• KIPS Transactions on Computer and Communication Systems
• /
• v.6 no.5
• /
• pp.247-254
• /
• 2017

In a Linux system, a user with malicious intent can acquire administrator privileges through attack types that execute shells, and can leak important user information and install backdoor program. In order to solve this problem, the existing method is to analyze the causes of the elevation of privilege, fix the problems, and then patch the system. Recently, a method of detecting an illegal elevated tasks in which information inconsistency occurs through user credentials in real time has been studied. However, since this credential method uses uid and gid, illegal elevated tasks having the root credentials may not be detected. In this paper, we propose a security module that stores shell commands and paths executed with regular privileges in a table and compares them with every file accesses (open, close, read, write) that are executed to solve the case which cannot detect illegal elevated tasks have same credential.

• Journal of KIISE:Computing Practices and Letters
• /
• v.9 no.3
• /
• pp.311-321
• /
• 2003

A current firewall or IDS (intrusion detection system) of the network level suffers from many vulnerabilities in internal computing servers. For a secure Linux implementation using system call hooking, this paper defines two requirements such as the multi-level security function of TCSEC B1 and a prevention of hacking attacks. This paper evaluates the secure Linux implemented in terms of the mandatory access control, anti-hacking and performance overhead, and thus shows the security, stability and availability of the multi-level secure Linux. At the kernel level this system protects various hacking attacks such as using Setuid programs, inserting back-door and via-attacks. The performance degradation is an average 1.18% less than other secure OS product.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.17 no.9
• /
• pp.745-752
• /
• 2016

In the era of the Internet of Things, where all physical objects are connected to the Internet, we suggest a remote control system using a Raspberry Pi single-board computer with ZigBee, which can turn an indoor light-emitting diode (LED) and a multiple-tap on and off, and with a smart phone can control the brightness of the LED as well as an electronic door lock. By connecting an infrared (IR) transmitter module to the Raspberry Pi, we can control home appliances, such as an air conditioner, and we can also monitor indoor images, indoor temperatures, and illumination by using a smart phone app. We developed a method of finding out IR transmission codes required for remote-controllable appliances with an AVR micro-controller. We suggest a method to remotely open and shut an office door by novating the door lock. The brightness level of an LED (between 0 and 10) can be controlled through a PWM signal generated by an ATmega88 microcontroller. A mutiple-tap is controlled using an ATmega32, a photo-coupler, and a TRIAC. The signals for measured temperature and illumination are converted from analog to digital by using the ATtiny44A microcontroller transmitting to a Raspberry Pi through SPI communication. Then, we connect a camera to the CSI head of the Raspberry Pi. We can turn on the smart multiple-tap for a certain period of time, or we can schedule the multi-tap to turn on at a specific time. To reduce standby power, people usually pull out a power code from multiple-taps or turn off a switch. Our method helps people do the same thing with a smart phone, if they are away from home.

• Journal of the Korea Convergence Society
• /
• v.9 no.7
• /
• pp.9-16
• /
• 2018

The purpose of this study is to prevent the malicious user from breaking the door-lock due to physical impact. If it matches the analog displacement value set in the door-lock system, it protects the body and property by transmitting damage information in real time to the manager smart phone. The research suggests a system that transmits damage information in real time to registered users when door-lock is damaged by physical impact. Then compare the impact information sensed by the door lock with the data of the sensitivity control unit. In the web server of the proposed system, after impact information transmitted from Door-Lock is stored in the DB, if the impact information is larger than the shock detection transmission reference value stored in the DB, it is transmitted to the administrator in real time by SMS module so that illegal access information.

• Journal of Digital Contents Society
• /
• v.18 no.5
• /
• pp.895-904
• /
• 2017

In this paper, we propose an IoT based smart outlet system for one-person household with electric safety, electric energy consumption management and transmission of messages to the reserved contacts by connecting the emergency network. The proposed smart outlet system is implemented by parsing packet data and protocol between server, module, application and WiFi AP receiver. The WiFi AP built for communication can be used not only for the outlet but also for the gas barrier, the door lock and the like. In addition, the proposed method can provide the remote monitoring function by receiving the amount of power of the receptacle received through the AC current sensor (SCT-013) in real time. The smart outlet system is expected to be capable of automatically shutting off the power in case of emergency through automatic power use analysis in addition to the standby power cutoff function.

• Convergence Security Journal
• /
• v.19 no.3
• /
• pp.51-59
• /
• 2019

In this paper, we propose a device identification system for network visibility that can maintain the secure internal network environment in the IoT era. Recently, the area of enterprise network is getting huge and more complicated. Not only desktops and smartphones but also business pads, barcode scanners, APs, Video Surveillance, digital doors, security devices, and lots of Internet of Things (IoT) devices are rapidly pouring into the business network, and there are highly risk of security threats. Therefore, in this paper, we propose the device identification system that includes the process and module-specific functions to identify the exploding device in the IoT era. The proposed system provides in-depth visibility of the devices and their own vulnerabilities to the IT manager in company. These information help to mitigate the risk of the potential cyber security threats in the internal network and offer the unified security management against the business risks.

• Proceedings of the Korea Water Resources Association Conference
• /
• 2022.05a
• /
• pp.399-399
• /
• 2022

최근 국지성 호우 등 홍수방어 시설의 설계빈도를 초과하는 강우 발생으로 홍수피해가 증가하고 있다. 그 중 도시지역의 내수침수 피해는 전체 피해액의 50%를 넘는다. 그러나 우수관거의 노후화 및 통수능 부족으로 우수의 즉각적인 배출이 이루어지지 않아 침수피해가 증가하고 있다. 침수피해의 주요 원인 중 저지대 지역 및 우수관거의 통수능력 부족이 침수피해의 가장 큰 원인을 차지한다. 따라서 도심지의 경우 내수침수로 인한 피해가 증가하고 있는 점을 감안하면 배수관거와 연계한 저류시스템 구축으로 침수 빈발 지역의 치수 능력 향상을 통하여 경제적 피해를 저감시킬 수 있다. 저류시스템은 현장 노면수 저류를 위한 측구 저류조와 저류조 운영 시스템을 의미하며, 저류조 운영 시스템 모델에 대한 연구를 수행하였다. 측구 저류조 운영 시스템 구축을 위해서 현장 센싱(Sensing)데이터와 연계할 수 있는 정보체계 및 운영 시스템 모델이 필요하다. 이에 센서를 활용한 도심지 측구 저류조 운영 시스템 모델을 제시한다. 먼저 센서의 구성은 측구 저류조 내의 협소한 공간과 전원공급, 방진·방수 문제를 해결할 수 있도록 구성되어야 하며, 무전원 근거리 이동통신기술(RFID)을 적용하여 측구 저류조 운영 시스템 수집서버와 통신하여 센싱 데이터를 저장한다. 데이터는 근거리 RFID 리더기가 측구 저류조로부터 센싱 정보를 수신하여 통신모듈에 수신한 저류조 개폐도어 열림과 닫힘 시그널(signal), RFID의 고유 ID 등을 전달 받아 운영 시스템 내의 RFID 이력 DB(Database)에 기록한다. 기록된 정보는 각각 RFID 일련번호, 기록 시간, 동적센서 시그널 값 등이 저장되어 각각의 측구 저류조의 상태를 확인할 수 있어야 한다. 저류량 산정을 위해서 GIS기반의 하수도 시설물 속성 데이터를 포함하는 운영 시스템을 구성해야 한다. 운영 시스템은 수집된 센서정보를 시계열 단위로 분석하고 위치정보 기준으로 측구 저류조 내의 총 저류량 산출에 필요한 기초정보를 제공하며 결과를 표출한다. 따라서 하수도 시설물의 속성정보를 포함하여 측구 저류조 및 센서의 속성정보 정의가 필요하며, 공간정보 파일(Shape File)을 적용하여 GIS 운영 시스템을 구축하여야 한다. 운영 시스템은 저류조 만관상태와 총 저류량을 산출하여 침수위험 알림을 제공할 수 있으며, 예상 강우에 따른 도심지 피해를 역으로 예측하여 강우사상 빈도에 따른 측구 저류조 체적을 결정할 수 있다.