• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.2
• /
• pp.197-212
• /
• 2020

With the advent of virtual currency and electronic wallets creating a way to make financial gains based on anonymity, malicious code dissemination using malicious mail has continued to increase. In order to minimize the damage, the human factors, security awareness and the ability to respond, which are technical factors, should be improved evenly, which can be improved through malicious mail training. This study presented a model considering the performance of malicious mail training, such as practice. It was classified as a training for enhancing awareness of security for employees and detection and response to improve their ability to respond to malicious mail. A training system suitable for the purpose, the core functions of malware training, implementation and camouflage skills, and bypass techniques were described. Based on the above model, the training data conducted over three years were collected and the effectiveness of the training was studied through analysis of the results according to the number of training sessions, training themes and camouflage techniques.

• Journal of Internet Computing and Services
• /
• v.15 no.6
• /
• pp.55-64
• /
• 2014

In a Web application, you can pass without restrictions special network security devices such as IPS and F/W, URL parameter, which is an important element of communication between the client and the server, is forwarded to the Web server. Parameters are modulated by an attacker requests a URL, disclose confidential information or through e-commerce, can take financial gain. Vulnerability parameter manipulation thereof cannot be able to determine whether to operate in only determined logical application, blocked with Web Application Firewall. In this paper, I will present a technique OTACUS(One-Time Access Control URL System) to complement the shortcomings of the measures existing approaches. OTACUS can be effectively blocked the modulation of the POST or GET method parameters passed to the server by preventing the exposure of the URL to the attacker by using clean URL technique simplifies complex URL that contains the parameter. Performance test results of the actual implementation OTACUS proves that it is possible to show a stable operation of less than 3% increase in the load.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.32 no.3
• /
• pp.547-554
• /
• 2022

Recently, the field of telemedicine is growing rapidly due to the COVID-19 pandemic. However, the cost of telemedicine services is relatively high, since cloud computing, video conferencing, and cyber security should be considered. Therefore, in this paper, we design and implement a cost-effective P2P-based telemedicine system. It is implemented using the widely used the open source computing platform, Raspberry Pi, and P2P network that frees users from security problems such as the privacy leakage by the central server and DDoS attacks resulting from the server/client architecture and enables trustworthy identifying connection system using SSL protocol. Also it enables users to check the other party's status including body temperature in real time by installing a thermal imaging camera using Raspberry Pi. This allows several medical diagnoses that requires visual aids. The proposed telemedicine system will popularize telemedicine service and meet the ever-increasing demand for telemedicine.

• Convergence Security Journal
• /
• v.12 no.3
• /
• pp.75-83
• /
• 2012

Recent science technology research network moves to establish logical private network among specific research groups such as high energy physics and climate, requiring to implement private network by group for each purpose. Up to now, national research networks such as KREONET service high capacity logical private networks. Therefore standardized configuration and management scheme is essential for the deployment of logical private network. In this study, we propose the core service element and protocols for the logical networks over Layer 2 networks. We also propose system architecture that make monitoring and management easier. After that we design and implement monitoring map for logical network based on scheme. For this purpose, we also propose the description system for logical research network to provide data such as operation information, formation information, performance information and failure information of network infrastructure resource.

• KIPS Transactions on Software and Data Engineering
• /
• v.10 no.12
• /
• pp.595-602
• /
• 2021

The robot is developing into a software-oriented shape that recognizes the surrounding situation and is given a task. Cloud Robotics Platform is a method to support Service Oriented Architecture shape for robots, and it is a cloud-based method to provide necessary tasks and motion controllers depending on the situation. As it evolves into a humanoid robot, the robot will be used to help humans in generalized daily life according to the three robot principles. Therefore, in addition to robots for specific individuals, robots as public goods that can help all humans depending on the situation will be universal. Therefore, the importance of information security in the Cloud Robotics Computing environment is analyzed to be composed of people, robots, service applications on the cloud that give intelligence to robots, and a cloud bridge that connects robots and clouds. It will become an indispensable element for In this paper, we propose a Security Scheme that can provide security for communication between people, robots, cloud bridges, and cloud systems in the Cloud Robotics Computing environment for intelligent robots, enabling robot services that are safe from hacking and protect personal information.

• Journal of Korea Spatial Information System Society
• /
• v.5 no.1 s.9
• /
• pp.5-12
• /
• 2003

The purpose of this paper is to present guidelines on technical GIS policy for integrating GIS with emerging information technologies and infrastructure systems for national GIS development. These guidelines are expected to advance the development of GIS and stimulating GIS industry, by anticipating potential problems. This paper consists of foul parts. After Introduction, section two covers the present and upcoming status of essential information technologies including communications, security, LBS, Ubiquitous and standardization. Section 3 describes the guidelines for combing GIS and emerging IT for national GIS development. The final section summarizes and derives conclusions.

• Journal of Korea Society of Digital Industry and Information Management
• /
• v.14 no.3
• /
• pp.55-68
• /
• 2018

In this paper, we identify and evaluate the information security factors considered in outsourcing development of information systems for defense agency with analytic hierarchy process(AHP). To assess the information security elements, we prepared three groups including the experts of a defense agency, subcontractor managers and subcontractor practitioners who are involved in developing information systems. And the relative importance of security factors were analyzed using questionnaires and responses. As a result of analysis of 27 security factors, factors corresponding to human and physical security as a whole were evaluated as having higher importance. Although there are some differences in the ranking of some importance according to human roles, they can be positive for the implementation of complementary information security. And administrative security and technical security can be relatively insignificant considering that they can be considered as infrastructure of the overall information environment. The result of this paper will be helpful to recognize the difference of perception of information security factors among the persons in the organization where collaboration is activated and to prepare countermeasures against them.

• The Journal of the Convergence on Culture Technology
• /
• v.6 no.3
• /
• pp.327-334
• /
• 2020

Recently, mobile and smart devices are rapidly spreading. As a result, real estate services, which were formerly face-to-face, have now been replaced by mobile environments. This study focuses on the real estate app service and 261 samples were used for the empirical analysis. The results of the hypotheses test using structural equation model are summarized as follows. First, performance expectancy, facilitating conditions, security and aesthetic perceived by users of real estate services have positively influence on positive attitude, but effort expectancy and social influence do not. Second, positive attitude of real estate services have positive effects on service Acceptance. Third, involvement moderated the relationship between positive attitude and service Acceptance. Based on the results of the analysis, it provided meaningful implications for practitioners and researchers in related fields.

• Proceedings of the Korea Institutes of Information Security and Cryptology Conference
• /
• 2002.11a
• /
• pp.204-207
• /
• 2002

공중무선랜은 오늘날 빠르게 증가하고 있는 무선인터넷 서비스에서 빠른 전송속도와 저렴한 설치비용 등으로 빠르게 성장하고 있는 중요한 기반요소로 평가되고 있다. 하지만 무선랜 시장에 대한 기대 뒤에는 보안에 대한 우려 또한 높아지고 있으며 로밍이나 핸드오버에 대한 수요가 커지고 있으나 실제로는 서비스 반경이 작고, 간섭에 의해 서비스 품질을 보장하기 어려우며 사용자 인증, 접근제어, 과금 부분에 있어 믿을 만한 초기 단말 인증이 보장되지 않아 도메인간 연동 문제가 쉽지 않다. 이러한 문제를 보완하여 초고속 멀티미디어 서비스를 제공할 수 있는 Mobile IP 기반 로밍 및 핸드오버에 대한 기반 기술 및 Mobile IP에 적용되는 사용자 인증 서비스에 대한 기반기술인 802.1x를 비롯하여 802.11f, Mobile IP등을 고려하여 이동성이 보장된 공중 무선랜 서비스를 위한 인증 방안을 제안하고 검증하며 제안된 방안은 차후로 ALL-IP 기반의 차세대 3G 이동통신망에서 이용될 수 있는 AAA 방안으로 확장하여 적용이 가능한 AAA 모델의 기반기술이 될 것이다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2008.06b
• /
• pp.75-80
• /
• 2008

업무 프로세스의 개선 및 효율성 증가를 위해 시스템간의 연동을 웹서비스(Web Services)화하여 시스템 간의 프로세스 및 데이터 연계를 목적으로 하는 통합의 연구가 활발히 진행되고있다. 본 논문에서는 이기종간의 레거시 시스템을 SOA(Service Oriented Architecture)기반의 웹 서비스와 통합하여 구매/유지보수 비용을 절감하고 신뢰성, 보안성 및 상호 운용성 향상 등의 비즈니스 프로세스의 가치를 향상시키기 위한 방안에 대해 소개한다. 레거시 시스템을 웹서비스와 통합 시 고려해야 하는 비 기능적인 요소를 OASIS, W3C, WS-I등의 단체에서 정해진 웹서비스 명세 표준에 근거하여 선정하고, 이를 준수한 통합 방안 및 구현사례를 제시한다.