• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.27 no.3
• /
• pp.541-548
• /
• 2017

The smartphone operates the media server daemon to handle audio service requests. Media server daemons, running with a high privilege in the background, caused many vulnerabilities to applications most frequently used in smart devices including smartphones. Fuzzing is a popularly used methodology to find software vulnerabilities. Unfortunately, fuzzing itself is not much effective in such format-strict environments as media services. In this paper, we propose a file format-aware fuzzing in order to efficiently detect vulnerabilities of media server daemon. We acquired a remote arbitrary code execution vulnerability on iOS/tvOS/MacOS/watchOS, and we verified the effectiveness by comparing our methodology with the fuzzers FileFuzz and ZZUF.

• Journal of the Ergonomics Society of Korea
• /
• v.36 no.5
• /
• pp.437-446
• /
• 2017

Objective: This study aims to draw an efficient UI design by comparing the usability of App drawer and single-layered home screens, which are smartphone home screens. Background: Because smartphone home screen is frequently used including the installation, deletion, and editing of APPs, it should be designed with easily controllable information structure. There is a need to seek a user-friendly UI by comparing the usability of App drawer and single-layered home screens, of which methods to search Apps are different. There is also a need to examine an efficient UI and the factors to improve from the user perspective. Method: This study targeted 30 Android OS and iOS users to evaluate the App drawer and single-layered home screens, of which UI structures are different. Each participant was instructed to carry out an App searching task and App deleting task, and the execution time and the number of errors were measured. After the tasks were completed, they evaluated satisfaction through a questionnaire survey. Results: In the App searching task with low task level, there was no difference in execution level between the App drawer and single-layered home screens. However, the single-layered home screen showed higher efficiency and accuracy in the App deleting task with high task level. As for the group difference according to use experience, there was no difference in satisfaction among Android OS users, but iOS user satisfaction with single-layered home screen with which they were familiar was higher. Conclusion: As for home screen usability, the single-layered home screen UI structure can be advantageous, as task level is higher. Repulsion was higher, when users, who had used easier UI, used complex UI in comparison with user satisfaction, when users familiar with complex UI used easier UI. A UI indicating the current status with clear label marking through a task flow chart-based analysis, and a UI in which a user can immediately recognize by exposing hidden functions to the first depth were revealed as things to improve. Application: The results of this study are expected to be used as reference data in designing smartphone home screens. Especially, when iOS users use Android OS, the results are presumed to contribute to the reduction of predicted barriers.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2013.01a
• /
• pp.189-190
• /
• 2013

기존 차량용 블랙박스는 별도의 기기를 이용하는데, 이때 추가적인 비용이 발생하는 문제점이 있다. 또한 사고가 발생한 경우, 사용자의 의식을 체크 하지 못해 구조 신고를 보내는 등의 기능을 유연하게 추가하지 못하는 단점을 가지고 있다. 본 논문에서는 블랙박스 사용 시 발생하는 추가비용감소와 교통사고 발생 후 발생되는 환자의 응급 후송 및 뺑소니 등 2차 교통사고를 방지하기 위한 시스템의 필요성에 따라 아이폰에 있는 센서들을 활용하여 소프트웨어 방식의 차량용 블랙박스 시스템을 설계 및 구현하였다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2011.06b
• /
• pp.116-119
• /
• 2011

스마트폰은 기존의 휴대전화보다 더 향상된 컴퓨팅 능력을 제공하는 휴대전화로, 사용자가 자유롭게 애플리케이션을 설치하여 사용할 수 있다. 스마트폰 애플리케이션은 기존의 PC 애플리케이션과 달리 하드웨어 센서와 사용자 정보를 사용할 수 있으며, 기존과 다른 사용자 인터페이스 컴포넌트를 사용한다. 이와 같은 스마트폰 애플리케이션의 특성은 설계에 반드시 반영되어야 한다. UML은 소프트웨어 모델링 언어로, 다양한 도메인을 모델링할 수 있지만, 특정 도메인의 특성을 상세히 표현할 수 없다. 이러한 이유로 UML은 확장 메커니즘을 제공하고 있다. 본 논문은 확장 메커니즘을 이용하여 iOS 애플리케이션의 특성을 충분히 표현할 수 있도록 UML을 확장하였다.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2013.05a
• /
• pp.642-643
• /
• 2013

Recently there are many smartphone applications. People who live in these days interest in health but there are not many smartphone applications that deal with healthcare. In this work, we will introduce healthcare application which introduce exercise methods and user can be seen their consuming calories and eating calories using calender.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2013.05a
• /
• pp.714-717
• /
• 2013

스마트폰의 대중화로 현재 앱스토어에는 다양한 어플리케이션들이 나오고 있다. 이와 같이 급속하게 발전하는 시대임에도 불구하고 모바일디바이스에서 웹페이지 또는 어플리케이션 으로 확인 할 수 있는 표준정보의 부재가 심각하다. 본 논문에서는 확인하기도 힘들고 활용하기도 어려운 기술표준 관련 정보를 공공안내그림표지 OpenAPI를 활용하여 보다 쉽게 이용 가능한 iOS 기반 스마트폰 어플리케이션을 설계 및 구현한다.

• Proceedings of the Korean Society of Broadcast Engineers Conference
• /
• 2022.11a
• /
• pp.193-195
• /
• 2022

본 논문에서는 3차원 스캔 없이 이미지 입력만을 사용한 개인 체형을 고려한 모바일 가상 착용 시스템의 전체 과정을 설계하고 개발하였다. 이를 위하여 이미지상 인물의 자세와 체형의 추정을 통하여 3차원 인체모델(SMPL)을 추정하는 최근의 방식을 이용하였고, 앞 뒷면 의상 이미지를 2차원 texture 매핑과 평면 triangle mesh로 복원하고 의상 봉제 (sewing) 시뮬레이션을 사용하여 3차원 의상 모델을 생성하는 방법을 새롭게 개발하였다. 또한 이를 활용한 3차원 개인화된 가상 착용 모바일 앱과 서비스를 Flask와 iOS 환경에서 SceneKit을 활용하여 개발하였다. 이를 통하여 단순히 의상의 매칭과 스타일 뿐 아니라 사이즈에 따른 착용 Fit을 구매 전에 확인할 수 있는 전체 서비스를 실현 및 검증하였다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.23 no.6
• /
• pp.1057-1067
• /
• 2013

The market share of smartphones has been increasing more and more at the recent mobile market and smart devices and applications that are based on a variety of operating systems has been released. Given this reality, the importance of smart devices analysis is coming to the fore and the most important thing is to minimize data corruption when extracting data from the device in order to analyze user behavior. In this paper, we compare and analyze the area-specific changes that are the file system of collected image after obtaining root privileges on the Android OS and iOS based devices, and then propose the most efficient method to obtain root privileges.

• Electronics and Telecommunications Trends
• /
• v.33 no.6
• /
• pp.129-138
• /
• 2018

As recent applications are requiring more CPUs for their performance, manycore systems have evolved. Since existing operating systems do not provide performance scalability in manycore systems, Azalea, a multi-kernel based system, has been developed for supporting performance scalability. Unikernel is a new operating system technology starting with the concept of a library OS. Applying unikernel to Azalea enables an improvement in performance. In this paper, we first analyze the current technology trends of unikernel, and then discuss the applications and effects of unikernel to Azalea. Azalea-unikernel was built in a single image consisting of libOS, runtime libraries, and an application, and executed with the desired number of cores and memory size in bare-metal. In particular, it supports source and binary compatibility such that existing linux binaries can be rebuilt and executed in Azalea-unikernel, and already built binaries can be run immediately without modification with a better performance. It not only achieves a performance enhancement, it is also a more secure OS for manycore systems.

• Journal of KIISE:Computing Practices and Letters
• /
• v.15 no.5
• /
• pp.400-404
• /
• 2009

Native Command Queueing is a technology to maximize throughput of disk system by reordering requests in its command queue. Recent S-ATA 2 standard specifies a protocol for the purpose of dealing with NCQ feature, making most vendors implementing it in their disk devices. However, the new feature, NCQ, may lead to information gap between OS and disk drive. 05 considers that disk will service I/O requests in the order as OS has dispatched. Unfortunately, it isn't true any more since NCQ would simply ignore the policy of OS and reorder the sequence OS has expected. Let us define the term as expectation-discord. Due to the discord, serious performance anomalies or starvation of requests may occur in I/O subsystem. In this paper, we confirm that the expectation-discord actually brings about starvation of requests. We propose a solution to settle it. Our solution is very simple, effective, cheap(not requiring any hardware modification) and portable across various OS. Experimental results show that our solution can balance throughput and response time very well.