• 제목/요약/키워드: security technology

검색결과 6,570건 처리시간 0.039초

저장장치시스템의 취약성 분석 및 연구 (Vulnerability Analysis and Research on Storage System)

  • 김훈;윤희용;최성춘;이보경;최중섭;김홍근
    • 한국정보처리학회:학술대회논문집
    • /
    • 한국정보처리학회 2002년도 추계학술발표논문집 (중)
    • /
    • pp.1047-1050
    • /
    • 2002
  • 컴퓨터 네트워크 기술의 급속한 발전은 네트워크를 이용한 전자상거래와 전자금융 같은 서비스를 다양하게 발전시켰고, 이로 인하여 발생되는 데이터의 양은 기하급수적으로 증가하고 있다. 이에 따라 폭발적으로 증가하는 데이터를 효율적으로 저장하고 관리할 수 있는 저장장치시스템의 중요성이 극대화되고 있으며, 다양한 취약성을 극복할 수 있는 보다 안전한 저장장치시스템이 요구되고 있다. 따라서 본 논문에서는 데이터가 오용, 남용, 변형, 유출, 그리고 손상될 수 있는 저장장치시스템의 다양한 취약성에 대하여 분석하고, 발생 가능한 취약성들을 해결할 수 있는 침입감내 및 복구 시스템에 대하여 연구한다.

  • PDF

블록체인 기술 및 보안 위협 분석 (Analysis of Technology and Security Threats on Blockchain)

  • 전은아;이철희
    • 디지털산업정보학회논문지
    • /
    • 제14권4호
    • /
    • pp.47-56
    • /
    • 2018
  • We analyzed security threats and suggested countermeasures about the block chain technologies which has emerged as a core technology of the fourth industrial revolution. We know that increasing the security leads to slow down program processing rate in the block chain systems. The block chain system which is currently an early stage of technological development, to become an economic and social infrastructure, development of technology and active policy implementation will be necessary. We studied on the security threats and countermeasures of the Bit Coin based on block chain. Further research should be undertaken on the possibility that future studies could have a real adverse effect on the integrity of the data.

Addressing Emerging Threats: An Analysis of AI Adversarial Attacks and Security Implications

  • HoonJae Lee;ByungGook Lee
    • International journal of advanced smart convergence
    • /
    • 제13권2호
    • /
    • pp.69-79
    • /
    • 2024
  • AI technology is a central focus of the 4th Industrial Revolution. However, compared to some existing non-artificial intelligence technologies, new AI adversarial attacks have become possible in learning data management, input data management, and other areas. These attacks, which exploit weaknesses in AI encryption technology, are not only emerging as social issues but are also expected to have a significant negative impact on existing IT and convergence industries. This paper examines various cases of AI adversarial attacks developed recently, categorizes them into five groups, and provides a foundational document for developing security guidelines to verify their safety. The findings of this study confirm AI adversarial attacks that can be applied to various types of cryptographic modules (such as hardware cryptographic modules, software cryptographic modules, firmware cryptographic modules, hybrid software cryptographic modules, hybrid firmware cryptographic modules, etc.) incorporating AI technology. The aim is to offer a foundational document for the development of standardized protocols, believed to play a crucial role in rejuvenating the information security industry in the future.

Consequence-based security for microreactors

  • Emile Gateau;Neil Todreas;Jacopo Buongiorno
    • Nuclear Engineering and Technology
    • /
    • 제56권3호
    • /
    • pp.1108-1115
    • /
    • 2024
  • Assuring physical security for Micro Modular Reactors (MMRs) will be key to their licensing. Economic constraints however require changes in how the security objectives are achieved for MMRs. A promising new approach is the so-called performance based (PB) approach wherein the regulator formally sets general security objectives and leaves it to the licensee to set their own specific acceptance criteria to meet those objectives. To implement the PB approach for MMRs, one performs a consequence-based analysis (CBA) whose objective is to study hypothetical malicious attacks on the facility, assuming that intruders take control of the facility and perform any technically possible action within a limited time before an offsite security force can respond. The scenario leading to the most severe radiological consequences is selected and studied to estimate the limiting impact on public health. The CBA estimates the total amount of radionuclides that would be released to the atmosphere in this hypothetical scenario to determine the total radiation dose to which the public would be exposed. The predicted radiation exposure dose is then compared to the regulatory dose limit for the site. This paper describes application of the CBA to four different MMRs technologies.

사물인터넷 보안 기술 분석 (Analysis of Security Technology for Internet of things)

  • 이호태
    • 한국인터넷방송통신학회논문지
    • /
    • 제17권4호
    • /
    • pp.43-48
    • /
    • 2017
  • 현대 사회는 정보통신기술(ICT)의 발달로 제4차 산업혁명이 가져오는 지능정보사회에 다가가고 있다. 우리 주변의 사람과 사물, 사물과 사물 등은 사물인터넷 기술의 발달로 공간에 제약을 받지 않고 네트워크로 연결되어 빅데이터가 산출되고 서로 정보를 송 수신 할 수 있게 되었다. 그러나 단말기 분실 및 물리적 파괴, 무선신호 교란 정보유출, 데이터 위 변조, 서비스 거부 등 기존의 통신환경에서 생성되는 위협들은 정보보안의 3대 요소인 기밀성, 무결성, 가용성을 침해하여 사물인터넷의 보안을 위협할 수 있다. 이런 위협에 대비하여 사물인터넷에 대한 보안과 정보유출 등의 정보보호 기술을 강화해야 한다. 본 논문에서는 사물인터넷의 구성과 활용 분야를 알아보고 각기 다른 구성요소에서 나타나는 보안 취약점이 발생할 때 대응할 수 있는 사물인터넷 보안기술을 센서와 디바이스, 네트워크와 서버, 플랫폼과 앱의 3가지 구성으로 나누어 안전성 확보를 위한 보안 기술을 분석하였다.

기술수용모형을 이용한 인터넷 뱅킹과 모바일 뱅킹 이용의 차이에 관한 연구 (A Study of Comparison between Internet Banking and Mobile Banking by Extending the TAM)

  • 이동현;곽수환;황규승
    • 기술혁신연구
    • /
    • 제14권1호
    • /
    • pp.201-225
    • /
    • 2006
  • Technology Acceptance Model (TAM) considers perceived ease of use and perceived usefulness as the important determinants of user behavior regarding information technology. As an extension of TAM, this research examines perceived security as an additional determining variable to explain an individual's acceptance and use of mobile banking as well as internet banking. The results show that perceived ease of use does not affect the individual's attitude toward the use of mobile or internet banking, while perceived usefulness does. Furthermore, perceived security affects perceived usefulness in mobile banking, but not in internet banking. In addition, in mobile banking, perceived security is positively related to perceived usefulness, though perceived security is negatively related to attitude. Finally, the average scores of surveyed data for Internet banking are higher and significantly different than those for mobile banking.

  • PDF

QSS 해석 기법을 이용한 Voltage Security Assessment(VSA) 프로그램 기반설계 (Framework Design of Voltage Security Assessment(VSA) using QSS Analysis method)

  • 허진;이상호;김태현;문영환
    • 대한전기학회:학술대회논문집
    • /
    • 대한전기학회 2005년도 제36회 하계학술대회 논문집 A
    • /
    • pp.12-14
    • /
    • 2005
  • Security problem has been a fundamental issue in the operation and planning of power system. Voltage instability is widely recognized as an important issue of power system blackout. As far as real-time operation is concerned, there is a need for appropriate tools to identify dangerous contingencies, assess security margins and suggest corrective actions. In this paper, we propose the framework design of Voltage Security Assessment(VSA) using QSS(Quasi Steady-State) analysis method in order to implement fast time domain simulation engine as a major part of VSA.

  • PDF

An Approach for Security Problems in Visual Surveillance Systems by Combining Multiple Sensors and Obstacle Detection

  • Teng, Zhu;Liu, Feng;Zhang, Baopeng;Kang, Dong-Joong
    • Journal of Electrical Engineering and Technology
    • /
    • 제10권3호
    • /
    • pp.1284-1292
    • /
    • 2015
  • As visual surveillance systems become more and more common in human lives, approaches based on these systems to solve security problems in practice are boosted, especially in railway applications. In this paper, we first propose a robust snag detection algorithm and then present a railway security system by using a combination of multiple sensors and the vision based snag detection algorithm. The system aims safety at several repeatedly occurred situations including slope protection, inspection of the falling-object from bridges, and the detection of snags and foreign objects on the rail. Experiments demonstrate that the snag detection is relatively robust and the system could guarantee the security of the railway through these real-time protections and detections.

보안구역 위치정보 관리를 통한 ECM기반 전자문서유출방지 시스템 구현방안 연구 (A Study on Implementation Method of ECM-based Electronic Document Leakage Prevention System through Security Area Location Information Management)

  • 유갑상;조승연;황인태
    • 한국IT서비스학회지
    • /
    • 제19권2호
    • /
    • pp.83-92
    • /
    • 2020
  • The current technology drain at small and medium-sized enterprises in Korea is very serious. According to the National Intelligence Service's survey data, 69 percent of technology leaks are made through employees of small and medium-sized enterprises. A document security system was introduced to compensate for the problem. However, small and medium-sized enterprises are not doing well due to their poor environment. Therefore, it proposes a document security system suitable for small businesses by developing a location information machine learning system that automatically creates a document security Green Zone through learning, and an ECM-based electronic document leakage prevention system that manages generated Green Zone information by reflecting it into the document authority system. And step by step, propose a universal solution through cloud services..

SDP 환경에서 SVDD 기반 이상행위 탐지 기술을 이용한 디바이스 유효성 검증 방안 (A Method of Device Validation Using SVDD-Based Anormaly Detection Technology in SDP Environment)

  • 이희웅;홍도원;남기효
    • 정보보호학회논문지
    • /
    • 제31권6호
    • /
    • pp.1181-1191
    • /
    • 2021
  • 팬데믹 현상은 원격으로 문제를 해결할 수 있는 비대면 환경을 빠르게 발전시켰다. 하지만 급작스러운 비대면 환경으로 전환은 다양한 부분에서 새로운 보안 이슈들을 발생시켰다. 새로운 보안 이슈들 중 하나가 내부자에 의한 보안 위협이었고 이를 방어하기 위한 기술로 제로 트러스트 보안 모델이 다시 주목받게 되었다. SDP(Software Defined Perimeter) 기술은 다양한 보안 요소로 이루어져 있는데 이 중 디바이스 유효성 검증이라는 기술이 내부자의 사용 행위를 모니터링 하여 제로 트러스트 보안 모델을 실현할 수 있는 기술이다. 하지만 현재 SDP 명세서에는 디바이스 유효성 검증을 수행할 수 있는 기술이 제시되어 있지 않다. 따라서 본 논문에서는 SDP 환경에서 사용자 행위 모니터링을 통한 SVDD 기반 이상행위 탐지 기술을 이용해 디바이스 유효성 검증 기술을 제안하고 성능 평가를 진행하여 SDP 환경의 디바이스 유효성 검증 기술을 수행할 수 있는 방안을 제시한다.