• Proceedings of the Korean Information Science Society Conference
• /
• 1998.10a
• /
• pp.332-334
• /
• 1998

3세대 이동통신인 IMT-2000 에서는 기존의 GSM 과 CDMA 이동통신과 구별되는 인증 및 보안 관리가 필요하다. IMT-2000 은 유무선 통합망인 동시에 기존의 망과 연동이 가능해야 한다. 또한, 다양한 서비스 제공을 위해 IN과의 연동이 불가피하고. 글러벌 로밍 지원을 위해 보다 향상된 보안 관리가 필요하다. 본 연구에서는 IMT-2000 에서의 인증./보안 네트워크 요소를 정립하고, 기능 모델을 통해 사용자 인증과 ID 보안에 대한 시나리오를 정의한 다음. 그 시나리오를 통해서 망 관리 대상 객체와 관리 정보를 토출한다.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.4 no.2
• /
• pp.55-70
• /
• 1994

본 논문은 데이타베이스의 동적 기능을 모형화하기 위해서 동적 규칙을 사건과 동적 규칙 객체로 취급하여 개념적 스키마에 표현하는 동적 객체지향 데이타 모델을 제안한다. 제안된 모델에서 정적 구조와 동적 구조에 대한 개념들을 정의하고 모형화 과정에서 사용자의 이해도를 증진시키는 모델의 구성요호에 대한 그래픽 다이어그램을 제시하였다. 그리고 동적 규칙이 데이타베이스 구조에 포함됨으로써 발생가능한 정보의 불법적인 노출 또는 변경을 방지하기 위해서 BLP모델의 보안 정책을 확장하여 제안된 모델에 대한 11가지 종류의 다단계 보안 성질들을 정의하였다. 또한, 정의된 다단계 보안 성질들이 타당한가를 조사하기 위해서 패트리네트를 확장하여, 보안 성질의 검증작업을 수행하였다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.26 no.7
• /
• pp.1047-1059
• /
• 2022

With the development of cloud computing technology, container technology that provides services based on a virtual environment is also developing. Container orchestration technology is a key element for cloud services, and it has become an important core technology for building, deploying, and testing large-scale containers with automation. Originally designed by Google and now managed by the Linux Foundation, Kubernetes is one of the container orchestrations and has become the de facto standard. However, despite the increasing use of Kubernetes in container orchestration, the number of incidents due to security vulnerabilities is also increasing. Therefore, in this paper, we study the vulnerabilities of Kubernetes and propose a security policy that can consider security from the initial development or design stage through threat analysis. In particular, we intend to present a specific security guide by classifying security threats by applying STRIDE threat modeling.

• The Journal of the Korea institute of electronic communication sciences
• /
• v.8 no.9
• /
• pp.1313-1318
• /
• 2013

In order to actively respond to cyber attacks, not only the security systems such as IDS, IPS, and Firewalls, but also ESM, a system that detects cyber attacks by analyzing various log data, are preferably deployed. However, as the attacks be come more elaborate and advanced, existing signature-based detection methods start to face their limitations. In response to that, researches upon symptom detection technology based on attack modeling by employing big-data analysis technology are actively on-going. This symptom detection technology is effective when it can accurately extract features of attacks and manipulate them to successfully execute the attack modeling. We propose the ways to extract attack features which can play a role as the basis of the modeling and detect intelligent threats by carrying out scenario-based modeling.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.6 no.5
• /
• pp.768-776
• /
• 2002

According as practical use of server system is generalized in multimedia and internet environment, the security of all data that is stored to system is actuality that security mechanism of high level such as competence grant or access control is required. Also, standardization of informations that is stored in system in scattered environment protection technology of more complicated system by absence of done schema, non-systemicity etc. Therefore in this paper. General access control way explained basic modeling because enough investigate and analyze general access control way. And assigning role about each modules separating module of RBAC(Role-Based Access Control) modeling, existent access control modeling and RBAC modeling using mixing new access control modeling present.

• Convergence Security Journal
• /
• v.22 no.2
• /
• pp.67-75
• /
• 2022

Due to the COVID-19 pandemic, many companies have introduced remote work. However, the introduction of remote work has increased attacks on companies to access sensitive information, and many companies have begun to use cloud services to respond to security threats. This study used LDA topic modeling techniques by collecting news data with the keyword 'cloud security' to analyze changes in domestic cloud security trends before and after the COVID-19 pandemic. Before the COVID-19 pandemic, interest in domestic cloud security was low, so representation or association could not be found in the extracted topics. However, it was analyzed that the introduction of cloud is necessary for high computing performance for AI, IoT, and blockchain, which are IT technologies that are currently being studied. On the other hand, looking at topics extracted after the COVID-19 pandemic, it was confirmed that interest in the cloud increased in Korea, and accordingly, interest in cloud security improved. Therefore, security measures should be established to prepare for the ever-increasing usage of cloud services.

• Journal of the Korea Computer Industry Society
• /
• v.4 no.4
• /
• pp.491-500
• /
• 2003

The need for network security is being increasing due to the development of information communication and internet technology, In this paper, firewall models, operating system models and other network component models are constructed. Each model Is defined by basic or compound model using MODSIM III. In this simulation environment with representative attacks, the following attacks are generated, SYN flooding and Smurf attack as an attack type of denial of service. The simulation is performed with the models that exploited various security policies against these attacks. In addition, the results of the simulation show that the analysis of security performance according to various security policies, and the analysis of correlation between availability and confidentiality according to security empowerment.

• Review of KIISC
• /
• v.4 no.1
• /
• pp.62-75
• /
• 1994

분산 시스템 환경에서 정보 보안의 필요성이 크게 부각되고 있으며 응용영역에 있어서 보안 모델들의 정형화가 요구되고 있다. 본 논문에서는 분산 시스템 환경으 보안요구 사항을 파악하고 모델링을 위해서 접근 제어, 정보 흐름 제어, 무결성, 인증 프로토콜에 관한 정형화된 모델들을 기술하고 이를 비교 분석하였다.

• Journal of the Korean Geographical Society
• /
• v.43 no.2
• /
• pp.220-234
• /
• 2008

In many security monitoring contexts, the performance or efficiency of surveillance sensors/networks based on a single sensor type may be limited by environmental conditions, like illumination change. It is well known that different modes of sensors can be complementary, compensating for failures or limitations of individual sensor types. From a location analysis and modeling perspective, a challenge is how to locate different modes of sensors to support security monitoring. A coverage-based optimization model is proposed as a way to simultaneously site k different sensor types. This model considers common coverage among different sensor types as well as overlapping coverage for individual sensor types. The developed model is used to site sensors in an urban area. Computational results show that common and overlapping coverage can be modeled simultaneously, and a rich set of solutions exists reflecting the tradeoff between common and overlapping coverage.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.10c
• /
• pp.523-525
• /
• 2002

정보통신기술이 발전함에 따라 시스템 보안의 중요성이 점점 높아지고 있다. 이어 따라 내부자의 불법적인 시스템 사용이나 외부 침입자애 의한 중요 정보의 유출 및 조작을 알아내는 침입탐지시스템에 대한 연구가 활발히 이루어지고 있다. 침입탐지시스템에서는 사용자가 입력한 명령어, 네트워크 패킷, 시스템 호출 감사자료, 시스템 사용시간 등의 다양한 척도를 사용하여 침입여부를 결정하는데 사용하는 척도와 모델링 방법에 따라 취약점이 존재하여 탐지하지 못하는 침입이 있다. 본 논문에서는 단일척도 침입탐지 시스템의 취약점을 보안하기 위해 시스템 호출, 프로세스의 자원점유율, 파일접근이벤트의 세 가지 척도를 각각 최적의 방법으로 모델링 한 후 결합하는 침입탐지 방법을 제안하고 실험을 통해 그 가능성을 보인다.