• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.28 no.4
• /
• pp.963-974
• /
• 2018

With the growing interest in cryptocurrency such as bitcoin, the blockchain technology has attracted much attention in various applications as a distributed security platform with excellent security. However, Cryptojacking, an attack that hijack other computer resources such as CPUs, has occured due to vulnerability to the Cryptomining process. In particular, browser-based Cryptojacking is considered serious because attacks can occur only by visiting a Web site without installing it on a visitor's PC. The current Cryptojacking detection system is mostly signature-based. Signature-based detection methods have problems in that they can not detect a new Cryptomining code or a modification of existing Cryptomining code. In this paper, we propose a Cryptojacking detection solution using a dynamic analysis-based that uses a headless browser to detect unknown Cryptojacking attacks. The proposed dynamic analysis-based Cryptojacking detection system can detect new Cryptojacking site that cannot be detected in existing signature-based Cryptojacking detection system and can detect it even if it is called or obfuscated by bypassing Cryptomining code.

• Information Systems Review
• /
• v.22 no.4
• /
• pp.135-161
• /
• 2020

With the growth of blockchain and cryptocurrency-related markets, cryptocurrency exchanges are growing as a new industry. However, as the legal and regulatory definitions of cryptocurrencies are still in progress, unlike existing industrial groups, they are not under the supervision of regulatory agencies. As a result, users (i.e., cryptocurrency investors) have suffered two types of damage that could occur from hacking and other accidents on the exchanges. One type of the damage is the loss of assets caused by the extortion of personal information or account and the other is the damage from users who might be involved in external frauds. Both are analyzed in comparison with existing operators whose functions are like the exchanges. The results of this study show that membership (KYC: Know Your Client), log-in, and additional authentication in transactions are on the similar level to those of the operators while the fraud detection system (FDS) and anti-money laundering (AML) of fiat currencies and cryptocurrencies need rapid improvement.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2019.05a
• /
• pp.705-708
• /
• 2019

본 논문에서는 블록체인 기반의 주유소 시스템을 제안하였다. 매년 주유소에서 발생하는 대표적인 불법 행위인 경유와 등유를 섞어 제조한 가짜 석유 판매 및 정량 미달 기름 판매를 막기 위해 주유소 기름의 이상 여부를 확인하는 시스템을 이더리움 블록체인의 스마트 컨트랙트를 통해 구현하였다. 시스템의 적용을 보이기 위해 가상의 주유소를 웹페이지로 구현하였으며, 시스템과 기기들 간의 상호작용을 확인하였다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2019.10a
• /
• pp.723-725
• /
• 2019

이 시스템은 미래 혁신 기술로 각광받고 있는 블록체인 기술의 특징을 이용하여 사용자들의 거래 내역을 블록화 하여 보안성을 강화하고 결재정보나 개인정보를 보호해서 안정성을 추구하며 블록체인에서 구현하기 어려운 결제의 불완전성을 극복하려는 시스템이다. 본 논문에서는 이러한 시스템을 설계한 과정 중에 일부분인 블록체인의 유효성검사, 블록 저장한 화면들을 보여주고 설명하고 있다.

• Proceedings of the Korean Society of Broadcast Engineers Conference
• /
• 2019.06a
• /
• pp.288-290
• /
• 2019

본 논문에서는 블록체인 및 암호화폐(토큰)를 이용해 미디어사물인터넷 내 카메라로부터의 비디오 스트리밍 서비스를 제공하는 시스템을 제안한다. 사용자가 분산형 애플리케이션을 통해 블록체인 상에 작성되어 있는 스마트 컨트랙트의 계약조건에 따라 토큰을 지불하고, 토큰을 지불 받은 IP 카메라는 촬영하고 있는 동영상을 실시간으로 사용자에게 스트리밍하는 시나리오를 구성하였다. 블록체인 카메라 스트리밍 서비스의 가능성을 알아보기 위해, 이더리움 기반의 블록체인 위에 스트리밍 서비스를 위한 스마트 컨트랙트를 업로드하고, 거래에 필요한 ERC20 토큰을 제작하여 시스템을 구현하였다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2022.11a
• /
• pp.255-256
• /
• 2022

임상의사결정지원시스템(Clinical Decision Support System)은 환자의 질병을 진단하고 치료할 때 의사결정을 도와주는 시스템이다.[1] 본 논문에서는 블록체인과 XAI 기술을 활용해 임상의사결정지원시스템의 아키텍처를 제안한다. 제안 아키텍처는 데이터의 중앙화, 의료데이터의 보안을 블록체인기술로 해결하고 블록체인을 기반으로 한 보반 기술인 DID 기술을 활용해 데이터의 신뢰성과 보안성을 확보하였다. 또한 XAI 모듈을 활용해 예측 결과의 신뢰도와 투명성도 제공해 의료인의 의사결정을 지원하였다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2019.05a
• /
• pp.137-140
• /
• 2019

연구자들의 연구 결과를 공유하는 논문은 학회에 제출되어 심사를 거친 뒤 정식으로 등록된다. 이러한 과정에서 심사는 연구 윤리를 지키기 위해, 학회의 가치를 높이기 위해 시행되는 필수적인 과정이다. 하지만 이러한 심사 관리 과정에서 다양한 문제가 지속적으로 발생하고 있다. 본 논문에서는 기존의 시스템에서 발생하는 문제들을 해결함과 동시에 비용적인 면에서도 효율성을 제공하는 블록체인 기반의 논문 심사 시스템을 제안한다.

• Proceedings of the Korean Institute of Information and Commucation Sciences Conference
• /
• 2021.10a
• /
• pp.582-583
• /
• 2021

As the production of new and renewable energy such as solar and wind power has diversified, microgrid systems that can simultaneously produce and consume have been introduced. . In general, a decrease in electricity prices through solar power is expected in summer, so producer protection is required. In this paper, we propose a transparent and safe gift power transaction system between users using blockchain in a microgrid environment. A futures is simply a contract in which the buyer is obligated to buy electricity or the seller is obliged to sell electricity at a fixed price and a predetermined futures price. This system proposes a futures trading algorithm that searches for futures prices and concludes power transactions with automated operations without user intervention by using a smart contract, a reliable executable code within the blockchain network. If a power producer thinks that the price during the peak production period (Hajj) is likely to decrease during production planning, it sells futures first in the futures market and buys back futures during the peak production period (Haj) to make a profit in the spot market. losses can be compensated. In addition, if there is a risk that the price of electricity will rise when a sales contract is concluded, a broker can compensate for a loss in the spot market by first buying futures in the futures market and liquidating futures when the sales contract is fulfilled.

• Journal of the Korea Convergence Society
• /
• v.11 no.3
• /
• pp.27-35
• /
• 2020

The purpose of this study is to study the technical implementation methods to prevent problems such as the record of important educational activities of the student life record department or the continuous illegal leakage and manipulation. To this end, in this paper, by applying a private blockchain that can be participated only by a given organization or individual, it prevents outsiders from participating in the block network, and creates legitimate authority by creating two types of block data: student information block and access record block in the life record book. We proposed a block mechanism that can be registered, modified, and accessed only by authorized staff members. As a result, we have prepared an alternative to prevent forgery and alteration of the living records by third parties and to secure the integrity of the living records. If applied to the educational administrative information system, social consensus will be established that the operation and management of the life record book is reliable.

• Journal of Advanced Navigation Technology
• /
• v.25 no.5
• /
• pp.415-425
• /
• 2021

In line with the trend of the digital transformation, the financial sector is providing financial services with new technologies. Among them, the open banking, which is drawing attention from global financial industry, is a service environment that maximizes customers' convenience and data utilization. In addition, the shift in the digital paradigm has also increased anxiety that security problems such as hacking and information leakage caused by data sharing are also concerned. A failure to overcome the negative view will hinder the development of financial services. This study presents a security governance system that can safely and comprehensively manage data in a digital financial ecosystem. This prepares a technical application plan by presenting a digital financial security architecture to field workers, focusing on the open banking service environment. It can be seen that this study is worthwhile by presenting a comprehensive information protection system that allows financial IT to introduce and utilize open banking services in a changing environment.