations of patients who were admitted to Wonju Christian hospital for penetrating injuries inflicted by themselves or others. Methods: We selected and performed a retrospective study of 64 patients who had been admitted to Wonju Christian Hospital from January 2005 to December 2009 and who had cervical or abdominal penetrating injuries clearly inflicted by themselves or others. Results: There were 51 male (79.7%) and 13 female (20.3%) patients, and the number of male patients was more dominant in this study, having a sex ratio of 3.9 to 1. The range of ages was between 20 and 86 years, and mean age was 43.2 years. There were 5 self-inflicted cervical injuries, and 19 self-inflicted abdominal injuries, making the total number of self-inflicted injury 24. Cervical and abdominal injuries caused by others were found in 11 and 29 patients, respectively. The most common area involved in self-inflicted injuries to the abdomen was the epigastric area, nine cases, and the right-side zone II was the most commonly involved area. On the other hand, in injuries inflicted by others, the left upper quadrant of the abdomen was the most common site of the injury, 14 cases. In the neck, the left-side zone II was the most injured site. In cases of self-inflicted neck injury, jugular vein damage and cervical muscle damage without deep organ injury were observed in two cases each, making them the most common. In cases with abdominal injuries, seven cases had limited abdominal wall injury, making it the most common injury. The most common deep organ injury was small bowel wounds, five cases. In patients with injuries caused by others, six had cervical muscle damage, making it the most common injury found in that area. In the abdomen, small bowel injury was found to be the most common injury, being evidenced in 13 cases. In self-inflicted injuries, a statistical analysis discovered that the total duration of admission and the number of patients admitted to the intensive care unit were significantly shorter and smaller, retrospectively, than in the patient group that had injuries caused by others. No statistically significant difference was found when the injury sequels were compared between the self-inflicted-injury and the injury-inflicted-by-others groups. Conclusion: This study revealed that, in self-inflicted abdominal injuries, injuries limited to the abdominal wall were found to be the most common, and in injuries to the cervical area inflicted by others, injuries restricted to the cervical muscle were found to be the most common. As a whole, the total duration of admission and the ICU admission time were significantly shorter in cases of self-inflicted injury. Especially, in cases of self inflicted injuries, abdominal injuries generally had a limited degree of injury. Thus, in our consideration, accurate injury assessment and an ideal treatment plan are necessary to treat these patients, and minimally invasive equipment, such as laparoscope, should be used. Also, further studies that persistently utilize aggressive surgical observations, such as abdominal ultrasound and computed tomography, for patients with penetrating injuries are needed.

The Usefulness Assessment of Attenuation Correction and Location Information in SPECT/CT (SPECT/CT에서 감쇠 보정 및 위치 정보의 유용성 평가)

  • Choi, Jong-Sook;Jung, Woo-Young;Shin, Sang-Ki;Cho, Shee-Man
    • The Korean Journal of Nuclear Medicine Technology
    • /
    • v.12 no.3
    • /
    • pp.214-221
    • /
    • 2008
  • Purpose: We make a qualitative analysis of whether Fusion SPECT/CT can find lesion's anatomical sites better than existing SPECT or not, and we want to show the usefulness of SPECT/CT through finding out effects of CT attenuation correction on SPECT images. Materials and Method: 1. The evaluation of fusion images: This study comprised patients who was tested $^{131}I$-MIBG, Bone, $^{111}In$-Octreotide, Meckel's diverticulum, Parathyroid MIBI with Precedence 16 or Symbia T2 from 2008 Jan to Aug. We compared SPECT/CT image with non fusion image and make a qualitative analysis. 2. The evaluation of attenuation correction: We classified 38 patients who was tested 201Tl myocardial exam with Symbia T2 into 5 sections by using Cedars Sinai' QPS program - Ant, Inf, Lat, Septum, Apex. And we showed each section's perfusion states by percentage. We compared the each section's perfusion-states differences between CT AC and Non AC by average${\pm}$standard deviation. Results: 1. The evaluation of fusion images : In high energy $^{131}I$ cases, it was hard to grasp exact anatomical lesions due to difference between regions and surrounding lesions' uptake level. After combining with CT, we could grabs anatomical lesion more exactly. And in meckel's diverticulum case or to find lesions around bowels or organs with $^{111}In$ cases, it demonstrates its superiority. Bone SPECT/CT images help to distinguish between disk spaces certainly and give correct results. 2. The evaluation of attenuation correction: There is no significant difference statistically in Ant and Lat (p>0.05), but there is a meaningful difference in Inferior, Apex and Septum (p<0.05). AC perfusion at inferior wall in the 5 sections of myocardium: The perfusion difference between Non AC perfusion image ($68.58{\pm}7.55$) and CT corrected perfusion image ($76.84{\pm}6.52$) was the largest by $8.26{\pm}4.95$ (p<0.01, t=10.29). Conclusion: Nuclear medicine physicians can identify not only molecular image which shows functional activity of lesions but also anatomical location information of lesions with more accuracy using the combination of SPECT and CT systems. Of course this combination helps nuclear medicine physician find out the abnormal parts. Moreover combined data sets help separate between normal group and abnormal group in complicated body part. So clinicians can carry out diagnosis and treatment planning at the same time with a single test image. In addition, when we examine a myocardium in thorax where attenuation can occur easily, we can trust perfusion more in a certain region in SPECT test because CT provides the capability for accurate attenuation correction. In these reasons, we think we can prove the justice after treatment fusion image.

  • PDF

Content and Characteristics of Forest Cover Changes in North Korea (북한(北韓) 지역(地域) 산림면적(山林面積) 변화(變化)의 규모(規模)와 특성(特性))

  • Lee, Kyu-Sung;Joung, Mi-Reyoung;Yoon, Jung-Sook
    • Journal of Korean Society of Forest Science
    • /
    • v.88 no.3
    • /
    • pp.352-363
    • /
    • 1999
  • It has been rare to obtain reliable information related to the size of forest land in North Korea. Several sources of forest statistics, ranging from the first map of forest distribution in Korean Peninsula produced in 1910 to official data reported by the North Korea Government in 1997, were gathered and analyzed to define the characteristics of forest cover changes over years. In addition, Landsat satellite data obtained from 1973 to 1993 were processed for the two study areas of the provinces of Pyungyang and Heasan, where the topography and land use pattern are significantly different each other. Using three sets of multitemporal Landsat imagery, land cover ma-ps were produced by computer classification. Although forest statistics reported before 1990 are somewhat inconsistent, they mere gradually decreasing over years. The estimates of 1991 satellite data and the recent statistics reported in 1998 shows very steep decline in forest lands as compared to the ones before 1990. The abrupt decrease of forest lands after 1990 was also found on the detailed analysis of Landsat data for the two study areas of Pyungyang and Heasan. The rapid decline of forest lands may have something to do with the poor economic situation of the country and the continuing natural disasters of severe flooding and drought. Unstocked forest, which was not classified into forest land, was a very distinct and pervasive land cover type that can be easily observed on satellite imagery. Since unstocked forest land in North Korea may be a critical factor for degrading environmental quality as well as for the continuing natural disasters, further analysis is necessary to define the exact extent and the physical characteristics of the cover type.

  • PDF

Clinical Characteristics of Patients with Taste Disorders (미각 장애 환자의 임상적 특성에 관한 연구)

  • Lee, Eun-Jin;Park, Won-Kyu;Nam, Jin-Woo;Yun, Jong-Il;Kho, Hong-Seop
    • Journal of Oral Medicine and Pain
    • /
    • v.34 no.4
    • /
    • pp.341-351
    • /
    • 2009
  • There is tremendous variability in the ways patients present with taste problems. Because of complex and multifactorial etiological background, it is not simple to evaluate patients with taste disorders. Accurate assessment of patients' status by prudent, thorough history taking and symptom analysis is the most essential for exact diagnosis of taste disorders. The aim of this study was to investigate the clinical characteristics of patients with taste problems as a primary complaint. Consecutive series of 50 patients (12 males and 38 females, mean age $53.6\;{\pm}\;14.7$ years) were included for the present study. All subjects were requested to complete a comprehensive questionnaire. Clinical evaluation procedures included oral examination, interview, questionnaire analysis, panoramic radiography, blood test and measurement of salivary flow rate. The obtained results were as follows: 1. Among the patients, 36 patients (72%) complained of oral mucosal pain or burning sensation. Of these patients, 18 patients (36%) were diagnosed as burning mouth syndrome. 2. Nineteen patients (38%) complained of subjective oral dryness. The flow rate of unstimulated whole saliva was less than 0.1 mL/min in 14 patients (28%) and 17 (34%) had a stimulated whole salivary flow rate of less than 0.5 mL/min. 3. Among the types of taste disorders, hypogeusia, the most frequently reported, was found in 25 patients (50%), dysgeusia in 18 patients (36%), phantogeusia in 15 patients (30%), hypergeusia in 10 patients (20%), and ageusia in 5 patients (10%). Nineteen patients (38%) reported more than one type of taste disorder and the most frequent combination was dysgeusia + hypogeusia (n=6, 12%). 4. Based on data from the medical and dental histories and examinations, the patients were assigned to 12 probable causal categories. Taste disorders due to oral mucosal diseases and idiopathic taste disorder were the most frequent (n=9; 18%, each), followed by psychogenic taste disorder (n=8; 16%), drug-induced taste disorder (n=7; 14%), and taste disorder due to dry mouth (n=6; 12%). These 5 categories of taste disorder accounted for 78% of all cases in this study.

Job Preference Analysis and Job Matching System Development for the Middle Aged Class (중장년층 일자리 요구사항 분석 및 인력 고용 매칭 시스템 개발)

  • Kim, Seongchan;Jang, Jincheul;Kim, Seong Jung;Chin, Hyojin;Yi, Mun Yong
    • Journal of Intelligence and Information Systems
    • /
    • v.22 no.4
    • /
    • pp.247-264
    • /
    • 2016
  • With the rapid acceleration of low-birth rate and population aging, the employment of the neglected groups of people including the middle aged class is a crucial issue in South Korea. In particular, in the 2010s, the number of the middle aged who want to find a new job after retirement age is significantly increasing with the arrival of the retirement time of the baby boom generation (born 1955-1963). Despite the importance of matching jobs to this emerging middle aged class, private job portals as well as the Korean government do not provide any online job service tailored for them. A gigantic amount of job information is available online; however, the current recruiting systems do not meet the demand of the middle aged class as their primary targets are young workers. We are in dire need of a specially designed recruiting system for the middle aged. Meanwhile, when users are searching the desired occupations on the Worknet website, provided by the Korean Ministry of Employment and Labor, users are experiencing discomfort to search for similar jobs because Worknet is providing filtered search results on the basis of exact matches of a preferred job code. Besides, according to our Worknet data analysis, only about 24% of job seekers had landed on a job position consistent with their initial preferred job code while the rest had landed on a position different from their initial preference. To improve the situation, particularly for the middle aged class, we investigate a soft job matching technique by performing the following: 1) we review a user behavior logs of Worknet, which is a public job recruiting system set up by the Korean government and point out key system design implications for the middle aged. Specifically, we analyze the job postings that include preferential tags for the middle aged in order to disclose what types of jobs are in favor of the middle aged; 2) we develope a new occupation classification scheme for the middle aged, Korea Occupation Classification for the Middle-aged (KOCM), based on the similarity between jobs by reorganizing and modifying a general occupation classification scheme. When viewed from the perspective of job placement, an occupation classification scheme is a way to connect the enterprises and job seekers and a basic mechanism for job placement. The key features of KOCM include establishing the Simple Labor category, which is the most requested category by enterprises; and 3) we design MOMA (Middle-aged Occupation Matching Algorithm), which is a hybrid job matching algorithm comprising constraint-based reasoning and case-based reasoning. MOMA incorporates KOCM to expand query to search similar jobs in the database. MOMA utilizes cosine similarity between user requirement and job posting to rank a set of postings in terms of preferred job code, salary, distance, and job type. The developed system using MOMA demonstrates about 20 times of improvement over the hard matching performance. In implementing the algorithm for a web-based application of recruiting system for the middle aged, we also considered the usability issue of making the system easier to use, which is especially important for this particular class of users. That is, we wanted to improve the usability of the system during the job search process for the middle aged users by asking to enter only a few simple and core pieces of information such as preferred job (job code), salary, and (allowable) distance to the working place, enabling the middle aged to find a job suitable to their needs efficiently. The Web site implemented with MOMA should be able to contribute to improving job search of the middle aged class. We also expect the overall approach to be applicable to other groups of people for the improvement of job matching results.

The Analysis of Risk Factors of Pulmonary Tuberculosis Patients Failed in Retreatment (재치료실패 폐결핵 환자의 위험인자 분석)

  • Kim, Hyoung-Soo;Lee, Won-Jin;Kong, Seok-Jun;Shon, Mal-Hyun
    • Tuberculosis and Respiratory Diseases
    • /
    • v.49 no.6
    • /
    • pp.684-690
    • /
    • 2000
  • Background : The most common cause of treatment failure of pulmonary tuberculosis is early stoppage of treatment or irregular medication. The most important aspect of a retreatment is regular medication provided over a long period. Inadequate treatment may cause drug resistance and prolong the duration of chemotherapy. This study analyzed the risk factors of pulmonary tuberculosis patients, who failed in retreatment, and to use the results as basic data in the management of intractable tuberculosis patients with improving the rate of retreatment success. Methods : We performed a retroactive study of 62 pulmonary tuberculosis patients in retreatment at National Mokpo Tuberculosis Hospital from Jan. 1994 to Dec. 1995. The patients were separated into two groups: group I was retreatment failure and group II was retreatrnent success. For the analysis of risk factors in retreatment failure, we compared the difference between the two groups and tested the confidence limit about results of the results by independent t-test, ${\chi}^2$ test and Fisher's exact test. Results : The treatment failure rate of retreatment patients was 13(21%), and treatment success 49(79%). No significant difference (p>0.05)in age, sex, number of treatment, irregular rate of treatment, extent of the disease & cavitary lesion on the chest X-ray, number of resistance drugs, number of used drugs to medication, number of sensitive bactericidal drugs to medication, rate of sensitive drugs to medication and resisiance to INH & RFP had not significant difference. was found. However, the number of treatment was $2.4{\pm}0.8$ in group I and $1.6{\pm}0.9$ in group II, and had showing a significant difference(p<0.05) between the two groups. Conclusion : The risk factor of retreatment failure was more irregular previous treatment the irregularity of the previous treatment. For reducing the retreatment failure of pulmonary tuberculosis, greater efforts are needed more need to be done to prevent failure of first treatment.

  • PDF

Improved Original Entry Point Detection Method Based on PinDemonium (PinDemonium 기반 Original Entry Point 탐지 방법 개선)

  • Kim, Gyeong Min;Park, Yong Su
    • KIPS Transactions on Computer and Communication Systems
    • /
    • v.7 no.6
    • /
    • pp.155-164
    • /
    • 2018
  • Many malicious programs have been compressed or encrypted using various commercial packers to prevent reverse engineering, So malicious code analysts must decompress or decrypt them first. The OEP (Original Entry Point) is the address of the first instruction executed after returning the encrypted or compressed executable file back to the original binary state. Several unpackers, including PinDemonium, execute the packed file and keep tracks of the addresses until the OEP appears and find the OEP among the addresses. However, instead of finding exact one OEP, unpackers provide a relatively large set of OEP candidates and sometimes OEP is missing among candidates. In other words, existing unpackers have difficulty in finding the correct OEP. We have developed new tool which provides fewer OEP candidate sets by adding two methods based on the property of the OEP. In this paper, we propose two methods to provide fewer OEP candidate sets by using the property that the function call sequence and parameters are same between packed program and original program. First way is based on a function call. Programs written in the C/C++ language are compiled to translate languages into binary code. Compiler-specific system functions are added to the compiled program. After examining these functions, we have added a method that we suggest to PinDemonium to detect the unpacking work by matching the patterns of system functions that are called in packed programs and unpacked programs. Second way is based on parameters. The parameters include not only the user-entered inputs, but also the system inputs. We have added a method that we suggest to PinDemonium to find the OEP using the system parameters of a particular function in stack memory. OEP detection experiments were performed on sample programs packed by 16 commercial packers. We can reduce the OEP candidate by more than 40% on average compared to PinDemonium except 2 commercial packers which are can not be executed due to the anti-debugging technique.