• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.2
• /
• pp.231-242
• /
• 2020

In the case of damages caused by personal information infringement accidents caused by information infringer such as hackers, the information subject will usually claim damages to the information controller rather than the information infringer who is the perpetrator, and the information controller who has been claimed will claim damages again to the information security enterprise that has entrusted the information protection business. These series of claims for damages, which are expected to be carried out between the information subject, the information controller and the information security enterprise, are nothing but quarrels for transferring of liability among themselves who are also victims of infringement. So the problem of damage compensation should be discussed from the perspective of multi-faceted rational distribution of the damages among the subjects who make up the information security industry ecosystem rather than the conventional approach. In addition, due to the nature of personal information infringement accidents, if a large amount of personal information infringement occurs, the amount of compensation can be large enough to affect the survival of the company and so this study insist that a concrete and realistic alternatives for society to share damages is needed.

• Journal of Digital Forensics
• /
• v.12 no.3
• /
• pp.71-82
• /
• 2018

Using small cameras such as smartphones, criminals shoot secretly in public restrooms and women's changing rooms. And Revenge porn is also increasing. As a result social damage is increasing. Tumblr is an overseas service and it is very difficult to work with Tumbler on international legal cooperation and deletions. Thus In order to block the distribution of videos, victims must find and report the video URL themselves. But it's hard for victims who lack IT expertise to proceed those procedure. In this study, we automatically collect the URL of stored information and hash values of the images from API permlink of Tumbler blog. It is then saved as a document file with and presented to the victim. Through these technical methods, we can help victims report violations easily and quickly.

• Journal of the Korea Society of Computer and Information
• /
• v.27 no.9
• /
• pp.113-120
• /
• 2022

In this paper, we analyze the feasibility of the IP spoofing attack exploiting null security algorithms in 5G networks based on 3GPP standard specifications. According to 3GPP standard specifications, the initial Registration Request message is not protected by encryption and integrity. The IP spoofing attack exploits the vulnerability that allows a malicious gNB (next generation Node B) to modify the contents of the initial Registration Request message of a victim UE (User Equipment) before forwarding it to AMF (Access and Mobility Management Function). If the attack succeeds, the victim UE is disconnected from the 5G network and a malicious UE gets Internet services, while the 5G operator will charge the victim UE. In this paper, we analyze the feasibility of the IP spoofing attack by analyzing whether each signaling message composing the attack conforms to the 3GPP Rel-17 standard specifications. As a result of the analysis, it is determined that the IP spoofing attack is not feasible in the 5G system implemented according to the 3GPP Rel-17 standard specifications.

• Korean Journal of Forensic Psychology
• /
• v.13 no.2
• /
• pp.121-145
• /
• 2022

The current study applied the random forest algorithm to Korean crime victim survey data collected biennially between 2010 and 2018 to explore the relationship between crime/victim characteristics and the victim's criminal damages. A total of 3,080 cases including gender, age (life cycle stage), type of crime, perpetrator acquisition, repeated victimization, psychological damage (depression, isolation, extreme fear, somatic symptoms, interpersonal problems, moving out to avoid people, suicidal impulses, suicide attempts), and emotional changes after victimization (changes in self-protection confidence, self-esteem, confidence in others, confidence in legal institutions, and respect for Korean legal system/law) were analyzed. Considering the features of data that are difficult to apply traditional statistical techniques, this study implemented random forest algorithms to predict crime and victim characteristics using the victim's criminal damages (psychological damage and emotional change) and selected good predictors using VSURF function in VSURF package for R. As a result of the analysis, it was confirmed that the relationship between the type of crime and depression, extreme fear, somatic symptoms, and interpersonal problems, between perpetrator acquisition and somatic symptoms and interpersonal problems, and between repeated victimization and changes in respect for Korean legal system/law. Gender and life cycle stage (youth/adult/elderly) were found to be related to extreme fear and changes in self-protection confidence, respectively. However, more empirical evidence should be aggregated to explain the results as meaningful. The results of this study suggest that it is necessary to enhance the experts' knowledge and educate them on cases about the relationship between crime/victim characteristics and criminal damage. Strengthening their interview strategy and knowledge about law/rules were also needed to increase the effectiveness of the Korean victim assessment system.

• Journal of the Korea Society of Computer and Information
• /
• v.26 no.12
• /
• pp.227-235
• /
• 2021

The purpose of this study is to investigate the characteristics of childhood abuse experience, analyze factors affecting gender role attitudes, find out the moderating effect of social support, and suggest preventive measures and alternatives for childhood abuse experiences. proceeded. This study was conducted by the Ministry of Gender Equality and Family, through a domestic violence survey conducted every three years in accordance with the 「Act on the Prevention of Domestic Violence and Victim Protection, etc.」 Analysis was performed on 4,546 people and 4,514 men. As a result, it was found that childhood abuse experience had a negative (-) effect on gender role attitudes, and the analysis of the moderating effect of social support also showed a negative (-) effect. In the future, it is necessary to strengthen awareness of childhood abuse prevention and child protection from the beginning of life, and it is suggested that the level of children's parental education and social support and sufficient measures be prepared for future research.

• Review of KIISC
• /
• v.32 no.3
• /
• pp.5-10
• /
• 2022

랜섬웨어는 시스템을 잠그거나 데이터를 암호화해서 사용할 수 없도록 한 뒤 피해자에게 대가로 금전을 요구하는 악성 프로그램이다. 랜섬웨어는 암호학적으로 안전하다고 알려진 암호 알고리즘들을 이용하여 파일을 암호화 하기 때문에 암호 알고리즘 분석만으로는 감염된 파일을 복구할 수 없다. 따라서, 감염된 파일의 복구를 위해서는 암호 알고리즘 안전성 측면이 아닌 별도의 방법을 마련할 필요가 있다. 랜섬웨어는 파일 암호화 키를 이용하여 대상 파일들을 암호화하기 때문에 이를 복구할 수 있다면, 감염된 파일 복구가 가능하다. 하지만, 랜섬웨어들은 각각 다른 방법으로 파일 암호화키를 관리하기 때문에 일반적인 파일 암호화키 관리 방법을 미리 숙지하지 못한다면 파일 암호화키 복구를 위한 역공 학분석 시 비효율이 발생할 수 있다. 본 논문에서는 랜섬웨어가 파일 암호화키를 암호화하는 방식에 따라 세 가지로 분류하여 설명한다. 또한, 향후 랜섬웨어 분석가가 효율적인 분석을 할 수 있도록 각 관리 방법에 따라 파일 암호화키 복구를 위한 분석 대상을 식별하였다.

• Convergence Security Journal
• /
• v.16 no.7
• /
• pp.129-137
• /
• 2016

The guarantee of citizens' safety from crime is the reason for a nation's existence according to the social contract, and it is also a salient task in securing the citizens' right to the pursuit of happiness, which is a constitutional right expressing the nation's duty to its citizens. First, a procedure must be made mandatory that corresponds to the Miranda rule applied during the arrest of criminal suspect, which verifies whether there exists a risk of retaliatory crime to the victim of crime, crime reporter, or witness following their report of a crime or testimony. A measure to punish those who violate this should be devised. The second is the improvement of related laws and systems, such as expanding the scope of persons subject to protection from retaliatory crimes under the current law and strengthening information protection. Third, a retaliatory crime risk evaluation index must be developed, and the evaluation results must be quantified to clearly state measures and responsibilities, in detail, for personal safety at each level of intensity. The fourth is the expanded implementation of proactive personal safety measures for victims of crime and witnesses, as well as the development and application of advanced techniques. The last is a change in the perception s of those working for the judicial body. From the initial investigation stage of the crime to the diagnosis regarding the possibility of retaliation perpetrated on an ex-convict through psychological tests, systems of general cooperation, and mutual assistance must be established.

• Journal of the Korea Society of Computer and Information
• /
• v.26 no.11
• /
• pp.227-232
• /
• 2021

The 「Act on Special Cases concerning the Punishment of Crimes of Domestic Violence」 still has various problems in the legal system and enforcement process. Contrary to the original intention of the legislation, it is operated very passively in terms of state intervention and punishment of domestic violence actors in actual operation. Even if it is treated as a home protection case, if you look at the details of the protection disposition, there is a problem that the decision on the protection disposition is biased towards a specific type of protection disposition. In order to improve this, the need for cooperation and active intervention between state agencies is required. In addition, it is necessary to establish a legal basis for a request for personal protection by recognizing the status of a victim who reported domestic violence as a crime reporter. In addition, in order to secure the effectiveness of the protective disposition, it is necessary to strengthen sanctions for non-compliance or violations of the protective disposition.

• The Journal of the Korea Contents Association
• /
• v.22 no.10
• /
• pp.506-514
• /
• 2022

The method of suppressing recidivism through punishment centered on punishment is showing limitations through criminal policy research in many countries. As an alternative to this, a restorative judicial law aimed at returning criminals to members of society through reconciliation and coordination of community members, victims, and perpetrators is emerging as a paradigm for crime prevention and recidivism. Sweden is a representative welfare state and is confirming positive effects through correction of criminals based on restorative justice. In addition, it has a stable system related to the legal protection welfare system, and maintains a low recidivism rate and social security through scientific and reasonable operation using evidence-based principles in the evaluation and certification process of operating programs. However, research on the legal protection system implemented in advanced welfare and correctional countries, including Sweden, is still insufficient in Korea. Therefore, this study aims to explore the direction of the domestic legal protection system through a review of Swedish criminal policy and legal protection system, and to identify insufficient areas and complementary points of the domestic system to lay the foundation for improving the domestic legal protection welfare system and expanding business.

• Industry Promotion Research
• /
• v.8 no.1
• /
• pp.23-33
• /
• 2023

In modern times, damage caused by the spread of the Internet has become very diverse. In particular, due to the craze of K-pop since 2008, the damage caused by copyright infringement in the domestic and international music markets has become the biggest problem in the Internet market. However, the manpower of the police and copyright protection agencies to solve these increasingly intelligent crimes is insufficient. Therefore, we are trying to find out the role of the public interest detective as a supplementary force for the public authority and as a substitute for the copyright protection agency that can provide legitimate help for victims in the prevention of music copyright infringement and disputes. For this study, first, the concept and types of music copyright, the concept of public interest detectives, the current status and system of music copyright were identified, and the role of detectives for music copyright protection was explored through system operation and status analysis of protection agencies and literature review. Through the results of this study, it is hoped that the role of a professional detective in the public interest dimension of music copyright protection can be a good soil for the development of the detective industry in the future.