• Title/Summary/Keyword: Anomaly Monitoring

Search Result 140, Processing Time 0.031 seconds

Implementation of Security Information and Event Management for Realtime Anomaly Detection and Visualization (실시간 이상 행위 탐지 및 시각화 작업을 위한 보안 정보 관리 시스템 구현)

  • Kim, Nam Gyun;Park, Sang Seon
    • Asia-pacific Journal of Multimedia Services Convergent with Art, Humanities, and Sociology
    • /
    • v.8 no.5
    • /
    • pp.303-314
    • /
    • 2018
  • In the past few years, government agencies and corporations have succumbed to stealthy, tailored cyberattacks designed to exploit vulnerabilities, disrupt operations and steal valuable information. Security Information and Event Management (SIEM) is useful tool for cyberattacks. SIEM solutions are available in the market but they are too expensive and difficult to use. Then we implemented basic SIEM functions to research and development for future security solutions. We focus on collection, aggregation and analysis of real-time logs from host. This tool allows parsing and search of log data for forensics. Beyond just log management it uses intrusion detection and prioritize of security events inform and support alerting to user. We select Elastic Stack to process and visualization of these security informations. Elastic Stack is a very useful tool for finding information from large data, identifying correlations and creating rich visualizations for monitoring. We suggested using vulnerability check results on our SIEM. We have attacked to the host and got real time user activity for monitoring, alerting and security auditing based this security information management.

Sensitivity Experiment of Surface Reflectance to Error-inducing Variables Based on the GEMS Satellite Observations (GEMS 위성관측에 기반한 지면반사도 산출 시에 오차 유발 변수에 대한 민감도 실험)

  • Shin, Hee-Woo;Yoo, Jung-Moon
    • Journal of the Korean earth science society
    • /
    • v.39 no.1
    • /
    • pp.53-66
    • /
    • 2018
  • The information of surface reflectance ($R_{sfc}$) is important for the heat balance and the environmental/climate monitoring. The $R_{sfc}$ sensitivity to error-induced variables for the Geostationary Environment Monitoring Spectrometer (GEMS) retrieval from geostationary-orbit satellite observations at 300-500 nm was investigated, utilizing polar-orbit satellite data of the MODerate resolution Imaging Spectroradiometer (MODIS) and Ozone Mapping Instrument (OMI), and the radiative transfer model (RTM) experiment. The variables in this study can be cloud, Rayleigh-scattering, aerosol, ozone and surface type. The cloud detection in high-resolution MODIS pixels ($1km{\times}1km$) was compared with that in GEMS-scale pixels ($8km{\times}7km$). The GEMS detection was consistent (~79%) with the MODIS result. However, the detection probability in partially-cloudy (${\leq}40%$) GEMS pixels decreased due to other effects (i.e., aerosol and surface type). The Rayleigh-scattering effect in RGB images was noticeable over ocean, based on the RTM calculation. The reflectance at top of atmosphere ($R_{toa}$) increased with aerosol amounts in case of $R_{sfc}$<0.2, but decreased in $R_{sfc}{\geq}0.2$. The $R_{sfc}$ errors due to the aerosol increased with wavelength in the UV, but were constant or slightly decreased in the visible. The ozone absorption was most sensitive at 328 nm in the UV region (328-354 nm). The $R_{sfc}$ error was +0.1 because of negative total ozone anomaly (-100 DU) under the condition of $R_{sfc}=0.15$. This study can be useful to estimate $R_{sfc}$ uncertainties in the GEMS retrieval.

Introduction and Evaluation of the Production Method for Chlorophyll-a Using Merging of GOCI-II and Polar Orbit Satellite Data (GOCI-II 및 극궤도 위성 자료를 병합한 Chlorophyll-a 산출물 생산방법 소개 및 활용 가능성 평가)

  • Hye-Kyeong Shin;Jae Yeop Kwon;Pyeong Joong Kim;Tae-Ho Kim
    • Korean Journal of Remote Sensing
    • /
    • v.39 no.6_1
    • /
    • pp.1255-1272
    • /
    • 2023
  • Satellite-based chlorophyll-a concentration, produced as a long-term time series, is crucial for global climate change research. The production of data without gaps through the merging of time-synthesized or multi-satellite data is essential. However, studies related to satellite-based chlorophyll-a concentration in the waters around the Korean Peninsula have mainly focused on evaluating seasonal characteristics or proposing algorithms suitable for research areas using a single ocean color sensor. In this study, a merging dataset of remote sensing reflectance from the geostationary sensor GOCI-II and polar-orbiting sensors (MODIS, VIIRS, OLCI) was utilized to achieve high spatial coverage of chlorophyll-a concentration in the waters around the Korean Peninsula. The spatial coverage in the results of this study increased by approximately 30% compared to polar-orbiting sensor data, effectively compensating for gaps caused by clouds. Additionally, we aimed to quantitatively assess accuracy through comparison with global chlorophyll-a composite data provided by Ocean Colour Climate Change Initiative (OC-CCI) and GlobColour, along with in-situ observation data. However, due to the limited number of in-situ observation data, we could not provide statistically significant results. Nevertheless, we observed a tendency for underestimation compared to global data. Furthermore, for the evaluation of practical applications in response to marine disasters such as red tides, we qualitatively compared our results with a case of a red tide in the East Sea in 2013. The results showed similarities to OC-CCI rather than standalone geostationary sensor results. Through this study, we plan to use the generated data for future research in artificial intelligence models for prediction and anomaly utilization. It is anticipated that the results will be beneficial for monitoring chlorophyll-a events in the coastal waters around Korea.

A SUPER-JUPITER MICROLENS PLANET CHARACTERIZED BY HIGH-CADENCE KMTNET MICROLENSING SURVEY OBSERVATIONS OF OGLE-2015-BLG-0954

  • SHIN, I.-G.;RYU, Y.-H.;UDALSKI, A.;ALBROW, M.;CHA, S.-M.;CHOI, J.-Y.;CHUNG, S.-J.;HAN, C.;HWANG, K.-H.;JUNG, Y.K.;KIM, D.-J.;KIM, S.-L.;LEE, C.-U.;LEE, Y.;PARK, B.-G.;PARK, H.;POGGE, R.W.;YEE, J.C.;PIETRUKOWICZ, P.;MROZ, P.;KOZLOWSKI, S.;POLESKI, R.;SKOWRON, J.;SOSZYNSKI, I.;SZYMANSKI, M.K.;ULACZYK, K.;WYRZYKOWSKI, L.;PAWLAK, M.;GOULD, A.
    • Journal of The Korean Astronomical Society
    • /
    • v.49 no.3
    • /
    • pp.73-81
    • /
    • 2016
  • We report the characterization of a massive (mp = 3.9±1.4Mjup) microlensing planet (OGLE-2015-BLG-0954Lb) orbiting an M dwarf host (M = 0.33 ± 0.12M) at a distance toward the Galactic bulge of $0.6^{+0.4}_{-0.2}kpc$, which is extremely nearby by microlensing standards. The planet-host projected separation is a⊥ ~ 1.2AU. The characterization was made possible by the wide-field (4 deg2) high cadence (Γ = 6 hr–1) monitoring of the Korea Microlensing Telescope Network (KMTNet), which had two of its three telescopes in commissioning operations at the time of the planetary anomaly. The source crossing time t* = 16 min is among the shortest ever published. The high-cadence, wide-field observations that are the hallmark of KMTNet are the only way to routinely capture such short crossings. High-cadence resolution of short caustic crossings will preferentially lead to mass and distance measurements for the lens. This is because the short crossing time typically implies a nearby lens, which enables the measurement of additional effects (bright lens and/or microlens parallax). When combined with the measured crossing time, these effects can yield planet/host masses and distance.

Extraction of Ocean Surface Current Velocity Using Envisat ASAR Raw Data (Envisat ASAR 원시자료를 이용한 표층 해류 속도 추출)

  • Kang, Ki-Mook;Kim, Duk-Jin
    • Korean Journal of Remote Sensing
    • /
    • v.29 no.1
    • /
    • pp.11-20
    • /
    • 2013
  • Space-borne Synthetic Aperture Radar(SAR) has been one of the most effective tools for monitoring quantitative oceanographic physical parameters. The Doppler information recorded in single-channel SAR raw data can be useful in estimating moving velocity of water mass in ocean. The Doppler shift is caused by the relative motion between SAR sensor and the water mass of ocean surface. Thus, the moving velocity can be extracted by measuring the Doppler anomaly between extracted Doppler centroid and predicted Doppler centroid. The predicted Doppler centroid, defined as the Doppler centroid assuming that the target is not moving, is calculated based on the geometric parameters of a satellite, such as the satellite's orbit, look angle, and attitude with regard to the rotating Earth. While the estimated Doppler shift, corresponding to the actual Doppler centroid in the situation of real SAR data acquisition, can be extracted directly from raw SAR signal data, which usually calculated by applying the Average Cross Correlation Coefficient(ACCC). The moving velocity was further refined to obtain ocean surface current by subtracting the phase velocity of Bragg-resonant capillary waves. These methods were applied to Envisat ASAR raw data acquired in the East Sea, and the extracted ocean surface currents were compared with the current measured by HF-radar.

The Performance of Ictal Brain SPECT Localizing for Epileptogenic Zone in Neocortical Epilepsy (신피질성 간질에서 발작기 $^{99m}Tc$-HMPAO 뇌혈류 SPECT의 간질병소 국소화 성능)

  • Kim, Eun-Sil;Lee, Dong-Soo;Hyun, In-Young;Chung, June-Key;Lee, Myung-Chul;Koh, Chang-Soon;Lee, Sang-Kun;Chang, Kee-Hyun
    • The Korean Journal of Nuclear Medicine
    • /
    • v.29 no.4
    • /
    • pp.445-450
    • /
    • 1995
  • The epileptogenic zones should be localized precisely before surgical resection of these zones in intractable epilepsy. The localization is more difficult in patients with neocortical epilepsy than in patients with temporal lobe epilepsy. This study aimed at evaluation of the usefulness of ictal brain perfusion SPECT for the localization of epileptogenic zones in neocortical epilepsy. We compared the performance of ictal SPECT with MRI referring to ictal scalp electroencephalography(sEEG). Ictal $^{99m}Tc$-HMPAO SPECT were done in twenty-one patients. Ictal EEG were also obtained during video monitoring. MRI were reviewd. According to the ictal sEEG and semiology, 8 patients were frontal lobe epilepsy, 7 patients were lateral temporal lobe epilepsy, 2 patients were parietal lobe epilepsy, and 4 patients were occipital lobe epilepsy. Ictal SPECT showed hyperperfusion in 14 patients(67%) in the zones which were suspected to be epileptogenic according to ictal EEG and semiology. MRI found morphologic abnormalities in 9 patients(43%). Among the 12 patients, in whom no epileptogenic zones were revealed by MRI, ictal SPECT found zones of hyperperfusion concordant with ictal SEEG in 9 patients(75%). However, no zones of hyperperfusion were found in 4 among 9 patients who were found to have cerebromalacia, abnormal calcification and migration anomaly in MRI. We thought that ictal SPECT was useful for localization of epileptogenic zones in neocortical epilepsy and especially in patients with negative findings in MRI.

  • PDF

Development of an intelligent IIoT platform for stable data collection (안정적 데이터 수집을 위한 지능형 IIoT 플랫폼 개발)

  • Woojin Cho;Hyungah Lee;Dongju Kim;Jae-hoi Gu
    • The Journal of the Convergence on Culture Technology
    • /
    • v.10 no.4
    • /
    • pp.687-692
    • /
    • 2024
  • The energy crisis is emerging as a serious problem around the world. In the case of Korea, there is great interest in energy efficiency research related to industrial complexes, which use more than 53% of total energy and account for more than 45% of greenhouse gas emissions in Korea. One of the studies is a study on saving energy through sharing facilities between factories using the same utility in an industrial complex called a virtual energy network plant and through transactions between energy producing and demand factories. In such energy-saving research, data collection is very important because there are various uses for data, such as analysis and prediction. However, existing systems had several shortcomings in reliably collecting time series data. In this study, we propose an intelligent IIoT platform to improve it. The intelligent IIoT platform includes a preprocessing system to identify abnormal data and process it in a timely manner, classifies abnormal and missing data, and presents interpolation techniques to maintain stable time series data. Additionally, time series data collection is streamlined through database optimization. This paper contributes to increasing data usability in the industrial environment through stable data collection and rapid problem response, and contributes to reducing the burden of data collection and optimizing monitoring load by introducing a variety of chatbot notification systems.

Frequency and clinical characteristics of prenatally diagnosed congenital hydronephrosis and outcomes of ureteropelvic junction stenosis (산전 진단된 선천성 수신증의 빈도 및 임상적 특성과 신우요관 이행부 협착의 경과)

  • Kang, Hyun Soo;Sung, June Seung;Kim, Sun Hui;Back, Hee Jo;Kim, Young Ok;Kim, Chan Jong;Choi, Young Youn;Hwang, Tai Ju
    • Clinical and Experimental Pediatrics
    • /
    • v.49 no.8
    • /
    • pp.870-874
    • /
    • 2006
  • Purpose : Popular use of fetal ultrasonography has increased to detect congenital hydronephrosis(CH) which is the most common anomaly prenatally detected. We'd like to determine the frequency and clinical characteristics of prenatally diagnosed CH and outcome of ureteropelvic junction stenosis(UPJS). Methods : The records of births between January 1994 and June 2003 in Chonnam National University Hospital(CNUH), and the records of children who were diagnosed with CH in the Department of Pediatrics of CNUH during the above period, were retrospectively analyzed. In the patients with UPJS, the initial anterior posterior diameters of renal pelvis(APD) were compared between the spontaneous regression (SR) and operation group(OP). In the SR group, sequential regression rates of APD were estimated. Results : Among a total 9,076 births, 231(2.54 percent) patients with 293 renal units were diagnosed as CH and 19(6.78 percent) renal units spontaneously regressed 3 days after birth. In 228 children(56 bilateral; 172 unilateral; total 284 renal units) diagnosed with CH in the department of pediatrics of CNUH, male(71.9 percent) and left kidney(69.2 percent) predilection were found and 78.1 percent of CH were caused by UPJS. The initial APD of the SR group(121 units) in UPJS was $7.8{\pm}6.28mm$, which was significantly smaller than the APD($26.8{\pm}12.14mm$) of the OP group(25 unit)(P<0.05). In the SR group, 81 percent spontaneously regressed within one year. Conclusions : In CH, male and left kidney predilection were found. UPJS was the most common cause of CH and initial APD in UPJS at 3 days of age was a good prognostic indicator. Close monitoring should be done for at least one year because most SR in UPJS regressed spontaneously within one year.

Lung cancer, chronic obstructive pulmonary disease and air pollution (대기오염에 의한 폐암 및 만성폐색성호흡기질환 -개인 흡연력을 보정한 만성건강영향평가-)

  • Sung, Joo-Hon;Cho, Soo-Hun;Kang, Dae-Hee;Yoo, Keun-Young
    • Journal of Preventive Medicine and Public Health
    • /
    • v.30 no.3 s.58
    • /
    • pp.585-598
    • /
    • 1997
  • Background : Although there are growing concerns about the adverse health effect of air pollution, not much evidence on health effect of current air pollution level had been accumulated yet in Korea. This study was designed to evaluate the chronic health effect of ai. pollution using Korean Medical Insurance Corporation (KMIC) data and air quality data. Medical insurance data in Korea have some drawback in accuracy, but they do have some strength especially in their national coverage, in having unified ID system and individual information which enables various data linkage and chronic health effect study. Method : This study utilized the data of Korean Environmental Surveillance System Study (Surveillance Study), which consist of asthma, acute bronchitis, chronic obstructive pulmonary diseases (COPD), cardiovascular diseases (congestive heart failure and ischemic heart disease), all cancers, accidents and congenital anomaly, i. e., mainly potential environmental diseases. We reconstructed a nested case-control study wit5h Surveillance Study data and air pollution data in Korea. Among 1,037,210 insured who completed? questionnaire and physical examination in 1992, disease free (for chronic respiratory disease and cancer) persons, between the age of 35-64 with smoking status information were selected to reconstruct cohort of 564,991 persons. The cohort was followed-up to 1995 (1992-5) and the subjects who had the diseases in Surveillance Study were selected. Finally, the patients, with address information and available air pollution data, left to be 'final subjects' Cases were defined to all lung cancer cases (424) and COPD admission cases (89), while control groups are determined to all other patients than two case groups among 'final subjects'. That is, cases are putative chronic environmental diseases, while controls are mainly acute environmental diseases. for exposure, Air quality data in 73 monitoring sites between 1991 - 1993 were analyzed to surrogate air pollution exposure level of located areas (58 areas). Five major air pollutants data, TSP, $O_3,\;SO_2$, CO, NOx was available and the area means were applied to the residents of the local area. 3-year arithmetic mean value, the counts of days violating both long-term and shot-term standards during the period were used as indices of exposure. Multiple logistic regression model was applied. All analyses were performed adjusting for current and past smoking history, age, gender. Results : Plain arithmetic means of pollutants level did not succeed in revealing any relation to the risk of lung cancer or COPD, while the cumulative counts of non-at-tainment days did. All pollutants indices failed to show significant positive findings with COPD excess. Lung cancer risks were significantly and consistently associated with the increase of $O_3$ and CO exceedance counts (to corrected error level -0.017) and less strongly and consistently with $SO_2$ and TSP. $SO_2$ and TSP showed weaker and less consistent relationship. $O_3$ and CO were estimated to increase the risks of lung cancer by 2.04 and 1.46 respectively, the maximal probable risks, derived from comparing more polluted area (95%) with cleaner area (5%). Conclusions : Although not decisive due to potential misclassication of exposure, these results wert drawn by relatively conservative interpretation, and could be used as an evidence of chronic health effect especially for lung cancer. $O_3$ might be a candidate for promoter of lung cancer, while CO should be considered as surrogated measure of motor vehicle emissions. The control selection in this study could have been less appropriate for COPD, and further evaluation with another setting might be necessary.

  • PDF

Development of a complex failure prediction system using Hierarchical Attention Network (Hierarchical Attention Network를 이용한 복합 장애 발생 예측 시스템 개발)

  • Park, Youngchan;An, Sangjun;Kim, Mintae;Kim, Wooju
    • Journal of Intelligence and Information Systems
    • /
    • v.26 no.4
    • /
    • pp.127-148
    • /
    • 2020
  • The data center is a physical environment facility for accommodating computer systems and related components, and is an essential foundation technology for next-generation core industries such as big data, smart factories, wearables, and smart homes. In particular, with the growth of cloud computing, the proportional expansion of the data center infrastructure is inevitable. Monitoring the health of these data center facilities is a way to maintain and manage the system and prevent failure. If a failure occurs in some elements of the facility, it may affect not only the relevant equipment but also other connected equipment, and may cause enormous damage. In particular, IT facilities are irregular due to interdependence and it is difficult to know the cause. In the previous study predicting failure in data center, failure was predicted by looking at a single server as a single state without assuming that the devices were mixed. Therefore, in this study, data center failures were classified into failures occurring inside the server (Outage A) and failures occurring outside the server (Outage B), and focused on analyzing complex failures occurring within the server. Server external failures include power, cooling, user errors, etc. Since such failures can be prevented in the early stages of data center facility construction, various solutions are being developed. On the other hand, the cause of the failure occurring in the server is difficult to determine, and adequate prevention has not yet been achieved. In particular, this is the reason why server failures do not occur singularly, cause other server failures, or receive something that causes failures from other servers. In other words, while the existing studies assumed that it was a single server that did not affect the servers and analyzed the failure, in this study, the failure occurred on the assumption that it had an effect between servers. In order to define the complex failure situation in the data center, failure history data for each equipment existing in the data center was used. There are four major failures considered in this study: Network Node Down, Server Down, Windows Activation Services Down, and Database Management System Service Down. The failures that occur for each device are sorted in chronological order, and when a failure occurs in a specific equipment, if a failure occurs in a specific equipment within 5 minutes from the time of occurrence, it is defined that the failure occurs simultaneously. After configuring the sequence for the devices that have failed at the same time, 5 devices that frequently occur simultaneously within the configured sequence were selected, and the case where the selected devices failed at the same time was confirmed through visualization. Since the server resource information collected for failure analysis is in units of time series and has flow, we used Long Short-term Memory (LSTM), a deep learning algorithm that can predict the next state through the previous state. In addition, unlike a single server, the Hierarchical Attention Network deep learning model structure was used in consideration of the fact that the level of multiple failures for each server is different. This algorithm is a method of increasing the prediction accuracy by giving weight to the server as the impact on the failure increases. The study began with defining the type of failure and selecting the analysis target. In the first experiment, the same collected data was assumed as a single server state and a multiple server state, and compared and analyzed. The second experiment improved the prediction accuracy in the case of a complex server by optimizing each server threshold. In the first experiment, which assumed each of a single server and multiple servers, in the case of a single server, it was predicted that three of the five servers did not have a failure even though the actual failure occurred. However, assuming multiple servers, all five servers were predicted to have failed. As a result of the experiment, the hypothesis that there is an effect between servers is proven. As a result of this study, it was confirmed that the prediction performance was superior when the multiple servers were assumed than when the single server was assumed. In particular, applying the Hierarchical Attention Network algorithm, assuming that the effects of each server will be different, played a role in improving the analysis effect. In addition, by applying a different threshold for each server, the prediction accuracy could be improved. This study showed that failures that are difficult to determine the cause can be predicted through historical data, and a model that can predict failures occurring in servers in data centers is presented. It is expected that the occurrence of disability can be prevented in advance using the results of this study.