• ETRI Journal
• /
• 제37권3호
• /
• pp.502-511
• /
• 2015

Intrusion detection plays a key role in detecting attacks over networks, and due to the increasing usage of Internet services, several security threats arise. Though an intrusion detection system (IDS) detects attacks efficiently, it also generates a large number of false alerts, which makes it difficult for a system administrator to identify attacks. This paper proposes automatic fuzzy rule generation combined with a Wiener filter to identify attacks. Further, to optimize the results, simplified swarm optimization is used. After training a large dataset, various fuzzy rules are generated automatically for testing, and a Wiener filter is used to filter out attacks that act as noisy data, which improves the accuracy of the detection. By combining automatic fuzzy rule generation with a Wiener filter, an IDS can handle intrusion detection more efficiently. Experimental results, which are based on collected live network data, are discussed and show that the proposed method provides a competitively high detection rate and a reduced false alarm rate in comparison with other existing machine learning techniques.

• 대한소아치과학회지
• /
• 제24권2호
• /
• pp.422-427
• /
• 1997

In the Pediatric Dentalc profession the occurrence rate intrusion of young permanent teeth is rather low, and the treatment method varies from one another. Intrusion of the teeth bring complications to the pulp and periodontal ligament, and thus the possibility of endodontic treatment increases. For the formation of calcific barriers, calcium hydroxide is used in young permanent teeth and this makes the final canal filling possible. In this case report, we will show two cases of young permanent teeth intrusion and the treatment methods to help assess the recognition of treatment for young permanent teeth intrusion.

• 한국정보처리학회:학술대회논문집
• /
• 한국정보처리학회 2007년도 춘계학술발표대회
• /
• pp.1093-1095
• /
• 2007

As the networking and data communication technology is making progress, there has been an augmented concern about the security. Intrusion Detection and Prevention Systems have long being providing a reliable layer in the field of Network Security. Intrusion Detection System works on analyzing the traffic and finding a known intrusion or attack pattern in that traffic. But as the new technology provides betterment for the world of the Internet; it also provides new and efficient ways for hacker to intrude in the system. Hence, these patterns on which IDS & IPS work need to be updated. For detecting the power and knowledge of attackers we sometimes make use of Honey-pots. In this paper, we propose a Honey-pot architecture that automatically updates the Intrusion's Signature Knowledge Base of the IDS in a Network.

• 정보처리학회논문지C
• /
• 제10C권3호
• /
• pp.295-304
• /
• 2003

기존의 보안관점은 악의적인 사용자의 공격이나 우발적인 사고로부터 프로그램과 데이터의 보호를 강조한다. 이를 위한 방화벽, 침입탐지시스템의 연구개발은 성숙 단계에 접어들었다. 최근들어 새롭게 대두되고 있는 침입감내 개념은 정보 생존성을 위한 마지막 방어선으로 공격이 성공하더라도 임무 수행에 필수적인 시스템의 중요 서비스를 계속 제공하기 위해 가용성과 무결성을 강조하는 개념이다. 본 논문에서는 침입감내 시스템을 프로그램 보호와 데이터 보호관점에서 분류하고 프로그램과 데이터의 침입감내 특성을 모두 지원하는 통합된 침입감내 프레임워크를 제안한다.

• 디지털콘텐츠학회 논문지
• /
• 제19권4호
• /
• pp.711-717
• /
• 2018

컴퓨터와 네트워크의 비약적인 발전은 다양한 정보 교환을 쉽게 하였다. 하지만, 그와 동시에 다양한 위험 요소를 발생시켜 악의적 목적을 가진 사용자와 그룹은 취약한 시스템을 대상으로 공격을 하고 있다. 침입탐지시스템은 네트워크 패킷 분석을 통해 악의적인 행위를 탐지한다. 하지만, 많은 양의 패킷을 짧은 시간 내에 처리해야 하는 부담이 있다. 따라서, 이 문제를 해결하기 위하여 우리는 User Level에서 동작하는 네트워크 침입탐지시스템의 탐지 성능 향상을 위해 Kernel Level에서 동작하는 시스템을 제안한다. 실제로, kernel level에서 동작하는 네트워크 침입탐지시스템을 구현함으로써 패킷 분석 및 탐지 성능을 향상함을 확인하였다.

• 한국지구과학회지
• /
• 제29권5호
• /
• pp.428-436
• /
• 2008

This study observed the upper tropospheric ozone enhancement in the northern Atlantic for the Aerosols99 campaign in January-February 1999. To find the origin of this air, we have analyzed the horizontal and vertical fields of Isentropic Potential Vorticity (IPV) and Relative Humidity (RH). The arch-shaped IPV is greater than 1.5 pvus indicating stratospheric air stretches equatorward. These arch-shaped regions are connected with regions of RH less than 20%. The vertical fields of IPV and RH show the folding layer penetrating into the upper troposphere. These features support the idea that the upper tropospheric ozone enhancement originated from the stratosphere. Additionally, we have investigated the climatological frequency of stratospheric intrusion over the tropical north Atlantic using IPV and RH. The total frequency between the equator and $30^{\circ}N$ over the tropical north Atlantic exhibits a maximum in northern winter. It suggests that the stratospheric intrusion plays an important role in enhancing ozone in the upper troposphere over the tropical north Atlantic in winter and early spring. Although the tropospheric ozone residual method assumed zonally invariant stratospheric ozone, stratospheric zonal ozone variance could be caused by stratospheric intrusions. This implies that stratospheric intrusion influences ozone variance over the Atlantic in boreal winter and spring, and the intrusion is a possible source for the tropical north Atlantic paradox.

• Journal of Computing Science and Engineering
• /
• 제7권4호
• /
• pp.242-250
• /
• 2013

Many information systems that provide useful services to people are connected to the Internet for convenience and efficiency. However, improper accessibility might make the systems susceptible to a variety of attacks. Although existing security solutions such as an intrusion detection system, intrusion prevention system, and firewalls have been designed to protect against such attacks, it is impossible to block all kinds of attacks. Furthermore, most of the proposed solutions require information about attacks for efficient prevention. Research on intrusion-tolerant systems (ITSs) have been conducted in order to continue providing proper services in threatening environments. The purpose of an ITS is to survive against every intrusion, rather than to prevent them. In this paper, previous studies on ITS are introduced and classified according to the centric scheme as middleware-based ITS, hardware-based ITS, and recovery-based ITS. Recent research focusing on adaptive transformation schemes is also introduced.

• 한국산학기술학회논문지
• /
• 제11권4호
• /
• pp.1449-1457
• /
• 2010

침입방지시스템 솔루션은 차세대에 각광받는 보안시스템으로 국내 외 시장에서 매우 활발한 보안 분야 시장을 형성할 것으로 전망된다. 아울러 국제 시장에 진출하고자 하는 국내 업체들은 검증된 제품임을 증명하는 품질 평가를 요구하고 있으며, 일반 사용자들도 검증된 제품을 선호하고 있다. 본 연구에서는 침입방지시스템 솔루션이 갖추어야할 보안성 품질평가 항목을 도출하여 분석을 통해서 품질평가항목을 세분화하고 침입방지시스템에 대한 보안성 품질평가 모델을 구축하였다. 도출된 품질평가 모델은 침입방지 시스템의 품질을 평가하고 향상시키는데 중요한 역할을 하게 된다.

• Journal of information and communication convergence engineering
• /
• 제7권1호
• /
• pp.7-12
• /
• 2009

The advanced computer network and Internet technology enables connectivity of computers through an open network environment. Despite the growing numbers of security threats to networks, most intrusion detection identifies security attacks mainly by detecting misuse using a set of rules based on past hacking patterns. This pattern matching has a high rate of false positives and can not detect new hacking patterns, making it vulnerable to previously unidentified attack patterns and variations in attack and increasing false negatives. Intrusion detection and prevention technologies are thus required. We proposed a network based hybrid Probe Intrusion Detection model using Fuzzy cognitive maps (PIDuF) that detects intrusion by DoS (DDoS and PDoS) attack detection using packet analysis. A DoS attack typically appears as a probe and SYN flooding attack. SYN flooding using FCM model captures and analyzes packet information to detect SYN flooding attacks. Using the result of decision module analysis, which used FCM, the decision module measures the degree of danger of the DoS and trains the response module to deal with attacks. For the performance evaluation, the "IDS Evaluation Data Set" created by MIT was used. From the simulation we obtained the max-average true positive rate of 97.064% and the max-average false negative rate of 2.936%. The true positive error rate of the PIDuF is similar to that of Bernhard's true positive error rate.

• 설비공학논문집
• /
• 제28권11호
• /
• pp.444-449
• /
• 2016

The main objective of this work is to experimentally investigate the effect of angle variation and intrusion depth of channels on the distribution of two-phase flow at header-channel junctions. The dimensions of the header and the channels in cross-section were fixed at $16mm{\times}16mm$ and $12mm{\times}1.8mm$, respectively. Air and water were used as the test fluids. Two different header-channel positions were tested : a vertical header with horizontal channels (case VM-HC) and a horizontal header with horizontal channels (case HM-HC). In all cases, the intrusion depths of the channels are 0 mm, 2 mm, and 4 mm. For the case of the intrusion depth of VM-HC, the flow distribution became more uniform. However, the intrusion depth negatively affected the flow distribution for the case of HM-HC because liquid separation delay occurred.