• Proceedings of the Korean Society of Computer Information Conference
• /
• 2011.06a
• /
• pp.339-341
• /
• 2011

본 논문에서는 의료정보 연동을 위한 보안 시스템을 설계하기 위해 의료정보 표준과 XML을 조사 및 분석하고, 이를 토대로 보안 시스템이 연동되는 서비스 흐름도 도출 및 시스템 설계를 하였다. 특히, 병원에서 질환관련, 식이관련, 운동관련 데이터를 제공하고, EMR 통합 Gateway를 통해 환자 데이터를 전송 받아 병원 간 개인건강정보 관리 모듈과 임상정보 관리 모듈을 통해 HL7표준을 이용하여 환자 정보를 XML 형태로 교환 하는 경우, 보안 시스템이 고려된다면 향후 다양한 응용 서비스에 안전하게 사용될 수 있을 것이다.

• TTA Journal
• /
• s.169
• /
• pp.78-83
• /
• 2017

• Convergence Security Journal
• /
• v.6 no.3
• /
• pp.21-28
• /
• 2006

Beginning flag security it was limited in Firewall but currently many information security solutions like Anti-virus, IDS, Firewall are come to be many. For efficiently managing different kinds of information security products ESM (Enterprise Security management) are developed and operated. Recently over the integrated security management system, TMS (Threat Management System) is rising in new area of interest. It follows in change of like this information security product and also collection information is being turning out diversification. For managing cyber threats, we have to analysis qualitative information (like vulnerabilities and malware codes, security news) as well as the quantity event logs which are from information security products of past. Information Threats and Vulnerability Auto Collector raises the accuracy of cyber threat judgement and can be utilized to respond the cyber threat which does not occur still by gathering qualitative information as well as quantity information.

• Journal of the Korean Institute of Intelligent Systems
• /
• v.26 no.1
• /
• pp.30-36
• /
• 2016

Recently, digital doorlock systems have been employing biometric recognition and smartphone as personal authentification means. The performance of a digital doorlock system is determined by the two conflicting indices such as security and convenience. This paper proposes and implements one grip based doorpull shaped doorlock systems using fingerprint and touch sensor grip pattern. The proposed system sequentially performs fingerprint recognition and grip pattern identification when a user grips the doorpull in order to open the door. This method so called 'One Grip' is considered to enhance security while maintaining users' convenience. We expect the proposed method can solve the phone missing problem encountered in developing smart doorlock systems based on smartphones.

• Journal of Digital Convergence
• /
• v.10 no.9
• /
• pp.1-13
• /
• 2012

This study aims to analyze actual conditions of the present national defense information network operation, the structure and management of the system, communication lines, security equipments for the lines, the management of network and software, stored data and transferred data and even general vulnerable factors of our army tactical C4I system. Out of them, by carrying out an extensive analysis of the army tactical C4I system, likely to be the core of future information warfare, this study suggested plans adaptive to better information security, based on the vulnerable factors provided. Firstly, by suggesting various information security factor technologies, such as VPN (virtual private network), IPDS (intrusion prevention & detection system) and firewall system against virus and malicious software as well as security operation systems and validation programs, this study provided plans to improve the network, hardware (computer security), communication lines (communication security). Secondly, to prepare against hacking warfare which has been a social issue recently, this study suggested plans to establish countermeasures to increase the efficiency of the army tactical C4I system by investigating possible threats through an analysis of hacking techniques. Thirdly, to establish a more rational and efficient national defense information security system, this study provided a foundation by suggesting several priority factors, such as information security-related institutions and regulations and organization alignment and supplementation. On the basis of the results above, this study came to the following conclusion. To establish a successful information security system, it is essential to compose and operate an efficient 'Integrated Security System' that can detect and promptly cope with intrusion behaviors in real time through various different-type security systems and sustain the component information properly by analyzing intrusion-related information.

• Journal of the Korea Society of Computer and Information
• /
• v.17 no.12
• /
• pp.169-177
• /
• 2012

In the development process of application systems, the most important works are analysis and design. Most of the application systems are implemented on database system. So, database design is important. Also, IT System are confronted with more and more attacks by an increase interconnections between IT systems. Therefore security-related processes belong to a very important process. Security is a complex non-functional requirement that can interaction of many parts in the system. But Security is considered in the final stages of development. Therefore, Their increases the potential for the final product to contain vulnerabilities. Accordingly, Early in development related to security analysis and design process is very important. J2EE gives a solution based on RBAC((Role Based Access Control) for security and object-relational database also has RBAC for security. But there is not a object-oriented analysis and design methodology using RBAC of J2EE and object-relational database for security. In this paper, the unified object-oriented analysis and design methodology is developed for security-critical web application systems based on J2EE and object-relational database. We used UMLsec and RBAC of object-relational database and J2EE for this methodology.

• Convergence Security Journal
• /
• v.7 no.4
• /
• pp.1-8
• /
• 2007

Currently, the needs of open standard and integrated network, and also applications of Ethernet network based system are increasing. By applying and expanding TCP/IP based network technology from high to low control level, factory automation application has been implemented, and thus integrated factory automation system has been accomplished, which is directly interoperable between high level management program and DB system. This paper proposes a communication control device which is based on Ethernet/IP standard system for factory automation. The proposed system is workable in the environment of a network system, which is based on CIP standard interface technology. The proposed system can also contribute to improve data communication characteristics.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.11 no.6
• /
• pp.2246-2255
• /
• 2010

In this paper, we describe an ontology-based context aware model that collects context information from USN sensor and CCTV image and reasons about context in order to development an integrated security control system in the industrial environments. The context model represents autonomous and heterogeneous data as ontologies and recognizes the context through DL(description logic) inference in the smart computing environment. We expect that the integrated security control system can automatically detects the risk in the industrial field and reduces the safety and security incidents by applying this context model to the system.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2003.11b
• /
• pp.1045-1048
• /
• 2003

최근 인터넷 환경이 널리 퍼지면서 인터넷 서버들의 보안위협은 갈수록 증가하고 있다. 이러한 인터넷 서버의 보안 사고를 예방하기 위하여 기관들은 정보보호 솔루션인 방화벽, 침입탐지 시스템, 바이러스 백신, 보안운영체제 등을 도입하였으나 개별적인 보안 솔루션을 적용함으로써 관리 효율성이 떨어지고 보안 사고 위험은 증가하고 있다. 그래서 현재는 개별 보안 솔루션을 통합관리하는 ESM 을 도입하고 있다. 차세대인터넷 서버도 인터넷에 연결되어 있어서 해킹으로부터 자유로울 수 없기 때문에 차세대 인터넷 서버에 적합한 ESM 이 필요하다. 우리는 공개 소프트웨어 보안 도구를 조합하여 응용 프로세스 레벨에서 가볍고 기본 보안 기능을 충실히 갖춘 ESM 을 설계하였다. 본 논문에서는 그 ESM 의 설계 내용을 중심으로 자세히 소개하고, 현재까지 구현된 결과도 간략히 소개한다.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.38C no.7
• /
• pp.551-562
• /
• 2013

Current CCTV systems, which require continuous monitoring of the screens, have the limitation to detect and respond to the crime scenes in timely manner. Therefore, in recent years, the request for more intlligent surveillance system, with a ubiquitous sensor network, is increasing in order to behave more humanly fashions. Such systems require cllective data processing of the environments based on various sensors. In this article, we suggests a new paradigm based surveillance system which integrates PSD and dual PIR sensors. The proposed system evlves from a existing indoor intrusion detection system which can only identify the intrusion event to a better inteligent system with context awareness. We have conducted the various simulations in order to prove the effectiveness of the proposed system.