• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.12 no.3
• /
• pp.15-22
• /
• 2002

Java applet, executed in user's web browsers which is via proxy server on web sever, can approach client files or resources, so it is necessary to secure against malicious java applet. Currently, the previous security countermeasures against malicious java applet use two ways: one is making a filter system to detect malicious java applet hewn in proxy, the other is that establishes another security java virtual machine. However, the first one can not detect unknown malicious java applet, and the other one nay increase loads, because it decides whether there is malicious or not after implementing java applet on proxy server. In this paper, after inserting monitoring function to java applet on proxy server using java-methods substitution and transfer it to user to detect malicious java applet, we propose a technique for detecting malicious java applet that can detect the unknown malicious java applet with reducing loads

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.20 no.5
• /
• pp.59-67
• /
• 2010

In the paper, we proposed an IM-ACM(Insider Misuse-Access Control Model) for preventing illegal information leakage by insider who exploits his legal rights in the ubiquitous computing environment. The IM-ACM can monitor whether insider uses data rightly using misuse monitor add to CA-TRBAC(Context Aware-Task Role Based Access Control) which permits access authorization according to user role, context role, task and entity's security attributes. It is difficult to prevent information leakage by insider because of access to legal rights, a wealth of knowledge about the system. The IM-ACM can prevent the information flow between objects which have the different security levels using context role and security attributes and prevent an insider misuse by misuse monitor which comparing an insider actual processing behavior to an insider possible work process pattern drawing on the current defined profile of insider's process.

• Proceedings of the Korean Institute of Navigation and Port Research Conference
• /
• 2023.05a
• /
• pp.104-105
• /
• 2023

해양 관측과 위성 원격탐사를 이용하여 시공간적으로 다양하게 변하는 생태 어장 환경 및 선박 관련 자료를 획득할 수 있다. 이번 연구의 주요 목적은 야간 불빛 위성 자료를 이용하여 광범위한 해역에 대한 어선의 위치 분포를 파악하는 딥러닝 기반 모델을 제안하는 것이다. 제안한 모델의 정확성을 평가하기 위해 야간 조업 어선의 위치를 포함하고 있는 AIS(Automatic Identification System) 정보와 상호 비교 평가 하였다. 이를 위해, 먼저 AIS 자료를 획득 및 분석하는 방법을 소개한다. 해양안전종합시스템(General Information Center on Maritime Safety & Security, GICOMS)으로부터 제공받은 AIS 자료는 동적정보와 정적정보로 나뉜다. 동적 정보는 일별 자료로 구분되어있으며, 이 정보에는 해상이동업무식별번호(Maritime Mobile Service Identity, MMSI), 선박의 시간, 위도, 경도, 속력(Speed over Ground, SOG), 실침로(Course over Ground, COG), 선수방향(Heading) 등이 포함되어 있다. 정적정보는 1개의 파일로 구성되어 있으며, 선박명, 선종 코드, IMO Number, 호출부호, 제원(DimA, DimB, DimC, Dim D), 홀수, 추정 톤수 등이 포함되어 있다. 이번 연구에서는 선박의 정보에서 어선의 정보를 추출하여 비교 자료로 사용하였으며, 위성 자료는 구름의 영향이 없는 깨끗한 날짜의 영상 자료를 선별하여 사용하였다. 야간 불빛 위성 자료, 구름 정보 등을 이용하여 야간 조업 어선의 불빛을 감지하는 심층신경망(Deep Neural Network; DNN) 기반 모델을 제안하였다. 본 연구의결과는 야간 어선의 분포를 감시하고 한반도 인근 어장을 보호하는데 기여할 것으로 기대된다.

• Journal of Advanced Navigation Technology
• /
• v.27 no.5
• /
• pp.510-518
• /
• 2023

This paper introduces a MATLAB graphical user interface (GUI) based software for performance analysis of navigation message and wide area differential correction of regional navigation satellite system (RNSS). This software was developed to analyze satellite orbit/clock-related performance of navigation message and wide area differential correction simulating RNSS for regions near Korea based on different distributions of monitor and reference stations. As a result of software operation, navigation message and wide area differential correction are given as output in MATLAB file format. From the analysis of output, it was confirmed that valid navigation message and wide area differential correction could be generated from the results about statistical feature of orbit and clock prediction errors, cm-level fitting errors for navigation message parameters, and 81.9% enhancement in range error for wide area differential correction.

• 대한공업교육학회지
• /
• v.32 no.1
• /
• pp.134-152
• /
• 2007

This study deals with the development of computer program which can restrict students to access to the unallowable web sites during the Internet based class. Our suggested program can find the student's access list to the unallowable sites, display it on the teacher's computer screen. Through the limitation of the student's access, teacher can enhance the efficiency of class and fulfill his educational purpose for the class. The use of our results leads to the effective and safe utilization of the Internet as the teaching tools in the class. Meanwhile, the typical method is to turn off the LAN (Local Area Network) power in order to limit the student's access to the unallowable web sites. Our program has been developed on the Linux operating systems in the small network environment. The program includes following five functions: the translation function to change the domain name into the IP(Internet Protocol) address, the search function to find the active students' computers, the packet snoop to capture the ongoing packets and investigate their contents, the comparison function to compare the captured packet contents with the predefined access restriction IP address list, and the restriction function to limit the network access when the destination IP address is equal to the IP address in the access restriction list. Our program can capture all passing packets through the computer laboratory in real time and exactly. In addition, it provides teacher's computer screen with the all relation information of students' access to the unallowable sites. Thus, teacher can limit the student's unallowable access immediately. The proposed program can be applied to the small network of the elementary, junior and senior high school. Our research results make a contribution toward the effective class management and the efficient computer laboratory management. The related researches provides teacher with the packet observation and the access limitation for only one host, but our suggested program provides teacher with those for all active hosts.

• Korean Journal of Agricultural and Forest Meteorology
• /
• v.21 no.1
• /
• pp.65-73
• /
• 2019

The MODIS (Moderate Resolution Imaging Spectroradiometer) data in Hierarchical Data Format (HDF) have been processed using the Geospatial Data Abstraction Library (GDAL). Because of a relatively large data size, it would be preferable to build and install the data analysis tool with greater computing performance, which would differ by operating system and the form of distribution, e.g., source code or binary package. The objective of this study was to examine the performance of the GDAL for processing the HDF files, which would guide construction of a computer system for remote sensing data analysis. The differences in execution time were compared between environments under which the GDAL was installed. The wall clock time was measured after extracting data for each variable in the MODIS data file using a tool built lining against GDAL under a combination of operating systems (Ubuntu and openSUSE), compilers (GNU and Intel), and distribution forms. The MOD07 product, which contains atmosphere data, were processed for eight 2-D variables and two 3-D variables. The GDAL compiled with Intel compiler under Ubuntu had the shortest computation time. For openSUSE, the GDAL compiled using GNU and intel compilers had greater performance for 2-D and 3-D variables, respectively. It was found that the wall clock time was considerably long for the GDAL complied with "--with-hdf4=no" configuration option or RPM package manager under openSUSE. These results indicated that the choice of the environments under which the GDAL is installed, e.g., operation system or compiler, would have a considerable impact on the performance of a system for processing remote sensing data. Application of parallel computing approaches would improve the performance of the data processing for the HDF files, which merits further evaluation of these computational methods.

• Proceedings of the Korea Water Resources Association Conference
• /
• 2007.05a
• /
• pp.532-536
• /
• 2007

급속한 도시화 및 지구온난화로 인한 집중호우로 홍수피해가 해마다 증가하고 있다. 홍수피해를 최소화하기 위하여 4대강 중심의 홍수예경보시스템이 구축되는 등 다양한 제도적 장치가 마련되고 있으나 중소하천이 분포되어 있는 도시유역에서의 홍수예측기능은 부족한 실정이다. 본 연구에서는 중소 도시하천에 적용 가능한 실시간 도시홍수예측서비스 시스템(Realtime Urban Flood Forecasting Service, U-FFS)을 개발하였다. 경기도 성남에 위치한 탄천을 대상유역으로 선정하고 실시간 강우 및 수위관측소를 설치하여 수문데이타를 수집하였으며 이를 바탕으로 수위예측모형을 구축하였다. 모형구축에는 이미 국내외 학계에서 그 정확도가 입증된 바 있는 Data-driven 모델의 일종인 ANFIS(Adaptive Neuro-Fuzzy Inference System)를 이용하였다. 개발된 수위예측모형은 지정된 시간에 자동으로 작동 가능한 실행파일로 프로그래밍되어 최종적으로 홍수예측 웹서비스와 연동된다. U-FFS는 집중호우 발생 시 최종 유출구의 30분, 1시간, 2시간 후의 수위 예측값을 웹 상을 통해 제공함으로써 언제 어디서나 홍수예측 정보를 누구나 손쉽게 획득할 수 있는 장점이 있다. 시범운영 결과, 30분 및 1시간 후의 수위 예측은 정확도가 매우 뛰어났으며 2시간 후의 수위 예측의 정확성은 다소 떨어지는 것으로 확인되었으나 전반적인 홍수예측 판단에는 무리가 없을 것으로 예상된다. 본 시스템의 홍수예측모형은 생성 및 수정이 간편하여 그 활용성이 매우 높을 것으로 기대된다. 특히 안전함을 지향하는 각종 U-City나 홍수피해가 빈번한 도시유역에 적용하면 기존 시스템과 차별화된 실시간 홍수예측 서비스가 가능해져 홍수피해를 최소화할 수 있을 것이다. 취수구 직경 D의 3.3배를 벗어나지 않는다는 결과를 도출할 수 있었다.링 목적으로 사용될 수 있다. 본 연구에서 개발한 영상수위계는 한강홍수통제소 관할의 전류, 청담대교 등 4개소 낙동강 홍수통제소 2개소, 지자체 등에 적용되었으며, 적용 결과 비교적 안정적이면서 정확하게 수위를 측정하는 것으로 나타났다. 한편 기존 CCD 카메라 이외에 CCTV를 이용한 영상수위계를 개발하여 영상의 화질 개선뿐 아니라 하천화상 감시 기능을 강화하였다.소류의 섭취율은 높았다. 집단간의 상관도를 보면 교육별로 김치, 장아찌, 콩이 각각 p>0.5 수준에서 유의한 차가 없었고, 나머지는 유의한 차가 있었다. 연령별로는 멸치가 유의한 차가 없었고(p>0.5), 수입별로는 콩이 유의한 차가 없었다(p>0.5). 4. 영양지식(營養知識) 검토 가정생활(家庭生活)에 필요(必要)한 일반적(一般的)인 영양지식(營養知識)은 대체적으로 낮은 편이었다. 어린이 영양, 편식의 해로움, 비만증의 해로움, 임신부 그리고 수유부 영양에 대하여는 일반적으로 알고 있다고 하였으며, 그다음으로 이유기 영양, 어린이 발육에 필요한 식품, 식품과 영양소와의 관계, 우유의 성분, 노인영양에 대하여 잘 알고 있는 비율이 낮았으며, 인체의 영양소, 식단작성여부, 간식의 이론, 식품감별법에 대하여는 가장 낮은 비율을 나타냈다. 각 영양지식은 교육정도가 높을수록 영양지식이 높았고, 교육별 집단간의 유의한 차가 나타났다. (0.001

• Journal of KIISE:Computing Practices and Letters
• /
• v.10 no.2
• /
• pp.146-155
• /
• 2004

Currently most of commercial operating systems contain a high-level audit feature to increase their own security level. Linux does not fall behind the other commercial operating systems in performance and stability, but Linux does not have a good audit feature. Linux is required to support a higher security feature than C2 level of the TCSEC in order to be used as a server operating system, which requires the kernel-level audit feature that provides the system call auditing feature and audit event. In this paper, we present LxBSM, which is a kernel module to provide the kernel-level audit features. The audit record format of LxBSM is compatible with that of Sunshield BSM. The LxBSM is implemented as a loadable kernel module, so it has the enhanced usability. It provides the rich audit records including the user-level audit events such as login/logout. It supports both the pipe and file interface for increasing the connectivity between LxBSM and intrusion detection systems (IDS). The performance of LxBSM is compared and evaluated with that of Linux kernel without the audit features. The response time was increased when the system calls were called to create the audit data, such as fork, execve, open, and close. However any other performance degradation was not observed.

• Korean Journal of Remote Sensing
• /
• v.26 no.2
• /
• pp.239-249
• /
• 2010

The Geostationary Ocean Color Imager (GOCI) data-processing system (GDPS), which is a software system for satellite data processing and analysis of the first geostationary ocean color observation satellite, has been developed concurrently with the development of th satellite. The GDPS has functions to generate level 2 and 3 oceanographic analytical data, from level 1B data that comprise the total radiance information, by programming a specialized atmospheric algorithm and oceanic analytical algorithms to the software module. The GDPS will be a multiversion system not only as a standard Korea Ocean Satellite Center(KOSC) operational system, but also as a basic GOCI data-processing system for researchers and other users. Additionally, the GDPS will be used to make the GOCI images available for distribution by satellite network, to calculate the lookup table for radiometric calibration coefficients, to divide/mosaic several region images, to analyze time-series satellite data. the developed GDPS system has satisfied the user requirement to complete data production within 30 minutes. This system is expected to be able to be an excellent tool for monitoring both long-term and short-term changes of ocean environmental characteristics.