• Journal of Korea Multimedia Society
• /
• v.23 no.1
• /
• pp.24-30
• /
• 2020

As the number of internet-connected appliances and the variety of IoT services are rapidly increasing, it is hard to protect IT assets with traditional network security techniques. Most traditional network log analysis systems use rule based mechanisms to reduce the raw logs. But using predefined rules can't detect new attack patterns. So, there is a need for a mechanism to reduce congested raw logs and detect new attack patterns. This paper suggests enterprise security management for IoT services using graph and network measures. We model an event network based on a graph of interconnected logs between network devices and IoT gateways. And we suggest a network clustering algorithm that estimates the attack probability of log clusters and detects new attack patterns.

• Proceedings of the IEEK Conference
• /
• 2006.06a
• /
• pp.869-870
• /
• 2006

In this study, we proposed an algorithm which can detect the walking event in hemiplegic patient using three axis acceleration signal. Twenty hemiplegic patients were participated in an experiment on a level corridor. To evaluate the accuracy, we compared the time difference between the detected event and signal from FSR-Sensor. Consequently, the mean difference of 46.1ms was obtained and it suggests that the proposed method is effective to detect the walking event in hemiplegic patient. In future, these results could be used to evaluate the walking ability in hemiplegic patient in clinical practice.

• Journal of KIISE:Databases
• /
• v.35 no.2
• /
• pp.143-154
• /
• 2008

RFID events are large volume of stream data which come out continuously. Many studies have been done to detect a business event in RFID stream. However, the existing methods have many problems which increase unnecessary operations when business events do not satisfy minimum conditions. In this paper, to remove unnecessary operations, we define the minimum condition of business events and propose an efficient method that detects business events only when the minimum condition is satisfied. To check the minimum condition of business events, we register business queries in a query index. We detect business events using the query index and bitmap. It is shown through various experiment that the proposed method outperforms the existing methods.

• Journal of Internet Computing and Services
• /
• v.20 no.6
• /
• pp.137-142
• /
• 2019

This paper Various services exist to detect and monitor abnormal event. However, most services focus on fires and gas leaks. so It is impossible to prevent and respond to emergency situations for the elderly and severely disabled people living alone. In this study, AI model is designed and compared to detect abnormal event of heart rate signal which is considered to be the most important among various bio signals. Specifically, electrocardiogram (ECG) data is collected using Physionet's MIT-BIH Arrhythmia Database, an open medical data. The collected data is transformed in different ways. We then compare the trained AI model with the modified and ECG data.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.10 no.9
• /
• pp.4307-4325
• /
• 2016

With the aim of solving the problems of long processing times, high memory consumption and low event throughput in the current processing approaches in out-of-order RFID event streams, an efficient complex event processing method based on INFA-HTS (Improved Nondeterministic Finite Automaton-Hash Table Structure) is presented in this paper. The contribution of this paper lies in the fact that we use INFA and HTS to successfully realize the detection of complex events for out-of-order RFID event streams. Specifically, in our scheme, to detect the disorder of out-of-order event streams, we expand the traditional NFA model into a new INFA model to capture the related RFID primitive events from the out-of-order event stream. To high-efficiently manage the large intermediate capturing results, we use the HTS to store and process them. As a result, these problems in the existing methods can be effectively solved by our scheme. The simulation results of our experiments show that our proposed method in this paper outperforms some of the current general processing approaches used to process out-of-order RFID event streams.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.13 no.1
• /
• pp.355-363
• /
• 2012

The Integration of multi-agent architecture and blackboard architecture may lead to a new architecture to cope with new application areas which need some good and strong points of both the architectures. This paper suggests an integrated architecture of blackboard architecture and multi-agent architecture by using event-based implicit invocation pattern and a blackboard event detection mechanism based on Rete network. From the viewpoints of weak couplings of system components and flexible control of knowledge source agents, it is desirable to use the event-based implicit invocation pattern in the integrated architecture. But the pattern itself does not concern the performance of the architecture, and it is very critical to the performance of the integrated architecture to detect efficiently the blackboard events which can activate knowledge source agents which can contribute to the problem-solving processes of the integrated architecture. The integrated architecture suggested in this paper uses a blackboard event detection mechanism based on Rete network to detect efficiently blackboard events which can activate knowledge source agents.

• The Journal of Korean Institute of Communications and Information Sciences
• /
• v.35 no.11A
• /
• pp.1066-1072
• /
• 2010

In this paper we proposed a multi event handling surveillance system using multiple PTZ cameras. One event is assigned to each PTZ camera to detect unusual situation. If a new object appears in the scene while a camera is tracking the old one, it can not handle two objects simultaneously. In the second case that the object moves out of the scene during the tracking, the camera loses the object. In the proposed method, the nearby camera takes the role to trace the new one or detect the lost one in each case. The nearby camera can get the new object location information from old camera and set the seamless event link for the object. Our simulation result shows the continuous camera-to-camera object tracking performance.

• The Journal of Society for e-Business Studies
• /
• v.12 no.2
• /
• pp.219-231
• /
• 2007

Based on a complex event processing technique, an event analysis method for Business Activity Monitoring(BAM) is developed to provide an early warning for on-going events so that process managers effectively detect and monitor potential risks prior to the completion of the events. In this study, process-based event monitoring procedures to extract events with significant risks are presented; Complex event patterns are defined from historical event log data and risks of events are evaluated based on the patterns. A process-based event monitoring architecture for BAM is also presented. The proposed method has been applied to a service process of a home shopping company.

• KIPS Transactions on Software and Data Engineering
• /
• v.4 no.8
• /
• pp.301-308
• /
• 2015

SNS is a web-based online platform service supporting the formation of relations between users. SNS users have usually used a desktop or laptop for this purpose so far. However, the number of SNS users is greatly increasing and their access to the web is improving with the spread of smart phones. They share their daily lives with other users through SNSs. We can detect events if we analyze the contents that are left by SNS users, where the individual acts as a sensor. Such analyses have already been attempted by many researchers. In particular, Twitter is used in related spheres in various ways, because it has structural characteristics suitable for detecting events. However, there is a limitation concerning the detection of events and their locations. Thus, we developed a system that can detect the location immediately based on the district mentioned in Twitter. We tested whether the system can function in real time and evaluated its ability to detect events that occurred in reality. We also tried to improve its detection efficiency by removing noise.

• Journal of The Korean Astronomical Society
• /
• v.33 no.2
• /
• pp.89-95
• /
• 2000

As an efficient method to detect blending of general gravitational microlensing events, it is proposed to measure the shift of source star image centroid caused by microlensing. The conventional method to detect blending by this method is measuring the difference between the positions of the source star image point spread function measured on the images taken before and during the event (the PSF centroid shift, ${\delta}{\theta}$c,PSF). In this paper, we investigate the difference between the centroid positions measured on the reference and the subtracted images obtained by using the difference image analysis method (DIA centroid shift, ${\delta}{\theta}$c.DIA), and evaluate its relative usefulness in detecting blending over the conventional method based on ${\delta}{\theta}$c,PSF measurements. From this investigation, we find that the DIA centroid shift of an event is always larger than the PSF centroid shift. We also find that while ${\delta}{\theta}$c,PSF becomes smaller as the event amplification decreases, ${\delta}{\theta}$c.DIA remains constant regardless of the amplification. In addition, while ${\delta}{\theta}$c,DIA linearly increases with the increasing value of the blended light fraction, ${\delta}{\theta}$c,PSF peaks at a certain value of the blended light fraction and then eventually decreases as the fraction further increases. Therefore, measurements of ${\delta}{\theta}$c,DIA instead of ${\delta}{\theta}$c,PSF will be an even more efficient method to detect the blending effect of especially of highly blended events, for which the uncertainties in the determined time scales are high, as well as of low amplification events, for which the current method is highly inefficient.