• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.28 no.3
• /
• pp.591-603
• /
• 2018

Windows Event Log is a format that records system log in Windows operating system and methodically manages information about system operation. An event can be caused by system itself or by user's specific actions, and some event logs can be used for corporate security audits, malware detection and so on. In this paper, we choose actions related to corporate security audit and malware detection (External storage connection, Application install, Shared folder usage, Printer usage, Remote connection/disconnection, File/Registry manipulation, Process creation, DNS query, Windows service, PC startup/shutdown, Log on/off, Power saving mode, Network connection/disconnection, Event log deletion and System time change), which can be detected through event log analysis and classify event IDs that occur in each situation. Also, the existing event log tools only include functions related to the EVTX file parse and it is difficult to track user's behavior when used in a forensic investigation. So we implemented new analysis tool in this study which parses EVTX files and user behaviors.

• Transactions of the Korean Society of Mechanical Engineers A
• /
• v.21 no.11
• /
• pp.1950-1956
• /
• 1997

An engineering goal in vibration and noise professionals is to develope quiet machines at the preliminary design stage, and various numerical techniques such as FEM, SEA or BEM are one of the schemes toward the goal. In this paper, the research has been focused on the sensitivity effect of mesh sizes for FEM application so that the optimum size of the mesh that leads to engineering solution within acceptable computing time could be generated. In order to evaluate the mesh size effect, three important parameters have been examined : natural frequencies, number of modes and driving point mobility. First, several lower modes including the fundamental frequency of a 2-D plate structure have been calculated as mesh size changes. Since theoretical values of natural frequencies for a simple structure are known, the deviation between the numerical and theoretical values is obtained as a function of mesh size. The result shows that the error is no longer decreased if the mesh size becomes a quarter wavelength or smaller than that. Second, the mesh size effect is also investigated for the number of modes. For the frequency band up to 1.4 kHz, the structure should have 38 modes in total. As the mesh size reaches to the quarter wavelength, the total count in modes approaches to the same values. Third, a mobility function at the driving point is compared between SEA and FEM result. In SEA application, the mobility function is determined by the modal density and the mass of the structure. It is independent of excitation frequencies. When the mobility function is calculated from a wavelength to one-tenth of it, the mobility becomes constant if the mesh becomes a quarter wavelength or smaller. We can conclude that dynamic parameters, such as eigenvalues, mode count, and mobility function, can be correctly estimated, while saving the computing burden, if a quarter wavelength (.lambda./4) mesh is used. Therefore, (.lambda./4) mesh is recommended in structural vibration analysis.

• Journal of KIISE:Information Networking
• /
• v.33 no.5
• /
• pp.355-368
• /
• 2006

This paper introduces a new split-TCP approach for improving TCP performance over IEEE 802.11-based wireless LANs. TCP over wireless LANs differently from wired networks is not aggressive, which is a fundamental reason for poor performance. Therefore, we propose TAS (TCP-Aware Sub-layer) to migigate this problem. Our scheme extends the split-connection approach that divides a connection into two different connections at a split point such as an access point (AP). Using TAS, a wireless node emulates TCP ACK packets using MAC ACK frames, instead of receiving real TCP ACK packets. We compared TAS with both normal TCP and I-TCP (Indirect TCP) by NS2 simulation. Results show that TAS achieves higher throughput, more fair resource allocation and, in power-saving mode, shorter delays.

• Journal of the Institute of Electronics Engineers of Korea SD
• /
• v.47 no.2
• /
• pp.68-76
• /
• 2010

Touch-enabled technology is increasingly being accepted as a main communication interface between human and computers. However, conventional touchscreen technologies, such as resistive overlay, capacitive overlay, and SAW(Surface Acoustic Wave), are not cost-effective for large screens. As an alternative to the conventional methods, we introduce a newly emerging method, an optical imaging touchscreen which is much simpler and more cost-effective. Despite its attractive benefits, optical imaging touchscreen has to overcome some problems, such as heavy computational complexity, intermittent ghost points, and over-sensitivity, to be commercially used. Therefore, we designed a hardware controller for signal processing and multi-coordinate computation, and proposed Infrared-blocked DA(Dark Area) manipulation as a solution. While the entire optical touch control took 34ms with a 32-bit microprocessor, the designed hardware controller can manage 2 valid coordinates at 200fps and also reduce energy consumption of infrared diodes from 1.8Wh to 0.0072Wh.

• Clean Technology
• /
• v.16 no.2
• /
• pp.88-94
• /
• 2010

The physiological roles of various wavelength of light emitting diode (LED) on ‘Hayward’ kiwifruit experiencing after-ripening were investigated. Various wavelengths from LED light source were irradiated on kiwifruits kept in plastic bags or under open air at $25^{\circ}C$. During two weeks of storage, firmness of Hayward kiwifruits was decreased by $25^{\circ}C$ treatment than by $4^{\circ}C$ treatment. In the $25^{\circ}C$ storage condition, the firmness of kiwifruits was decreased by the treatment of 380 nm UV and 470nm white LED light source. Sweetness of kiwifruits treated with 380 nm UV LED and dark condition at $25^{\circ}C$ increased higher than $15^{\circ}$Brix. The acidity of kiwifruits under open air was decreased 52% by incubating at $25^{\circ}C$ with 660 nm red LED treatment. The acidity of kiwifruits in plastic bags was decreased 52.6, 55.6, 52.8% by the treatment of 440 nm blue, 470 nm white and 660 nm red LED light source, respectively, compared to that of kiwifruits incubated in darkness at $25^{\circ}C$. Decreased acidity irradiated by 660 nm red LED light source can be applied for regulating periods of the kiwifruit after-ripening process. LED light sources emit very narrow wavelength with a power-saving mode, therefore, the usage of these LED light source for regulating the after-ripening process can be classified as a clean biotechnology producing safe and environment-friendly kiwifruits.