• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.30 no.6
• /
• pp.1013-1021
• /
• 2020

Malware Authorship Attribution is a research field for identifying malware by comparing the author characteristics of unknown malware with the characteristics of known malware authors. The authorship attribution method using binaries has the advantage that it is easy to collect and analyze targeted malicious codes, but the scope of using features is limited compared to the method using source code. This limitation has the disadvantage that accuracy decreases for a large number of authors. This study proposes a method of 'Defining semantic features from binaries' and 'Defining allowable ranges for redundant features using the concept of survival network' to complement the limitations in the identification of binary authors. The proposed method defines Opcode-based graph features from binary information, and defines the allowable range for selecting unique features for each author using the concept of a survival network. Through this, it was possible to define the feature definition and feature selection method for each author as a single technology, and through the experiment, it was confirmed that it was possible to derive the same level of accuracy as the source code-based analysis with an improvement of 5.0% accuracy compared to the previous study.

• Journal of Internet Computing and Services
• /
• v.21 no.2
• /
• pp.1-8
• /
• 2020

Recently, the number of APT(Advanced Persistent Threats) attack using malware has been increasing, and research is underway to prevent and detect them. While it is important to detect and block attacks before they occur, it is also important to make an effective response through an accurate analysis for attack case and attack type, these respond which can be determined by analyzing the attack group of such attacks. Therefore, this paper propose a framework based on genetic algorithm for analyzing malware and understanding attacker group's features. The framework uses decompiler and disassembler to extract related code in collected malware, and analyzes information related to author through code analysis. Malware has unique characteristics that only it has, which can be said to be features that can identify the author or attacker groups of that malware. So, we select specific features only having attack group among the various features extracted from binary and source code through the authorship clustering method, and apply genetic algorithm to accurate clustering to infer specific features. Also, we find features which based on characteristics each group of malware authors has that can express each group, and create profiles to verify that the group of authors is correctly clustered. In this paper, we do experiment about author classification using genetic algorithm and finding specific features to express author characteristic. In experiment result, we identified an author classification accuracy of 86% and selected features to be used for authorship analysis among the information extracted through genetic algorithm.

• Journal of Plant Biology
• /
• v.5 no.3
• /
• pp.5-10
• /
• 1962

Studies on the anatomical observation of Bamboos distributed in East-South Asia for systematic botany were scarecely reported except for the morphological studies on Bamboos, which was investigated by Dr. Hiroshi Usui, present author and others. Recently it has been certain that it could be hardly classify some species of bamboo family without this work. For this reason the author reported the anatomical studies on Korean bamboos in 1959, and furthermore the author intended to identify the two species of Pleioblastum Simoni Nakai in Korean bamboos by studying the characteristics of internal structure and qualitative assay of free amino acid containg in Pleioblastus Simoni Nakai(1), (2). In view of fact that there is some differences between two species, it is likely to be identifiable completely different species one another. Furthermore, a lot of characteristics surveyed by the author were as follow: It was reassumed that two species cultivated under same conditions for three years were different alternately in the species of Pleioblastus Simoni Nakai. At the same time, these studies could clarify some evolutional processes of bamboo family. On the other hand, it was found that two species had not only the obvious difference in aerenchyma, the size of thickwalled parenchyma and bulliform cell, but also the internode of Pleioblastus Simoni Nakai(1) is longer than the other, the speed of growing is more rapid, the leaf of former is narrow and that of latter is wide. The free amino acids containg in each species were found as 18 kinds, especially Pleioblastus Simoni Nakai (2) had not Histidine in spite of containg in Pleioblastus Simoni Nakia(1). From the characteristics and the experiments described above, it seemed to the author that Pleioblasus Simoni Nakai (1) which was growing at the region of Ulsan in Korea.

• Journal of Korea Multimedia Society
• /
• v.20 no.3
• /
• pp.533-542
• /
• 2017

Novels include various character names, depending on the genre and the spatio-temporal background of the novels and the nationality of characters. Besides, characters and their names in a novel are created by the author's pen and imagination. As a result, any proper noun dictionary cannot include all kinds of character names. In addition, the novels translated into Korean have character names consisting of two or more nouns (such as "Harry Potter"). In this paper, we propose a method to extract noun phrases for character names and to cluster the noun phrases into coreferents for the same character name. In the extraction of noun phrases, we utilize KKMA morpheme analyzer and CPFoAN character identification tool. In clustering the noun phrases into coreferents, we construct a directed graph with the character names extracted by CPFoAN and the extracted noun phrases, and then we create name sets for characters by traversing connected subgraphs in the directed graph. With four novels translated into Korean, we conduct a survey to evaluate the proposed method. The results show that the proposed method will be useful for speaker identification as well as for constructing the social network of characters.

• Journal of Korean Society of Transportation
• /
• v.23 no.1
• /
• pp.83-92
• /
• 2005

This study if the first trial toward realizing a new methodology for vehicle re-identification based on heterogeneous sensor systems. A major interest of the author is how to effectively utilize information obtained from different sensors to derive accurate and reliable section travel times. The 'blade' sensor that is a newly developed sensor for capturing vehicle wheel information and the existing square loop sensor are employed to extract the inputs of the proposed vehicle re-identification algorithm. The fundamental idea of the algorithm developed in this study, which is so called 'anonumous vehicle re-identification,' it to match vehicle features obtained from both sensors. The results of the algorithm evaluation reveal that the proposed methodology could be successfully implemented in the field. The proposed methodology would be an invaluable tool for operating agencies in support of traffic monitoring systems and traveler information systems.

• Journal of Life Science
• /
• v.10 no.1
• /
• pp.6-9
• /
• 2000

Salmonella typhimurium is a causative agent of the common worldwide disease, salmonellosis. To identify putative invasion genes involved in Samonella infections, a S. typhimurium cosmid library was constructed in noninvasive E. coli DJl. The invasion efficiencies of the cosmid library for cultured HEp-2 and HeLa cells were estimated by tissue-culture invasion assay. 2 out of 1,000 transductants, DHl(pSI623) and DHl(pSI511) were able to invade the cells. Compared to E. coli by DHl(pSI511) increased 25- and 33 fold, respectively. The invasion efficiencies of HeLa cells by DHl(pSI623) increased 31- and 35 fold, respectively. This illustrates that the cosmid clones, DHl(pSI623) and DHl(pSI511) could harbor the invasion determinants derived from genomic DNA of S. typhimurium 82/6915, conferring the invasive characters for the cells.

• Microbiology and Biotechnology Letters
• /
• v.28 no.3
• /
• pp.139-146
• /
• 2000

산업적으로 유용한 미생물 유래 셀룰로오스를 생산 이용하기 위해 전국 각지 양조식초의 덧으로부터 세룰로오스의 생산성이 높고 조질의 균일성을 나타내는 균주를 분리하였다 분리균 GS11은 gram 음성이고 간균(0.6$\times$2.2~3.2 $\mu\textrm{m}$)의형태를 하고 있으며 편모를 가지고 있어 운동성을 보였다. 또한 세포내 지방산 조성은 다량의 불포화 지방산 {{{{ {C}_{18:1} }}}}과 포화지반산 {{{{ {C}_{16:0 } }}}}, {{{{ {C}_{14:0 } }}}} 이 대부분을 차지하였고 DNA 염기조성 (G+C) 함량은 58.4% 이였으며 ubiqunone 은 {{{{ { Q}_{10 } }}}}을 갖는 것으로 나타났다 이러한 형태학적 생리.생화학적 특성의 결과에 따라 본 균주는 Acetobacter xylinum GS11으로 동정되었다 A. xylinum, GS11 의배양기간 동안 셀룰로오스 생산성을 검토하고자 250mL 삼각플라스크에 균주를 접종하여 $30^{\circ}C$에서 12일간 정치배양하였다 그결과 기질인 glucose의 소비는 접종 후 급소하게 감소하여 셀룰로오스 생산에 이용되었으며 셀룰오스의 생산은 배양 9일 경에 2.8g/l로 최대의 생산량을 나타냈다.

• Journal of Oral Medicine and Pain
• /
• v.9 no.1
• /
• pp.157-167
• /
• 1984

A human bite-mark shows special feature according to the suspect's dentition. The teeth which most frequently give useful bite-marks are six upper and lower anteriors, while the premolar teeth somtimes give marks it is often difficult to distinguish. The author tried to classify and to analize the anterior dentition which makes the bite-mark directly by means of 672 maxillary and 691 mandibular stone model taken from Korean adult aging from 17 to 40 years old. The results were as follows : 1. There was no particular correlation between the presence of six normal-shaped and correctly positioned upper and lower anteriors and the presence of rotation of teeth. 2. Inter central incisor, inter lateral incisor, inter canine width and angles of adjecent teeth were not identical eath other in studied models. 3. The results of this analysis supported the statement that any bite-mark had no same feature.

• The Journal of the Korean Society for Microbiology
• /
• v.13 no.1
• /
• pp.37-42
• /
• 1978

Identification and serotyping for 21 strains of V. parahaemolyticus isolated from diarrheal patients in Japan and Indonesia in 1977 were carried out. The results were as follows: 1. The 21 strains were divided into 5 serovars including O1:K56, O4:K4, O4:K8, O4:K12 and O5:K15. 2. Author's experiences on the isolates in Korea also show that there is no particular difference in the distribution pattern of serovars of V. parahaemolyticus among Korea, Japan and Indonesia. In these respects, there was no geographical difference in these countries.

• Journal of Korean Academy of Oral and Maxillofacial Radiology
• /
• v.12 no.1
• /
• pp.63-67
• /
• 1982

The author modified the Aquard 100 head holder device from Denar Co. to be adequate to the Koreans and to enhance the standardization and reproducibility of the temporomandibular joint radiographs. The results were obtained as follows; 1. The projected central ray was at an angle of 25 degrees. 2. Standardization of patients head position was obtained by means of vertical and horizontal bar which were attached to the head holder. 3. Arbitrary 3 points (A.B.C.) which were on the TMJ area of dry skull were measured for the identification of reproducibility. 4. Measured distances in dry skull were as follow; A-B, 28.0±0.25, B-C 11.9±0.25 and C-A 30.4±0.21, in closed position.