• Journal of the military operations research society of Korea
• /
• v.34 no.1
• /
• pp.31-45
• /
• 2008

This paper describes a development of the operational architecture of a low altitude air defense automation system using a systems engineering approach. The future battlefield is changing to new system of systems that command and control by the network based BM/C4I. Also, it is composed of various sensors and shooters in an single theater. Future threats may be characterized as unmanned mewing bodies that the strategic effect is great such as UAVs, cruise missiles or tactical ballistic missiles. New threats such as low altitude stealth cruise missiles may also appear. The implementation of a low altitude air defense against these future threats is required to complex and integrated approach based on systems engineering. In this view, this work established an operational scenario and derived operational requirements by identifying mission and future operational environments. It is presented the operational architecture of the low altitude air defense automation system by using the CORE 5.0.

• Proceedings of the Korea Water Resources Association Conference
• /
• 2007.05a
• /
• pp.795-799
• /
• 2007

최근 정보통신산업이 급속도로 발전함에 따라 Internet을 이용하여 각종 정보를 쉽게 얻을 수 있게 되어 수자원 분야에도 정보의 공유와 자료의 통합이 활발히 이루어지고 있다. 또한 재해정보를 효율적이고 직관적으로 표현하기 위해서 방재업무에 GIS를 도입하고 있다. Internet을 통한 손쉬운 정보의 취득은 효율적인 재해관리에 매우 중요하며, 자료의 효율적인 관리와 표현을 위한 GIS기법 또한 필수적이다. 따라서 본 연구에서는 Internet과 GIS를 결합하여 보다 많은 사람들이 신속하고 정확한 재해정보를 얻을 수 있게 하며, 방재 업무에 활용토록 하여 재해에 의한 주민들의 생명의 위협과 재산피해를 줄이도록 하는데 그 목적이 있다. 효과적인 재해관리를 위해서는 계획과 관련된 정보, 재해발생 이력, 대상지역의 각종 정보가 통합되어 실시간으로 전달될 필요가 있다. 또한 이러한 정보들을 빠른시간내에 이해하고 분석하여 대책을 수립하고 시행해야한다. Internet GIS는 비상상황에 대비한 계획과 대처 그리고 복구사업에 있어 가장 정확하고 신속한 정보를 제공해 줄 수 있다. 즉, Internet GIS는 방대한 양의 정보를 효과적이고 지능적으로 분석이 가능하며, 이해하기 쉬운 그래픽 기반의 자료를 보여주므로 방재업무에 큰 도움을 줄 수 있다. Internet GIS를 방재정보 시스템에 이용할 경우 에 있어 장점, 약점, 기회, 위기에 대한 SWOT분석을 실시하였다. Internet이라는 환경의 장점을 그대로 이어받아 비용면에서 효과적이며 적용범위와 사용자층도 넓어지게 된다. 또한 누구나 간편하게 이용할 수 있어 협력체계 또한 쉽게 구축할 수 있으며 빠른 정보의 교환이 가능하다. 하지만, 인터넷에 의존한다는 점에 있어 서버가 자연재해에 노출될 경우 시스템 자체가 제 기능을 할 수 없으며 여러명이 동시에 서버에 접속을 하기 때문에 컴퓨터에 부하가 많이 걸리는 모델링이나 복잡한 분석은 실시하기 어려우며, 대용량 데이터를 전송할 수 있는 대역폭이 확보 되어야 한다. 또한, Internet 환경으로 개발을 해야되기 때문에 데스크탑용 GIS에 비해 개발속도가 느리며 개발 초기비용이 많이 들게 된다. 하지만, 네트워크 기술의 발달과 모바일과의 연계 등으로 이러한 약점을 극복할 수 있을 것으로 판단된다. 따라서 본 논문에서는 인터넷 GIS를 이용하여 홍수재해 정보를 검색, 처리, 분석, 예경보할 수 있는 홍수방재정보 시스템을 구축토록 하였다.

• Proceedings of the Korean Information Science Society Conference
• /
• 2008.06d
• /
• pp.66-70
• /
• 2008

진화되고 위협적인 사이버공격 및 피해가 증가함에 따라 기업이나 기관의 정보보호에 대한 책임도 증가하게 되었다. 이에 종합적인 컴퓨터 범죄 재현과 정확한 침입경로 및 피해규모, 정보의 신뢰성을 파악하기 위한 컴퓨터 포렌식에 대한 연구가 활발해 지고 있다. 이에 대부분의 기업이나 조직에서 이기종의 보안장비에서 발생하는 다량의 경보와 이벤트를 효과적으로 수집, 통합하고 상호연관분석 할 수 있는 통합보안관리시스템(ESM)을 도입하여 운영하고 있으나 많은 경보발생으로 인해 적절한 판단이나 분석 및 효율적인 대응이 이루어지고 있지 않다. 이에 본 논문에서는 수집되는 증거의 범위를 재 정의하고, 이벤트 상관분석을 통해 발생된 침해경보에 대해 경보검증을 적용하여 경보의 오탐율을 감소시켰으며, 검증된 경보에 대해서 신속히 분석 및 대응이 이루어지는 포렌식 모델을 제안한다. 이를 통해 오탐율 감소는 물론 신속하고 신뢰성 있는 탐지 및 침해 분석이 가능하다.

• Convergence Security Journal
• /
• v.2 no.1
• /
• pp.87-97
• /
• 2002

Many firms are utilizing the Internet and various information technologies to effectively manage their business operations with a goal of gaining a competitive advantage in the rapidly changing business environments. Today, the business is characterized as digital economy where information freely flows and business processes are improved with the use of information technologies. Internet technology is playing a key role in transforming the organization and creating new business models. It has become the infrastructure of choice for electronic commerce because it provides process efficiency, cost reduction, and open standards that can easily be adopted by different organizations. Here, the vast amount of data and information slow among the related parties and security issues are very critical matter of research interests by academicians and practitioners. In this research, we address the importance of security framework in managing the data shared among the related parties in the e-business and suggest the security architecture for effectively supporting the needs of e-business in an organization. This research provides valuable contributions both in academics and industry in terms of how security framework and architecture should be set in order to provide the necessary e-business.

• Journal of the Korea Society of Computer and Information
• /
• v.14 no.12
• /
• pp.157-167
• /
• 2009

Recently, the leakage of confidential information and personal information is taking place on the Internet more frequently than ever before. Most of such online security incidents are caused by attacks on vulnerabilities in web applications developed carelessly. It is impossible to detect an attack on a web application with existing firewalls and intrusion detection systems. Besides, the signature-based detection has a limited capability in detecting new threats. Therefore, many researches concerning the method to detect attacks on web applications are employing anomaly-based detection methods that use the web traffic analysis. Much research about anomaly-based detection through the normal web traffic analysis focus on three problems - the method to accurately analyze given web traffic, system performance needed for inspecting application payload of the packet required to detect attack on application layer and the maintenance and costs of lots of network security devices newly installed. The UTM(Unified Threat Management) system, a suggested solution for the problem, had a goal of resolving all of security problems at a time, but is not being widely used due to its low efficiency and high costs. Besides, the web filter that performs one of the functions of the UTM system, can not adequately detect a variety of recent sophisticated attacks on web applications. In order to resolve such problems, studies are being carried out on the web application firewall to introduce a new network security system. As such studies focus on speeding up packet processing by depending on high-priced hardware, the costs to deploy a web application firewall are rising. In addition, the current anomaly-based detection technologies that do not take into account the characteristics of the web application is causing lots of false positives and false negatives. In order to reduce false positives and false negatives, this study suggested a realtime anomaly detection method based on the analysis of the length of parameter value contained in the web client's request. In addition, it designed and suggested a WAF(Web Application Firewall) that can be applied to a low-priced system or legacy system to process application data without the help of an exclusive hardware. Furthermore, it suggested a method to resolve sluggish performance attributed to copying packets into application area for application data processing, Consequently, this study provide to deploy an effective web application firewall at a low cost at the moment when the deployment of an additional security system was considered burdened due to lots of network security systems currently used.

• Annual Conference of KIPS
• /
• 2003.05c
• /
• pp.1977-1980
• /
• 2003

DNS는 인터넷 주소 자원 관리의 핵심으로 다양한 인터넷 서비스의 근간이 되는 중요한 자원이다. 인터넷의 급속한 발전과 함께 사이버 공격의 다양하고 지능적인 발전으로 인해 DNS에 대한 위협이 날로 증가하고 있다. 이에 본 논문에서는 현재 DNS의 보안 문제점을 살펴보고 이러한 보안 문제점을 해결할 수 있는 보안 기술로써 DNS 프로토콜 보안 기술과 DNS 서비스 보안 기술에 대해 논의한다. DNS 서비스 보안은 DNS 프로토콜 보안과 네트워크 전반에 걸쳐 이루어지는 통합보안 관리 시스템과의 상호 연계를 통해 극대화 될 수 있다.

• The Journal of the Korea Contents Association
• /
• v.21 no.1
• /
• pp.531-540
• /
• 2021

As cyber attacks and crimes increase exponentially and hacking attacks become more intelligent and advanced, hacking attack methods and routes are evolving unpredictably and in real time. In order to reinforce the enemy's responsiveness, this study aims to propose a method for developing an artificial intelligence-based security control platform by building a next-generation security system using artificial intelligence to respond by self-learning, monitoring abnormal signs and blocking attacks.The artificial intelligence-based security control platform should be developed as the basis for data collection, data analysis, next-generation security system operation, and security system management. Big data base and control system, data collection step through external threat information, data analysis step of pre-processing and formalizing the collected data to perform positive/false detection and abnormal behavior analysis through deep learning-based algorithm, and analyzed data Through the operation of a security system of prevention, control, response, analysis, and organic circulation structure, the next generation security system to increase the scope and speed of handling new threats and to reinforce the identification of normal and abnormal behaviors, and management of the security threat response system, Harmful IP management, detection policy management, security business legal system management. Through this, we are trying to find a way to comprehensively analyze vast amounts of data and to respond preemptively in a short time.

• Convergence Security Journal
• /
• v.21 no.4
• /
• pp.117-128
• /
• 2021

Most of the Affiliated Organizations of the Local Governments are constantly exposed to cyber threats due to the lack of dedicated information security organizations, dedicated personnel and interest from institutions. As an institution invested and contributed by the Local Government, it has the legal responsibility of management and supervision. Therefore, in this study, the network of the Local Government is connected by using the network of the Local Government, information security infrastructure, and security control infrastructure. It was an opportunity to conduct research on the improvement of the security control system of the Local Government to protect important information (personal information, etc.) owned by the Local Government. In the long term, we propose a transfer to the cloud system for stable services of personal information processing systems such as public systems, ERPs, and groupwares operated by Affiliated Organizations, and consider enhancing the security of Affiliated Organizations and security control. It is hoped that the results of this study will be helpful to the Local Governments.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.15 no.6
• /
• pp.3865-3871
• /
• 2014

The U-health service provides medical services with patients anytime or anywhere and is defined as the service that combines information and communication technology with health and medical service. However, it causes some troubles, such as the disclosure of patients' medical information or data spills (personal information extrusion). Moreover, it has the weak point of the security threats associated with data based on existing wire-wireless systems because it conducts data transmission and reception through the network. Therefore, this paper suggests a safe personal information management system by designing integrated certification schema that will help compensate for the weaknesses of the U-health service. In the proposal, the protocols for user information, certification between medical institution and users, data communication encryption & decryption, and user information disuse were designed by applying the ID-Based Encryption, and analyzed such existing systems and PKI Based-based communication process, securely and safely.

• Journal of KIISE:Information Networking
• /
• v.30 no.1
• /
• pp.82-96
• /
• 2003

The Internet has evolved into the global computer network due to the openness of its protocol, but such evolution brings about new risks and threats. To protect computer networks safely, it is the best way that preventing an attacher from intruding beforehand. However, to provision against all attacks causes the degradation of network performance as well as to prevent unknown attacks is very hard. Secure Combination, the framework which establishes a mutual collaboration and cooperation between the trusted zones, could protect systems from the potential attacks. This frameworks can predict attacks by exchanging security information and cooperating with each zone. It is a dynamic and powerful security architecture that rapidly enables updating security policy and deploying response modules.