• KIPS Transactions on Software and Data Engineering
• /
• v.5 no.3
• /
• pp.139-144
• /
• 2016

When, Software is developed, Applying development methods considering security, it is generated the problem of additional cost. These additional costs are caused not consider security in many developing organization. Even though, proceeding the developments, considering security, lack of ways to get the cost of handling the vulnerability throughput within the given cost. In this paper, propose a method for calculating the vulnerability throughput for using a security vulnerability processed cost-effectively. In the proposed method focuses on the implementation phase of the software development phase, leveraging static analysis tools to find security vulnerabilities in CWE TOP25. The found vulnerabilities are define risk, transaction costs, risk costs and defines the processing priority. utilizing the information in the CWE, Calculating a consumed cost in a detected vulnerability processed through a defined priority, and controls the vulnerability throughput in the input cost. When applying the method, it is expected to handle the maximum risk of vulnerability in the input cost.

• Transactions of the Korean Society of Machine Tool Engineers
• /
• v.16 no.6
• /
• pp.217-222
• /
• 2007

This paper describes a static gait generation process and a mechanical design process of leg mechanisms for quadruped robots. Actually robot walking is realized with the joint motion of leg mechanisms. In order to calculate the time-angle trajectories for each joint of leg mechanisms, we generate end-tip trajectories with time for each leg in the global inertial coordinate system intuitively, followed by coordinate transformations of the trajectories into the local coordinates system fixed in each leg, finally the angle-time trajectories of each joint of leg mechanisms are obtained with inverse kinematics. The stability of the gait generated in this paper was verified by a multi-body dynamic analysis using the commercial software $ADAMS^{(R)}$. Additionally the mechanical specifications such as gear reduction ratio, electrical specifications of motor and electrical power consumption during walking have been confirmed by the multi-body dynamic analysis. Finally we constructed a small quadruped robot and confirmed the gait.

• Journal of the Korea Society of Computer and Information
• /
• v.10 no.3 s.35
• /
• pp.75-88
• /
• 2005

This paper proposes a method to ensure security attacks caused by insertion of malicious codes in a real-time control system that can be accessed through networks. The proposed technique is for dynamically upgradable real-time software through networks and based on a static program analysis technique to detect the malicious uses of memory access statements. Validation results are shown using a remotely upgradable real-time control system equipped with a modified compiler where the proposed security technique is applied.

• Journal of the Korean Society for Precision Engineering
• /
• v.26 no.3
• /
• pp.129-136
• /
• 2009

The estimation of muscle force is important to understand the roles of the muscles. The static optimization method can be used to figure out the individual muscle forces. However, muscle forces during the movement including muscle co-contraction cannot be considered by the static optimization. In this study, a hybrid static optimization method was introduced to find the well-matched muscle forces with EMG signals under muscle co-contraction conditions. To validate the developed algorithm, the 3D motion analysis and its corresponding inverse dynamics using the musculoskeletal modeling software (SIMM) were performed on heel-rise movements. Results showed that the developed algorithm could estimate the acceptable muscle forces during heel-rise movement. These results imply that a hybrid numerical approach is very useful to obtain the reasonable muscle forces under muscle co-contraction conditions.

• Journal of Energy Engineering
• /
• v.8 no.2
• /
• pp.213-223
• /
• 1999

In recently, the safety system software of the nuclear power plant has been verified and validated according to ANSI/IEEE-ANS-7-4.3.2-1982 to improve the reliability. This standard requires that safety-related software should be tested in the static and dynamic environments. In case of Inadequate Core Cooling Monitoring System (ICCMS), the static test procedure and related techniques are developed but the dynamic test procedure and related techniques are not developed. Therefore, this paper discusses the undeveloped techniques, and suggests the dynamic test procedure and the program for generation of test input data. The performance of the program was identified using accident analysis report of Ulchin 3&4 Final Safety Analysis Report (FSAR).

• Journal of Fisheries and Marine Sciences Education
• /
• v.24 no.5
• /
• pp.699-711
• /
• 2012

An undergraduate course named computational structural analysis becomes more significant in recent years because of its important role in industries and the recent innovation in computer technology. Typically, the course consists of introduction to finite element method, utilization of general purpose finite element software, and examples focusing on static and linear analyses on various structural members such as a beam, truss, frame, arch, and cable. However, in addition to the static and linear analyses, current industries ask graduates to acquire basic knowledge on structural dynamics and nonlinear analysis, which are not listed in the conventional syllabus of the computational structural analysis. Therefore, this study develops geometrically nonlinear examples, which can help students to easily capture the fundamental nonlinear theory, software manipulation, and problem solving skills. For the purpose, five different examples are found, developed for the analyses of cables and cable nets, which naturally have strong geometrical non-linearity. In the paper, these examples are presented, discussed, and finally compared for a better subject development.

• Steel and Composite Structures
• /
• v.6 no.5
• /
• pp.417-433
• /
• 2006

In this paper, a non-linear structural analysis software with pro-processing and post-recessing function is proposed by the author. The software incorporating the functions of the structural analysis and geometrical design of Tensegrity structures. Using this software, Cable Dome is analyzed as a prototype, a comprehensive study on the structural behavior of Tensegrity domes is presented in detail. Design methods of Tensegrity domes were proposed. Based on the analysis, optimizing design was performed. Several new Tensegrity domes with different geometrical design scheme are proposed, the structural analysis of the new schemes is also conducted. The analysis result shows that the proposed new forms of the Tensegrity domes are reasonable for practical applications.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.27 no.10C
• /
• pp.887-901
• /
• 2002

Software management model divided into the software project model and design estimation model, software matrices model, reliability growth model, process improvement model(or process maturity model) etc. Among these software management models, software complexity model make an estimated of the product software. For a practice of software managed, need to guideline of the static analysis of software. Especially, Software complexity model introduced for the estimation of software quantity and program complexity. In case of measurement the software matrices, its need for us to analysis of software quality and products. On the other hand, we known that complexity program include many defects and consuming of source cost. So, we apply to complexity model using of the program complexity, control structure and volume matrices, interface metrics, process complexity metrics method. In this paper, we represent that the analysis of fault data detected during the system test. Also, we analysis of program control structure and interface, volume matrices in various aspect of switching software. Others, their results utilized similar of project and system development.

• Journal of Aerospace System Engineering
• /
• v.16 no.2
• /
• pp.13-24
• /
• 2022

As the scale of airborne system software increases, the use of OOT (Object-Oriented Technology) is increasing for functional expansion, efficient development, and code reuse, but the verification method for airborne object-oriented software is conducted from the perspective of the existing procedure-oriented program. The purpose of this paper was to analyze the characteristics of OOT and the vulnerabilities derived from the functional characteristics of OOT, and present a verification method applicable to each software development process (Design, Coding and Testing) to ensure the functional safety integrity of aviation software to which OOT is applied. Additionally, we analyzed the meaning of the static analysis results among the step-by-step verification measures proposed by applying LDRA, a static analysis automation tool, to PX4, an open source used to implement flight control software.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.4
• /
• pp.735-743
• /
• 2020

Secure coding is a technique that detects malicious attack or unexpected errors to make software systems resilient against such circumstances. In many cases secure coding relies on static analysis tools to find vulnerable patterns and contaminated data in advance. However, secure coding has the disadvantage of being dependent on rule-sets, and accurate diagnosis is difficult as the complexity of static analysis tools increases. In order to support secure coding, we apply machine learning techniques, such as DNN, CNN and RNN to investigate into finding major weakness patterns shown in secure development coding guides and present machine learning models and experimental results. We believe that machine learning techniques can support detecting security weakness along with static analysis techniques.