• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.32 no.3
• /
• pp.527-545
• /
• 2022

In order to effectively detect APT attacks performed by well-organized adversaries, we implemented a system to detect attacks by reconstructing attack chains of APT attacks. Our attack chain-based APT attack detection system consists of 'events collection and indexing' part which collects various events generated from hosts and network monitoring tools, 'unit attack detection' part which detects unit-level attacks defined in MITRE ATT&CK^® techniques, and 'attack chain reconstruction' part which reconstructs attack chains by performing causality analysis based on provenance graphs. To evaluate our system, we implemented a test-bed and conducted several simulated attack scenarios provided by MITRE ATT&CK Evaluation program. As a result of the experiment, we were able to confirm that our system effectively reconstructed the attack chains for the simulated attack scenarios. Using the system implemented in this study, rather than to understand attacks as fragmentary parts, it will be possible to understand and respond to attacks from the perspective of progress of attacks.

• Journal of the Korean Society of Marine Environment & Safety
• /
• v.23 no.7
• /
• pp.791-800
• /
• 2017

For fires in ship accommodation areas, if it is possible to predict the pattern in which fire will spread and suggest proper countermeasures according to a situation using a fire simulation tool, fire damage may be reduced. However, fire simulations have a practical limit: a significant amount of time is required to analyze the results due to the size of the computational domain and the number of grids. Therefore, in this study, applicable grid size for fire simulations to predict fire patterns in ship accommodation areas was analyzed, and a generation method was conducted to predict fire behavior in real time. As a result, a value within 0.25[m] was judged appropriate as an applicable grid size for ship accommodation areas. Also, in comparison with studies using a single mesh generation method, the visibility value was similar, within 4.3 %, as was the temperature value, within 8.3 %, when a multi mesh generation method was used, showing a decline of 80 % in analysis time. Therefore, it was confirmed that composing a grid using multi mesh was effective for reducing analysis time.

• The Journal of Society for e-Business Studies
• /
• v.10 no.3
• /
• pp.21-36
• /
• 2005

Current web search includes a lot of different results with information that user does not want, because it searches information using keyword mapping. Ontology can describe the correct meaning of web resource and relationships between web resources. And we can extract suitable information that user wants using Ontology Accordingly, we need the ontology to represent knowledge. W3C announced OWL(Web Ontology Language), meaning description technology for such web resource. However, the development of a special tool that can effectively compose and edit OWL is inactive. In this paper, we designed and developed an OWL authoring system that can effectively provide the generation and edit about OWL.

• Journal of The Korean Association of Information Education
• /
• v.22 no.5
• /
• pp.605-611
• /
• 2018

On-Line Lectures are becoming more common due to the MOOK service and the expansion of national policy in Korea. Especially, It is being changed to new remote mixed style from traditional lecture in universities. We propose and implement a remote contents making tool with audio synchronization function based on more with less resources. To implement our proposed algorithm, we design an interactive interface to assign multiple cutting intervals and convert an input video to print a new result. In experimental, we can confirm our algorithm works properly with average performance value 9.3% cpu share ratio and 87mega byte ram usage(CPU 2.60GHz, 820*600 Area).

• Journal of the Korean Society for Aeronautical & Space Sciences
• /
• v.48 no.11
• /
• pp.849-859
• /
• 2020

The semi-empirical equation and commercial computational tool were used to predict the base drag of a guided missile with free-stream Mach numbers and chamber pressures, and the results were generally agree each other. Differences in flow characteristics and base drags were observed with over/under expansion conditions by the nozzle. Under the over-expansion condition, the base pressure decreased as the expansion fan was generated at upper region of the base, and base pressure decreased further with increasing free-stream Mach number as the expansion becomes strong. Under the under-expansion conditions, a shock wave was generated around the base by the influence of the nozzle flow, which increased the base pressure, and the effect increased as the chamber pressure increased. Under the same chamber pressure condition, as the free-stream Mach number increases, the characteristic that the base pressure decreases as the shock wave generated at the base moves downstream was observed.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.27 no.11C
• /
• pp.1064-1073
• /
• 2002

In this paper, we design and implement the Wireless Transaction Protocol (WTP) proposed by the Wireless Application Protocol (WAP) forum using a protocol development tool, SDL Development Tool (SDT). And we conduct a comparative performance evaluation of the WTP implementation with other three implementations that are based on different implementation models respectively: the server model, the coroutine model, and the activity-thread model. To implement WTP, we first use Unified Modeling Language (UML) for analyzing the protocol requirement and defining the protocol engine architecture. Next, we use Software Development Language (SDL) to design the protocol engine in details and then generate the WTP implementation automatically with the aid of SDT The code size of the WTP implementation generated by SDT is 62% larger than the other three implementations. However, its throughput and system response time for transaction processing is almost equal to the other three implementations when the number of concurrent clients is less than 3,000. If more than 5,000 concurrent clients tries, the transaction success rate abruptly decreases to 10% and system response time increases to 1,500㎳, due to the increased protocol processing time. But, it comes from the fact that the load overwhelms the capacity of the PC resource used in this experimentation.

• Proceedings of the Korean Information Science Society Conference
• /
• 2002.04b
• /
• pp.367-369
• /
• 2002

소프트웨어 프로젝트의 경쟁력 프로젝트의 생명 주기 전반에 걸친 체계적인 관리를 통하여 유지될 수 있으며, 이러한 체계적인 관리는 경쟁력 있는 프로젝트의 개발 및 유지를 위한 하나의 전략적 기술(strategic technology)이다 본 논문에서는 프로젝트 생명 주기 전반에 걸쳐 프로젝트를 체계적이고 효율적으로 관리하여 고품질의 결과물을 생성하고, 이를 통한 결과물의 기술 및 시장 경쟁력을 높이기 위하여 당 연구부에서 개발하여 사용하고 있는 프로젝트 관리 및 지원도구인 SMART (Software Management Assistant and Reference Tool) 시스템을 소개한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2006.11a
• /
• pp.685-688
• /
• 2006

응용프로그램의 쉽고 빠른 개발을 위한 개발도구의 중요성이 대두되고 있다. 이중 GUI 개발환경은 개발자의 편의성과 신속한 개발을 위해서 필수적이나 다양한 언어와 플랫폼을 위한 GUI 개발환경을 개발하는데 어려움을 겪고 있는 실정이다. 그리하여 본 논문에서는 여러 언어와 플랫폼을 위한 GUI 개발환경을 신속히 얻기 위해 기존의 GUI 편집기를 재목적하여 GUI 개발환경을 구현하는 방법을 제안한다. 기존에 개발된 FarPy GUI 편집기를 전단부로 하고 GUI를 구성하는 GroovyMarkup 코드를 생성하는 방법을 사용하여 Groovy를 위한 GUI 개발환경을 쉽고 빠르게 얻을 수 있었다.

• Journal of Korea Multimedia Society
• /
• v.10 no.7
• /
• pp.869-881
• /
• 2007

In this paper, storing and removing method of broadcasting content is proposed for personalized consumption. The main objective of this paper is to keep personalized information, such as additional contents, user creation data, usage history, with broadcasting content, and user can consume broadcasting content to accommodate individual preference. Consequently, proposed file format in this paper is based on MPEG-4 and MPEG-21 file format because they can access and extract data within file format easily and can keep spatiotemporal relation between data. In addition, TV-Anytime metadata is used for program description metadata. Finally, proposed method is verified with file format player and useful application scenarios.

• Journal of Korean Society of Coastal and Ocean Engineers
• /
• v.13 no.3
• /
• pp.237-244
• /
• 2001

The watershed information of the Mankyung River and Dongjin River is obtained and analysed using the GIS tool. The informations i.e., digital map, land use, point sources, weather station, water quality measurement station, and pollutants load unit are managed by DB system. The slope, rainfall, and generated pollutants loads of COD, TN and TP which are the input data of the rainfall-runoff-pollutants load model are estimated. From the analysis of the collected and generated data, the almost watershed area is composed of agricultural lands except the upstream regions. The population and industrial area are densely located in Cheonju City and Iksan City, whereas the farming areas are widely distributed.