• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.7 no.3
• /
• pp.576-599
• /
• 2013

Protocol reverse engineering is useful for many security applications, including intelligent fuzzing, intrusion detection and fingerprint generation. Since manual reverse engineering is a time-consuming and tedious process, a number of automatic techniques have been proposed. However, the accuracy of these techniques is limited due to the complexity of binary instructions, and the derived formats have missed constraints that are critical for security applications. In this paper, we propose a new approach for protocol format extraction. Our approach reasons about only the evaluation behavior of a program on the input message from concolic execution, and enables field identification and constraint inference with high accuracy. Moreover, it performs binary analysis with low complexity by reducing modern instruction sets to BIL, a small, well-specified and architecture-independent language. We have implemented our approach into a system called Icefex and evaluated it over real-world implementations of DNS, eDonkey, FTP, HTTP and McAfee ePO protocols. Experimental results show that our approach is more accurate and effective at extracting protocol formats than other approaches.

• Analytical Science and Technology
• /
• v.33 no.2
• /
• pp.86-97
• /
• 2020

Reconstruction and separation of explosive-contaminated overlapping fingerprints constitutes an analytical challenge of high significance in forensic sciences. Laser-induced breakdown spectroscopy (LIBS) allows real-time chemical mapping by detecting the light emissions from laser-induced plasma and can offer powerful means of fingerprint classification based on the chemical components of the sample. During recent years LIBS has been studied one of the spectroscopic techniques with larger capability for forensic sciences. However, despite of the great sensitivity, LIBS suffers from a limited detection due to difficulties in reconstruction of overlapping fingerprints. Here, the authors propose a simple, yet effective, method of using chemical mapping to separate and reconstruct the explosive-contaminated, overlapping fingerprints. A Q-switched Nd:YAG laser system (1064 nm), which allows the laser beam diameter and the area of the ablated crater to be controlled, was used to analyze the chemical compositions of eight samples of explosive-contaminated fingerprints (featuring two sample explosive and four individuals) via the LIBS. Then, the chemical validations were further performed by applying the Raman spectroscopy. The results were subjected to principal component and partial least-squares multivariate analyses, and showed the classification of contaminated fingerprints at higher than 91% accuracy. Robustness and sensitivity tests indicate that the novel method used here is effective for separating and reconstructing the overlapping fingerprints with explosive trace.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.13 no.2
• /
• pp.892-911
• /
• 2019

Biometric recognition systems have been widely used for information security. Among the most popular biometric traits, there are fingerprint and face due to their high recognition accuracies. However, the security system that uses face recognition as the login method are vulnerable to face-spoofing attacks, from using printed photo or video of the valid user. In this study, we propose a fast and robust method to detect face-spoofing attacks based on the analysis of spatial frequency differences between the real and fake videos. We found that the effect of a spoofing attack stands out more prominently in certain regions of the 2D Fourier spectra and, therefore, it is adequate to use the information about those regions to classify the input video or image as real or fake. We adopt a divide-conquer-aggregate approach, where we first divide the frequency domain image into local blocks, classify each local block independently, and then aggregate all the classification results by the weighted-sum approach. The effectiveness of the methodology is demonstrated using two different publicly available databases, namely: 1) Replay Attack Database and 2) CASIA-Face Anti-Spoofing Database. Experimental results show that the proposed method provides state-of-the-art performance by processing fewer frames of each video.

• Journal of Sensor Science and Technology
• /
• v.11 no.5
• /
• pp.255-262
• /
• 2002

Human retina is able to detect the edge of an object effectively. We designed a CMOS vision chip by modeling cells of the retina as hardwares involved in edge detection. There are several fluctuation factors which affect characteristics of MOSFETs during CMOS fabrication process and this effect appears as output offset of the vision chip which is composed of pixel arrays and readout circuits. The vision chip detecting edge information from input image is used for input stage of other systems. Therefore, the output offset of a vision chip determine the efficiency of the entire performance of a system. In order to eliminate the offset at the output stage, we designed a vision chip by using CDS(Correlated Double Sampling) technique. Using standard CMOS process, it is possible to integrate with other circuits. Having reliable output characteristics, this chip can be used at the input stage for many applications, like targe tracking system, fingerprint recognition system, human-friendly robot system and etc.

• Journal of Korea Multimedia Society
• /
• v.8 no.7
• /
• pp.898-905
• /
• 2005

Iris recognition Is that identifies a user based on the unique iris muscle patterns which has the functionalities of dilating or contracting pupil region. Because it is reported that iris recognition is more accurate than other biometries such as face, fingerprint, vein and speaker recognition, iris recognition is widely used in the high security application domain. However, if unnecessary information such as eyelid and eyelash is included in iris region, the error for iris recognition is increased, consequently. In detail, if iris region is used to generate iris code including eyelash and eyelid, the iris codes are also changed and the error rate is increased. To overcome such problem, we propose the method of detecting eyelid by using pyramid searching parabolic deformable template. In addition, we detect the eyelash by using the eyelash mask. Experimental results show that EER(Equal Error Rate) for iris recognition using the proposed algorithm is lessened as much as $0.3\%$ compared to that not using it.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.22 no.5
• /
• pp.734-739
• /
• 2018

Fingerprint recognition and iris recognition, which are one of the biometric methods, are easily influenced by external factors such as sunlight. Recently, finger vein recognition is used as a method utilizing internal features. However, for accurate finger vein recognition, it is important to clearly separate vein and background regions. However, it is difficult to separate the vein region and background region due to the abnormalized illumination, and a method of separating the vein region and the background region after normalized the illumination of the input image has been proposed. In this paper, we proposed a method to enhance the quality improvement and improve the processing time compared to the existing finger vein recognition system binarization and labeling method of the image including the image stretching process based on the existing illumination normalization method.

• Proceedings of the Korean Society for Food Science of Animal Resources Conference
• /
• 2006.05a
• /
• pp.179-183
• /
• 2006

Denaturing high-performance liquid chromatography(DHPLC) is used in a wide variety of genetic applications and is an efficient method for detection of mutations involving one or a few nucleotides. We developed a high-throughput DHPLC method for identifying polymorphisms in the MC1R gene that are characteristic of Hanwoo cattle. We compared 10 tissue samples from Hanwoo cattle, 10 samples from Holstein cattle and 10 samples from Hanwoox Holstein crossbred cattle to determine whether DHPLC analysis can be used to distinguish between these genotypes. Samples obtained from Hanwoo cattle had a unique profile of peaks that could be used as a molecular fingerprint for this breed. We also analyzed two hundred samples in a trial in which we were blinded to the genotype of the samples and correctly identified the breed-of-origin of 594 out of 600 sequence variations(99%).

• The Plant Pathology Journal
• /
• v.34 no.5
• /
• pp.381-392
• /
• 2018

Clavibacter michiganensis subsp. michiganesis (Cmm) is a quarantine-worthy pest in $M{\acute{e}}xico$. The implementation and validation of new technologies is necessary to reduce the time for bacterial detection in laboratory conditions and Raman spectroscopy is an ambitious technology that has all of the features needed to characterize and identify bacteria. Under controlled conditions a contagion process was induced with Cmm, the disease epidemiology was monitored. Micro-Raman spectroscopy ($532nm\;{\lambda}$ laser) technique was evaluated its performance at assisting on Cmm detection through its characteristic Raman spectrum fingerprint. Our experiment was conducted with tomato plants in a completely randomized block experimental design (13 plants ${\times}$ 4 rows). The Cmm infection was confirmed by 16S rDNA and plants showed symptoms from 48 to 72 h after inoculation, the evolution of the incidence and severity on plant population varied over time and it kept an aggregated spatial pattern. The contagion process reached 79% just 24 days after the epidemic was induced. Micro-Raman spectroscopy proved its speed, efficiency and usefulness as a non-destructive method for the preliminary detection of Cmm. Carotenoid specific bands with wavelengths at 1146 and $1510cm^{-1}$ were the distinguishable markers. Chemometric analyses showed the best performance by the implementation of PCA-LDA supervised classification algorithms applied over Raman spectrum data with 100% of performance in metrics of classifiers (sensitivity, specificity, accuracy, negative and positive predictive value) that allowed us to differentiate Cmm from other endophytic bacteria (Bacillus and Pantoea). The unsupervised KMeans algorithm showed good performance (100, 96, 98, 91 y 100%, respectively).

• Analytical Science and Technology
• /
• v.27 no.3
• /
• pp.147-152
• /
• 2014

RUVIS(Reflective Ultraviolet Imaging System) is an effective equipment that detects the location of latent fingerprint at crime scene using short wavelength ultraviolet of 254 nm. In this study, the degree of DNA damage in biological samples was compared depending on the distance and time of processing using four commonly used RUVIS. 50% of DNA was damaged by treating 10 seconds at 10 cm distance in 3 types of RUVIS such as Police RUVIS, SIRCHIE mini light and SIRCHIE RUVIS. In addition, the degree of DNA damage was increased as the distance was closer and the treatment time was longer. It showed that short wavelength UV could cause DNA damage when used close to the samples at crime scene. Therefore, it was suggested to use RUVIS at a distance of at least 1 m. The degree of DNA damage was not significant by Polilight which used long wavelength ultraviolet of 350 nm. As a result, the choice and usage of which UV light and RUVIS were critical for detection of fingerprint and successful DNA typing.

• Journal of Radiation Protection and Research
• /
• v.35 no.3
• /
• pp.117-123
• /
• 2010

Plutonium is by far the most important of the transuranic elements which have been released into the environment due to radio-toxicity and long term radiation effects on humans. And Pu isotope ratio ($^{240}Pu/^{239}Pu$) is of great interest because this ratio is used as a fingerprint for different sources. Mass spectrometry has been used as an useful atom counting technique with several advantages over decay counting techniques for the determination of Pu isotopes. It enables a determination of Pu isotope ratio in the environmental samples with a low detection limit and a short determination time. An ICP-MS is the representative mass spectrometry for Pu determination. In this study, the precision of $^{240}Pu/^{239}Pu$ isotope ratio was improved by using 4 multiple ion counters of MC-ICP-MS. The detection limit of $^{239}Pu$ and $^{240}Pu$ were $0.10\;fg\;ml^{-1}$ ($0.24\;{\mu}Bq\;ml^{-1}$), $0.12\;fg\;ml^{-1}$ ($0.97\;{\mu}Bq\;ml^{-1}$), respectively. The relative standard deviation of $^{240}Pu/^{239}Pu$ isotope ratio was less than 1 % in trace level. The various reference materials (seawater, soil and sediment) were analyzed to verify this method and their analytical results were in good agreement with the certified (or recommended value) value.