• International journal of advanced smart convergence
• /
• 제10권4호
• /
• pp.22-29
• /
• 2021

For web application vulnerability diagnosis, from the development stage to the operation stage, it is possible to stably operate the web only when there is a policy that is commonly applied to each task through diagnosis of vulnerabilities, removal of vulnerabilities, and rapid recovery from web page damage. KISA presents 28 evaluation items for technical vulnerability analysis of major information and communication infrastructure. In this paper, we diagnose the vulnerabilities in the automobile goods shopping mall website and suggest security measures according to the vulnerabilities. As a result of diagnosing 28 items, major vulnerabilities were found in three items: cross-site scripting, cross-site request tampering, and insufficient session expiration. Cookie values were exposed on the bulletin board, and personal information was exposed in the parameter values related to passwords when personal information was edited. Also, since the session end time is not set, it was confirmed that session reuse is always possible. By suggesting security measures according to these vulnerabilities, the discovered security threats were eliminated, and it was possible to prevent breaches in web applications and secure the stability of web services.

• 한국직업건강간호학회지
• /
• 제8권1호
• /
• pp.68-83
• /
• 1999

Occupational health nursing (OH N) guide book has been perceived as necessary since group occupational health services started. This study aimed to develop the guidebook for occupational health nurses working in small-scale enterprises(SSE). The guide area of nursing services was selected in 10 categories. These areas were 4 Workplace attitude for occupational health nursing', 'Nursing process', 'Workplace environmental monitoring', 'Personal protective devices', 'Record', 'Health counselling', 'Communication', 'Health education', 'Health screening' and 'Health promotion'. The content was mainly constructed with literature review. The pretest was done to find out what OH nurses do feel about their OH nursing services. Figures were used to guide some occupational health nursing services (OHNS). The further research was expected to develop in more extensive depth and quality.

• 한국정보통신학회논문지
• /
• 제19권2호
• /
• pp.422-427
• /
• 2015

의료 패러다임이 과거 치료 중심에서 예방 및 건강 관리중심으로 전환되면서 IT융합 의료서비스에 대한 요구가 증가하였고, 헬스케어서비스는 현재 급속히 보급되고 있는 스마트 기기를 바탕으로 수요자들의 일상생활에 매우 밀접하게 접근하여 자신의 의료, 건강, 그리고 복지 등을 복합적으로 관리 할 수 있는 스마트 헬스케어서비스가 대두되고 있다. 따라서 본 논문에서는 다양한 개인 건강기기의 데이터를 이용한 상호 운용성을 확보하기 위해 각 시스템 구성요소 간에 IEEE 11073 PHD(Personal Health Devices), HL7(Health Level 7) 등의 표준을 통하여 스마트 TV 환경에 따른 헬스케어서비스를 제공하기 위해 통합 게이트웨이를 설계하고 이를 기반으로 홈 헬스케어시스템을 구현하였다.

• 한국IT서비스학회지
• /
• 제22권3호
• /
• pp.29-47
• /
• 2023

With the recent advancement of information and communication technologies such as artificial intelligence, big data, cloud computing, and 5G, data is being produced and digitized in unprecedented amounts. As a result, data has emerged as a critical resource for the future economy, and overseas countries have been revising laws for data protection and utilization. In Korea, the 'Data 3 Act' was revised in 2020 to introduce institutional measures that classify personal information, pseudonymized information, and anonymous information for research, statistics, and preservation of public records. Among them, it is expected to increase the added value of data by combining pseudonymized personal information, and to this end, "the Expert Data Combination Agency" and "the Expert Data Agency" (hereinafter referred to as the Expert Data Processing Agency) system were introduced. In comparison to these domestic systems, we would like to analyze similar overseas systems, and it was recently confirmed that the Vermont government in the United States enacted the first "Data Broker Act" in the United States as a measure to protect personal information held by data brokers. In this study, we aim to compare and analyze the roles and functions of the "Expert Data Processing Agency" and "Data Broker," and to identify differences in designated standards, security measures, etc., in order to present ways to contribute to the activation of the data economy and enhance information protection.

• 융합정보논문지
• /
• 제9권7호
• /
• pp.100-105
• /
• 2019

IoT 기술 발달로 인해 초연결사회가 되면서 다양한 사용자 맞춤 서비스가 요구된다. 맞춤 서비스로 활용되는 차세대 디스플레이인 스마트 미러를 멀티미디어 기기에 접근하여 다양한 서비스를 제공함으로 정보가 필요한 성인 뿐만 아니라 어린아이의 사회학습 도우미 및 노인의 생활 도우미 역할이 가능하다. 개인별로 차별화된 서비스를 위해서는 스마트 미러가 사용자를 식별하는 것이 가능해야 한다. 스마트 미러는 누구나 쉽게 접근 가능한 기기이므로 스마트 미러에 저장된 개인의 패턴이나 습관 등의 정보가 외부로 노출될 가능성이 있다. 사적 공간의 스마트 미러에 저장된 개인의 일정이나 약속 등 개인의 위치정보 유출 가능성이 있고, 개인 사진을 통해 건강상태를 확인할 수 있어 이를 통한 프라이버시 침해 가능성도 존재한다. 본 연구는 사용자가 얼굴 등의 생체정보를 등록하여 사용자를 식별하고 사용자 인증 후 개인에 맞는 서비스를 제공하고, 인증이 되지 않는 사용자에게는 최소한의 정보와 서비스만 제공하는 시스템을 제안한다.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• 제12권4호
• /
• pp.1832-1853
• /
• 2018

The personal health record (PHR) system is a promising application that provides precise information and customized services for health care. To flexibly protect sensitive data, attribute-based encryption has been widely applied for PHR access control. However, escrow, exposure and abuse of private keys still hinder its practical application in the PHR system. In this paper, we propose a coordinated ciphertext policy attribute-based access control with user accountability (CCP-ABAC-UA) for the PHR system. Its coordinated mechanism not only effectively prevents the escrow and exposure of private keys but also accurately detects whether key abuse is taking place and identifies the traitor. We claim that CCP-ABAC-UA is a user-side lightweight scheme. Especially for PHR receivers, no bilinear pairing computation is needed to access health records, so the practical mobile PHR system can be realized. By introducing a novel provably secure construction, we prove that it is secure against selectively chosen plaintext attacks. The analysis indicates that CCP-ABAC-UA achieves better performance in terms of security and user-side computational efficiency for a PHR system.

• 디지털융복합연구
• /
• 제12권2호
• /
• pp.549-554
• /
• 2014

IT와 융합한 지능형 자동차에 대한 연구가 현재 활발히 진행중이다. 안전한 지능형 자동차 서비스를 위해 다양한 통신 기술이 제공이 되고 있다. 지능형 자동차가 통신기술을 이용한 서비스가 제공되면서 다양한 보안위협 요소가 도출되고 있다. 지능형 자동차에서 보안 인증 솔루션을 위해서는 소유권, 지식, 생체정보를 포함하고 있어야 한다. 본 논문에서는 지능형 자동차의 보안위협 요소를 분석하고 지능형 자동차의 보안 솔루션인 생체정보를 이용한 인증 기법을 제공한다. 기존의 지능형 자동차 인증보안 솔루션보다 높은 보안성을 갖는 구현의 문제점이 해결되도록 사용자 생체인증기법을 제안한다.

• 아동학회지
• /
• 제37권3호
• /
• pp.83-93
• /
• 2016

Objective: This study examined that general characteristics such as gender, age, period of stay at an institution, size of facility, and temperament and attachment affect young children's development under institutional care. Methods: A total of 94 young children (ages 2-4years), who live in 32 institutions in Seoul were assessed on their development using the Korean-Age & Stage Questionnaire. Pearson productmoment correlation analysis, and multiple regression analyses were used for data analysis. Results: The major findings of this study were as follows: first, a longer period of stay at an institution had more positive effects on the development of communication. Facilities with more than 60 children had lower communication, gross motor, and fine motor development compared to facilities with less than 60 children. Second, social temperament had positive effects on communication, problem solving, and personal-social development. Emotional temperament had no effects on all development areas. Third, attachment had positive effects on all development areas. Lastly, social temperament and attachment had interactive effects on communication, gross motor, problem solving, and personal-social development. Conclusion: These results imply that caretakers in institutions should give developmental mediation services for considering temperament and facilitation of attachment.

• 한국정보과학회논문지:컴퓨팅의 실제 및 레터
• /
• 제6권3호
• /
• pp.299-310
• /
• 2000

비디오 정보를 사용자에게 서비스하기 위해서는 기존의 범용 파일 서버와는 다른 새로운 개념의 서버가 요구된다. 본 논문에서는 실시간 재생 서비스를 제공하는 개인용 VOD(Video-On-Demand) 서버를 설계하고 이를 Windows NT환경에서 구현하였음을 보인다. 제안하는 개인용 VOD 시스템은 VCR(Video Cassette Recorder) 연산의 지연시간, 사용자 접속 승인 지연시간을 줄였으며 빠른 VCR 연산으로 VOD 시스템에 접속하는 사용자에게 좀더 빠른 데이타를 전송할 수 있도록 하였다. 또한 사용자들의 접속을 원활히 하기 위하여 대화 형태의 인터페이스를 제공한다.

• International Journal of Internet, Broadcasting and Communication
• /
• 제12권1호
• /
• pp.55-60
• /
• 2020

Adaptive recommendation systems have been developed with big data processing as a system that provides services tailored to users based on user information and usage patterns. Deep learning can be used in these adaptive recommendation systems to handle big data, providing more efficient user-friendly recommendation services. In this paper, we propose a system that uses deep learning to categorize and recommend tourism types to suit the user's personality. The system was divided into three layers according to its core role to increase efficiency and facilitate maintenance. Each layer consists of the Service Provisioning Layer that real users encounter, the Recommendation Service Layer, which provides recommended services based on user information entered, and the Adaptive Definition Layer, which learns the types of tourism suitable for personality types. The proposed system is highly scalable because it provides services using deep learning, and the adaptive recommendation system connects the user's personality type and tourism type to deliver the data to the user in a flexible manner.