• ETRI Journal
• /
• v.42 no.3
• /
• pp.433-445
• /
• 2020

A denial-of-service (DoS) attack is a serious attack that targets web applications. According to Imperva, DoS attacks in the application layer comprise 60% of all the DoS attacks. Nowadays, attacks have grown into application- and business-layer attacks, and vulnerability-analysis tools are unable to detect business-layer vulnerabilities (logic-related vulnerabilities). This paper presents the business-layer dynamic application security tester (BLDAST) as a dynamic, black-box vulnerability-analysis approach to identify the business-logic vulnerabilities of a web application against DoS attacks. BLDAST evaluates the resiliency of web applications by detecting vulnerable business processes. The evaluation of six widely used web applications shows that BLDAST can detect the vulnerabilities with 100% accuracy. BLDAST detected 30 vulnerabilities in the selected web applications; more than half of the detected vulnerabilities were new and unknown. Furthermore, the precision of BLDAST for detecting the business processes is shown to be 94%, while the generated user navigation graph is improved by 62.8% because of the detection of similar web pages.

• Proceedings of the Korean Society of Precision Engineering Conference
• /
• 2005.06a
• /
• pp.724-727
• /
• 2005

Material selection is one of the important activities in design and manufacturing. A selected material at the conceptual design stage affects material properties of the designed part as well as manufacturability and cost of the final product. Unfortunately there are not many accessible material databases that can be used for design. In this research, a web-based material database was constructed. In order to assist designers to compare different materials, two-dimensional and three-dimensional graphs were provided. Using these graphical tools, multi-dimensional comparison was available in more intuitive manner. To provide environmental safety of materials, the database included National Fire Protection Association publication Standard No.704. The web-based tool is available at http://fab.snu.ac.kr/matdb.

• Journal of the Korean Society for Precision Engineering
• /
• v.21 no.2
• /
• pp.100-107
• /
• 2004

The development of a Web-based powertrain performance simulation system is introduced. The development approach of system architecture and each module is introduced along with the H/W and S/W used. The interface with all users is developed via a JAVA Applet. The powertrain modeling and other job history data of a user is managed systematically on the server by database to increase the reusability of the data. A self-developed program using object-oriented programming is used as a solver for the performance simulation. The graph tool for the analysis of simulation results has the collaboration support developed based on JAVA so that synchronous users can view the same result. As a result, the powertrain simulation is possible only with Web-browser for the user and the collaboration support among the relevant engineers is possible.

• Proceedings of the Korean Information Science Society Conference
• /
• 1998.10b
• /
• pp.155-157
• /
• 1998

본 논문은 다양한 분야에 활용이 가능한 지리정보시스템이 지리적 기반위에 환경정보를 검색하는 환경정보시스템이 적용되는 지를 보이고 있다. 본 환경정보시스템은 지리정보를 벡터데이터 형식으로 환경정보는 수계정보에 관해 구성하였고, DRECTED-GRAPH 방법으로 광범위한 위상관계 중 인접성을 부여하였다. 환경정보시스템의 표현기능은 오염 현황 상태도를 작성하고 특정지역의 오염정도를 표시할 수 있고, 분석기능은 오염 상태 그래프를 그릴 수 있고 추출된 오염원으로 오염배출소를 예측할 수 있다. WEB-GIS는 공간정보와 속성정보를 검색할 수 있는 WEB기반의 GIS SYSTEM이다.

• The KIPS Transactions:PartD
• /
• v.9D no.6
• /
• pp.991-998
• /
• 2002

With the advent of XML and database languages armed with the object-oriented concept and deductive logic, the problem of efficient query processing for them has become a major issue. We describe a way of processing semi-structured XML data through an implementation of a Deductive and Object-oriented Database (DOODB) language with the explanation of query processing. We have shown how to convert an XML data model to a DOODB data model. We have then presented an efficient query processing method based on Connection Graph Resolution. We also present a knowledge-based query processing method that uses the homomorphism of objects in the database and the associative rule of substitutions.

• Journal of Korea Society of Industrial Information Systems
• /
• v.10 no.2
• /
• pp.26-31
• /
• 2005

In this paper, we present the document summarizers which are simpler and more condense than the existing ones generally used in the web search engines. This method is a statistic-based summarization method using the concept of the complete graph. We suppose that each sentence as a vertex and the similarity between two sentences as a link of the graph. We compare this summarizer with those of Clustering and MMR techniques which are well-known as the good summarization methods. For the comparison, we use FScore using the summarization results generated by human subjects. Our experimental results verify the accuracy of this method, being about $30\%$ better than the others.

• Proceedings of the Korea Multimedia Society Conference
• /
• 2004.05a
• /
• pp.529-532
• /
• 2004

인터넷 보급이 확산되고, 인터넷의 생활화가 가속화되면서 사용자들의 요구를 만족시키기 위해 웹사이트는 점점 더 복잡해지고 있다. 이런 복잡한 구조의 웹사이트를 료현하는 방법으로 EMFG를 이용한 웹사이트의 표현이 연구되어지고 있다. 본 논문에서는 EMFG(Extended Mark 딘ow Graph)를 이용한 웹사이트의 표현에서 나타날 수 있는 반복적인 구조를 간략화하여 웰페이지의 흐름을 직관적으로 파악할 수 있는 방법을 제시한다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.22 no.3
• /
• pp.458-470
• /
• 2018

As the requirements of web apps become complex and rapidly changing, the maintenance of web apps becomes more important. However, web apps have a problem that more often than not there is not enough documentation to understand and maintain them. Thus, their effective maintenance requires models that represent their internal behavior occurring when they dynamically generate web pages. Previous works identify web components (such as JSPs and Servlets) as participants in the behavior but not web resources (such as images, CSS files, and JavaScript files). Moreover, they do not identify dependency relations between web components and web resources. This paper dynamically analyzes Java web apps to extract such dependency relations, which are included in our graph model for page generation. Case studies using open-source web apps show the applicability of the proposed approach.

• The Journal of the Korea Contents Association
• /
• v.16 no.6
• /
• pp.205-214
• /
• 2016

As a large amount of graph-structured data is widely used in various applications such as social networks, semantic web, and bio-informatics, keyword-based search over graph data has been getting a lot of attention. In this paper, we propose an efficient method for keyword search over graph data to find a set of top-k answers that are relevant as well as non-redundant in structure. We define a non-redundant answer structure for a keyword query and a relevance measure for the answer. We suggest a new indexing scheme on the relevant paths between nodes and keyword terms in the graph, and also propose a query processing algorithm to find top-k non-redundant answers efficiently by exploiting the pre-calculated indexes. We present effectiveness and efficiency of the proposed approach compared to the previous method by conducting an experiment using a real dataset.

• Journal of the Korean Society of Industry Convergence
• /
• v.27 no.1
• /
• pp.143-149
• /
• 2024

The production and procurement of shipbuilding and offshore equipment is an important competitive factor in the shipbuilding and offshore industry. Recently, ICT-based digital technology has been rapidly applied to the manufacturing industry following the Fourth Industrial Revolution. Under the digital transformation, real-time data interface technology based on SCM (Supply Chain Management) is emerging as an important tool to improve the efficiency of the equipment manufacturing process. In this study, the characteristics and advantages and disadvantages of interface technologies of web-based data interface technologies were compared and analyzed. The performance was compared between theoretical evaluation based on technical features and practical application cases. As a result, it was confirmed that GraphQL is useful for selective data processing, but there is a problem with optimization, and REST API has a problem with receiving data due to a fixed data structure. Therefore, this study aims to suggest ways to utilize and optimize these data interface technologies.