• 제목/요약/키워드: injection detection

검색결과 485건 처리시간 0.025초

인 메모리 악성코드 인젝션 기술의 언 패킹기법 (Unpacking Technique for In-memory malware injection technique)

  • 배성일;임을규
    • 스마트미디어저널
    • /
    • 제8권1호
    • /
    • pp.19-26
    • /
    • 2019
  • 2018년 평창 동계 올림픽 개막식에서 출처를 알 수 없는 사이버공격이 발생하였다. 해당 공격에서 사용된 악성코드는 인 메모리 악성코드로 기존 악성코드와 은닉하는 장소가 다르며, 140개 이상의 은행, 통신, 정부 기관에서 발견될 정도로 빠르게 확산되고 있다. 인 메모리 악성코드는 전체 악성코드의 15%이상을 차지하며 매우 심각한 피해를 주고 있다. 비휘발성 저장장치로 알려진 하드디스크에 자신의 정보를 저장하는 것이 아닌 휘발성 저장장치 인 램의 특정 메모리영역인 프로세스에 삽입하여 악성행위를 일으키는 악성코드를 인 메모리 악성코드라고 지칭한다. 결과적으로 자신의 정보를 남기지 않아 메모리 탐지 도구를 우회하여 악성코드 분석가들의 분석을 어렵게 한다. 또한 현대 메모리는 갈수록 크기가 증가해 메모리 탐지 도구를 사용하여 메모리전체를 보기 힘들다. 따라서 본 논문에서는 인 메모리 악성코드인 Dorkbot과 Erger를 대상으로 IDA Pro 디버거를 통해 인젝션을 언 패킹하여 효율적으로 페이로드를 산출하는 방법을 제안한다.

모세관 전기영동 분석에서 계면 동전기 주입에 미치는 공존 이온의 영향 (Effect of Coexisting Ions on Electrokinetic Injection in Capillary Electrophoresis Analysis)

  • 이광우;전지영;이광필
    • 분석과학
    • /
    • 제9권1호
    • /
    • pp.35-42
    • /
    • 1996
  • 원자력 발전소의 배관 부식 등의 방지를 위하여 초순수에 첨가되는 고순도 시약 중의 미량 음이온 성분올 모세관 전기영동법에 의하여 정량하는 분석법을 개발하였다. 전해질은 5mM 크롬산염(pH=8.0)을, 캐필러리는 내경이 50 또는 $75{\mu}m$인 석영 캐필러리 내부를 염화 삼메틸 실란으로 처리하여 사용하였다. 기타 기기 조건은 전압 20kV, 검출은 254nm에서 간접 자외흡수법을 사용하였고 주요 정량 성분은 $Cl^-$, $NO{_3}^-$, $SO{_4}^{2-}$, $N{_3}^-$, $PO{_4}^{3-}$등이며, 시료 주입은 시료 농도가 1ppm 이상일 때는 유체역학적 주입법으로, 1ppm 이하는 계면 동전기 주입법을 적용하였다. 특히 본 연구에서는 시료 주입시 공존 이온의 영향을 조사한 결과 유체역학적으로 시료를 주입할 때는 시료 내 공존하는 음이온의 영향이 크게 없었으나, 계면 동전기적인 시료 주입시에는 공존하는 이온량과 전기영동적 이동도에 따라 분석 이온의 신호 크기가 크게 변함을 확인하였으며, 각 분석 성분 주입량, 즉 신호 크기는 시료 용액의 저항에 비례하였다. 따라서, 분석 이온보다 과량의 공존 이온 존재하에 계면 동전기 주입법으로 분석할 경우 시료 용액과 표준 용액의 전기 전도도 차이를 보상할 수 있는 표준물 첨가법 또는 내부 표준물법 등의 적절한 방법을 반드시 사용해야 한다.

  • PDF

Cimetidine과 위산도 변화가 $^{99m}Tc-Pertechnetate$의 흰쥐 위벽 집적에 미치는 영향 (Effect of Cimetidine and Gastric Acidity on the Gastric Mucosal Retention of $^{99m}Tc-Pertechnetate$ in Rats)

  • 김성훈;김종우;박용휘
    • 대한핵의학회지
    • /
    • 제23권1호
    • /
    • pp.41-48
    • /
    • 1989
  • $^{99m}Tc-Pertechnetate\;(TcO_4^-)$ is concentrated by the stomach after intravenous injection, allowing the detection of ectopic gastric mucosa. It has been used to develop a noninvasive test of gastric secretion. However the cellular site of concentration is still controversial, that is whether mucin-secreting epithelial cell or acid-secreting parietal cell. This study is planned to investigate the effects of cimetidine and gastric acidity on the retention of $TcO_4^-$ in the gastric wall of the rat. Also we further attempted to clarify the uptake and secreting cell of $TcO_4^-$ in the gastric mucosa. One hundred rats were divided into two groups, preliminary (40 rats) and main examination group (60 rats). Preliminary examination group was composed of fasting group (20 rats) for the detection of the time for reaching stable $TcO_4^-$ retention ratio in gastric wall and post-prandial group (20 rats) for the detection of the time for reaching the maximal gastric acidity. Main examination group was composed of fasting group (30 rats), which was subdivided into control group (10 rats), cimetidine group (10rats), $Mylanta^{(R)}$ group (10 rats) and post?prandial group (30 rats), which was subaivided into 90 min group (10 rats), 90 min cimetidine group (10 rats), and 120 min group (10 rats). Retention ratio (%) of $TcO_4$ in the gastric wall and the pH of the gastric contents were measured in the extracted stomach of the six groups. Gastric wall retention ratio of $TcO_4^-$ was calculated by the gastric wall radioactivity (cpm) divided by total gastric radioactivity (cpm) at 30 mins after intravenous injection of 0.4 mCi of $TcO_4^-$. The results were as follows: 1) The time required for reaching stable $TcO_4$ retention ratio and the lowest gastric PH were 30 min and 90 min, respectively. 2) In the fasting group, the gastric wall retention ratio of $TcO_4^-$ was significantly increased in the cimetidine group, compared with the control group (P < 0.01). However there was no significant difference between the control and $Mylanta^{(R)}$ group 3) The $TcO_4^-$ retention ratios of 90 min and 120 min groups were lower than that of the fasting control group (p < 0.05), either. After administration of cimetidine, the retention ratio was significantly increased in 90 min group (p < 0.01). 4) While $TcO_4^-$ retention ratio and gastric pH were well correlated in the post-prandial 120 min group (r=0.7112, p<0.05), in the post-prandial 90 min and 90 min cimetidine groups correlated poorly. However, there was no correlation in the three fasting groups at all. Referring the above results, we infer that $TcO_4^-$ is secreted into the gastric lumen by both parietal and non-parietal cells, with dominant non-parietal $TcO_4^-$ secretion in the fasting state and dominant parietal $TcO_4^-$ secretion in the stimulated state.

  • PDF

전기화학적 방법을 이용한 다중 효소 전극 제작 및 글루코스 검출 특성에 관한 연구 (A Study on the Detection Characteristics in Glucose and Fabrication of Bi-Enzyme Electrode using Electrochemical Method)

  • 한경호;신인성;윤도영
    • 전기화학회지
    • /
    • 제23권3호
    • /
    • pp.66-72
    • /
    • 2020
  • 본 연구에서는 글루코스 검출을 위한 HRP (horseradish peroxidase)와 GOD (glucose oxidase)를 혼합한 형태의 다중 효소 반응 바이오센서 개발연구를 수행하였다. 바이오센서는 제작 시간 단축을 위하여 전기전착법을 이용하여 제작하였으며, 경제적인 센서 제작을 위하여 SPE (screen printed electrode)를 사용하였다. 다중 효소 바이오센서의 효과를 확인하기 위하여 단일 효소 바이오센서를 제작하여 비교 및 분석하였다. 센서의 특성을 평가하기 위해서 주사전자현미경(scanning electron microscopy, SEM), 순환전위법(cyclic voltammetry, CV), 전기화학적 임피던스 분광법(electrochemical impedance spectroscopy, EIS), 시간대전류법(chronoamperometry, CA), 흐름 주입분석법(flow injection analysis, FIA)를 수행하였다. SEM, CV, EIS의 분석결과로부터 효소가 전극 표면에 고정화가 잘 된 것을 확인하였고, CA로부터 제작된 다중 효소 바이오센서가 단일 효소 바이오센서에 비해 신호성능이 200% 향상된 것을 확인하였다. 이로부터 HRP와 GOD가 서로 촉매적으로 반응한다는 것을 설명할 수 있었다. 또한, FIA의 결과에서 동일한 농도의 글루코스 용액을 4회 나누어 주입하였을 때, 전류신호량이 일정함을 확인하였고, 농도에 따른 전류신호량을 분석하여 신호민감성, 재현성, 안정성 등이 우수함을 설명할 수 있었다.

Studies on the Analysis of Benzo(a)pyrene and Its Metabolites on Biological Samples by Using High Performance Liquid Chromatography/Fluorescence Detection and Gas Chromatography/Mass Spectrometry

  • Lee, Won;Shin, Hye-Seung;Hong, Jee-Eun;Pyo, Hee-Soo;Kim, Yun-Je
    • Bulletin of the Korean Chemical Society
    • /
    • 제24권5호
    • /
    • pp.559-565
    • /
    • 2003
  • An analytical method the determination of benzo(a)pyrene (BaP) and its hydroxylated metabolites, 1-hydroxybenzo(a)pyrene (1-OHBaP), 3-hydroxybenzo(a)pyrene (3-OHBaP), benzo(a)pyrene-4,5-dihydrodiol (4,5-diolBaP) and benzo(a)pyrene-7,8-dihydrodiol (7,8-diolBaP), in rat urine and plasma has been developed by HPLC/FLD and GC/MS. The derivatization with alkyl iodide was employed to improve the resolution and the detection of two mono hydroxylated metabolites, 1-OHBaP and 3-OHBaP, in LC and GC. BaP and its four metabolites in spiked urine were successfully separated by gradient elution on reverse phase ODS $C_{18}$ column (4.6 mm I.D., 100 mm length, particle size 5 ㎛) using a binary mixture of MeOH/H₂O (85/15, v/v) as mobile phase after ethylation at 90 ℃ for 10 min. The extraction recoveries of BaP and its metabolites in spiked samples with liquid-liquid extraction, which was better than solid phase extraction, were in the range of 90.3- 101.6% in n-hexane for urine and 95.7-106.3% in acetone for plasma, respectively. The calibration curves has shown good linearity with the correlation coefficients (R²) varying from 0.992 to 1.000 for urine and from 0.996 to 1.000 for plasma, respectively. The detection limits of all analytes were obtained in the range of 0.01-0.1 ng/mL for urine and 0.1-0.4 ng/mL for plasma, respectively. The metabolites of BaP were excreted as mono hydroxy and dihydrodiol forms after intraperitoneal injection of 20 mg/kg of BaP to rats. The total amounts of BaP and four metabolites excreted in dosed rat urine were 3.79 ng over the 0-96 hr period from adminstration and the excretional recovery was less than 0.065% of the injection amounts of BaP. The proposed method was successfully applied to the determination of BaP and its hydroxylated metabolites in rat urine and plasma for the pharmacokinetic studies.

HPLC-PDA를 이용한 정향(Eugenia caryophyllata) 중의 eugenol 분석법 확립 및 검증 (Determination of eugenol in Eugenia caryophyllata by high-performance Liquid chromatography with photodiode array detection and method validation)

  • 윤형준;윤소미;이명헌;손성완
    • 대한수의학회지
    • /
    • 제48권1호
    • /
    • pp.9-16
    • /
    • 2008
  • A method for the quantification of eugenol in the medicinal herb Clove was developed and validated. For preparation of sample solutions clove was dried at $60^{\circ}C$ for 2h and ground by mixer and extracted with 95% ethanol for shaking extraction. The elutes were analyzed by HPLC system included a reversed phase column, a isocratic mobile phase of 60% methanol and PDA detector set at 280 nm. Calibration graphs were linear with very good correlation coefficients ($r^2>0.9999$) from $0.0125~1{\mu}g/ml$. The limit of detection per sample injection ($20{\mu}l$) was $0.81ng/{\mu}l$ and limit of quantification was $2.47ng/{\mu}l$. The method showed good intra-day precision (%RSD 0.08 ~ 0.27%) and inter-day precision (%RSD 0.32 ~ 1.19%).

개심술 전후 방사성 동위원소를 이용한 심기능 평가에 관한 연구 -수술전 shunt 의 진단 및 교정수술후의 성적평가에 대하여- (Evaluation of Cardiac Function Using Radioisotope before and after Open Heart Surgery -Detection of Preoperative Cardiac Shunt and Postoperative Remnant Shunt by Nuclear Angiocardiography-)

  • 서경필
    • Journal of Chest Surgery
    • /
    • 제15권2호
    • /
    • pp.194-203
    • /
    • 1982
  • In this investigation we undertook to evaluate the utility of radionuclide cardiac angiography in the detection of cardiac shunts before and after surgical correction. Time-activity curves of ventricles and lungs were evaluated after bolus intravenous injection of 99mTc-human serum albumin in 512 preoperative patients and 551 post-operative patients. Omitting 31 cases of technical failure due to poor bolus, we detected shunts in 459 cases of 481 preoperative evaluations, so the detectability was 95.4%. The cases which couldn`t be detected by this method had small amount of shunt. Also the degree of shunt detected by radioisotope methods were well correlated with oxymetry method. [r=0.89, p<0.01 ] In postoperative evaluations, 18 out of 411 patients with left to right shunt and 10 out of 140 right to left shunt were found to have remnant shunts with radionuclide cardiac angiography. Of the 28 cases with failed operation, 2 were confirmed in reoperation, 2 by cardiac catheterization, 2 by two -dimensional echocardiography. All except one .f these patients had membranous ventricular septal defects and those with left to right shunts had moderate to severe pulmonary hypertension and shunt amount. Also those had larger septal defects than control group. We consider that radionuclide cardiac angiography is a simple and noninvasive method which can show the preoperative diagnosis and postoperative follow up of cardiac shunts.

  • PDF

MSPD 전처리법과 HPLC를 이용한 Furazolidone의 계란내 잔류분석 (Matrix Solid-Phase Dispersion (MSPD) Isolation and Liquid Chromatographic Determination of Residual Furazolidone in Eggs)

  • 서계원;이재일;이채용;이정치
    • 한국식품위생안전성학회지
    • /
    • 제18권2호
    • /
    • pp.43-50
    • /
    • 2003
  • A liquid chromatographic method, using matrix solid-phase dispersion (MSPD) is developed for the extraction of residual furazolidone in chicken eggs. Blank or fortified egg samples (0.5 g) were blended with Octadecylsilyl (Bulk $C_{18}$, 40${\mu}{\textrm}{m}$, 18%. load, endcapped. 2 g) derivatized silica. After homogenization, $C_{18}$/egg and Na$_2$S $O_4$matrix were transferred to a column made of 10 ml glass syringe and filter paper and compressed 4.0∼4.5 ml volume. The column was washed with 8 ml of hexane and dried under $N_2$ gas. Furazolidone was eluted with acetonitrile (8 ml) under gravity. The eluate containing furazolidone was free from interfering compounds when analyzed by HPLC with UV detection (365 nm, photodiode array). Calibration curves were linear (r = 0.99985) and inter- (1.47%) and intra-assay (5.29%) variabilities for the concentration range examined (7.8∼497 ng/g of eggs, 20 ${mu}ell$ injection volume) were indicative of an acceptable methodology for the analysis of furazolidone. Average recovery of furazolidone added to egg was 96.2%. The limit of detection for the proposed method was 1 ng/g for furazolidone. The method using MSPD is proposed as an alternative assay to the classical method which involves the use of large volumes of a harmful solvent and requires a long tedious separation and clean-up processes prior to its determination.

LC-MS/MS를 이용한 곽향정기산(藿香正氣散) 추출물 중 20종 성분의 함량분석 (Quantitative Analysis of the Twenty Marker Components in Gwakhyangjeonggi-san using Ultra-Performance Liquid Chromatography with Mass Spectrometer)

  • 서창섭;신현규
    • 생약학회지
    • /
    • 제45권2호
    • /
    • pp.113-120
    • /
    • 2014
  • Generally, Gwakhyangjeonggi-san has been used for treatment of diarrhea-predominant irritable bowel syndrome. In this study, an ultra-performance liquid chromatography-electrospray ionization-mass spectrometer method was established for the simultaneous quantification of marker compounds 1-20 in Gwakhyangjeonggi-san water extract. All analytes were separated by gradient elution using two mobile phases on a UPLC BEH $C_{18}$ ($100{\times}2.1mm$, $1.7{\mu}m$) column and maintained at $45^{\circ}C$. The injection volume was $2.0{\mu}L$ and the flow rate was 0.3 mL/min with detection at mass spectrometer. Regression equations of the compounds 1-20 were acquired with $r^2$ values ${\geq}0.9950$. The values of limit of detection and quantification of all analytes were 0.01-2.79 ng/mL and 0.03-8.37 ng/mL, respectively. The amounts of the compounds 1-20 in Gwakhyangjeonggi-san water extract were not detected $-3,236.67{\mu}g/g$. The established LC-MS/MS methods will be valuable to improve quality control of traditional herbal formula, Gwakhyangjeonggi-san.

유사도 분석과 명암 보정을 통한 혈관 추출 (Extracting Blood Vessels through Similarity Analysis and Intensity Correction)

  • 장석우
    • 인터넷정보학회논문지
    • /
    • 제7권4호
    • /
    • pp.33-43
    • /
    • 2006
  • 본 논문에서는 조영 영상을 받아들여 관상동맥을 효과적으로 추출하는 방법을 소개한다. 혈관 추출에 일반적으로 사용되는 디지털 혈관조영술(DSA : Digital Subtraction Angiography)은 조영제 투입 전에 촬영된 마스크 영상과 조영제 투입 후의 혈관 대비가 나타나는 라이브 영상과의 차이를 이용하여 빠르게 혈관 영역만을 검출하는 방법이다. 그러나 이 방법은 배경의 움직임에 민감하고 두 영상간의 지역적인 배경 명암 분포의 변화에 따라 오 검출이 발생할 수 있다는 단점을 가진다. 따라서 본 논문에서는 배경 텍스쳐의 유사도를 분석하여 움직임의 차이가 가장 작은 영상을 선택함으로써 배경의 움직임에 기인하는 구조적인 문제를 해결하고, 선택된 영상의 지역적 명암 보정을 통해 혈관 영역만을 효과적으로 추출하는 방법을 제안한다. 실험 결과는 제안된 방법이 기존의 방법보다 오 인식률은 감소하고 정확도는 증가함을 보여준다.

  • PDF