• Title/Summary/Keyword: HTTP/S

Search Result 361, Processing Time 0.059 seconds

Web Application Attack Prevention by Traffic Analysis (트래픽 분석에 의한 웹 어플리케이션 공격 방지)

  • Chang, Moon-Soo;Oh, Chang-Suk
    • Journal of the Korea Society of Computer and Information
    • /
    • v.13 no.3
    • /
    • pp.139-146
    • /
    • 2008
  • Despite of information security installation, leakage of personal information in web services has not decreased. This is because traffics to web applications are still vulnerable by permitting external sources to access services in port HTTF 80 and HTTPS 443, even with firewall systems in place. This thesis analyzes various attack patterns resulted from web service environment and vulnerable traffic and categorizes the traffics into normal and abnormal traffics. Also this proposes ways to analyze web application attack patterns from those abnormal traffics based on weak points warned in OWASF(Open Web Application Security Project), design a system capable of detect and isolate attacks in real time, and increase efficiency of preventing attacks.

  • PDF

A Vulnerability Analysis of Paid Live Streaming Services Using Their Android Applications (안드로이드 앱을 이용한 실시간 유료 방송 취약점 분석)

  • Choi, Hyunjae;Kim, Hyoungshick
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.26 no.6
    • /
    • pp.1505-1511
    • /
    • 2016
  • Live streaming is a method to provide media service by sending recoded media to a user's video player. In order to provide video and audio contents in real-time for a large number of users simultaneously, live streaming compatible protocols such as RTMP (Real Time Messaging Protocol), HLS (Http Live Streaming), are required. In this paper, we analyzed vulnerability of paid live streaming services with the captured packets from the applications used by six major OTT (over-the-top) companies in Korea supporting live streaming services. We found that streaming channels were not encrypted and access control mechanisms were not properly used. Thus, guest users can freely use paid live streaming services.

The Gateway for Internet Server Implementation using Dynamic IP Address (동적 IP Address를 사용하는 인터넷 서버 구축을 위한 게이트웨이)

  • Kim, Won-Jung;Yang, Hyeon-Taek
    • The KIPS Transactions:PartD
    • /
    • v.9D no.1
    • /
    • pp.145-152
    • /
    • 2002
  • Recently most of the home and small-size company use ADSL(Asymmetric Digital subscriber Line) or Cable Modem for using Internet Services. The number of Internet IP Address in current Internet IP Address System(IPv4) that is consisted of 4byte is almost empty, so generally the IP Address assigned dynamically is used. This way is just OK in general uses, but not OK in Internet Servers operation. This paper designed the gateway(Gate-D) system which is enable any system that get IP Address assigned dynamically to serve Internet Server Services(Telnet, FTP, HTTP, Mail, etc …), and made sure the worth by using Telnet Server.

ECA Rule-Based Timely Collaboration of Web-Based Distributed Business Systems (웹기반 분산 기업 시스템을 위한 ECA 규칙 기반 적기 협력방법)

  • Lee, Dong-Woo;Lee, Seong-Hoon
    • Journal of the Korea Society of Computer and Information
    • /
    • v.10 no.4 s.36
    • /
    • pp.345-354
    • /
    • 2005
  • In this paper collaboration of web-based distributed business systems is analyzed and the need of timely collaboration is derived and described in terms of inter-organizational contracts. A method of event-condition-action (ECA) rule based timely collaboration to meet the need and an active functionality component (AFC) to provide the method are proposed. The proposed method supports high level rule programming and event-based immediate processing so that system administrators and programmers can easily maintain the timely collaboration independently to the application logic. The proposed AFC uses HTTP protocol to be applied through firewalls. It is implemented using basic trigger facilities of a commercial DBMS for practical purpose.

  • PDF

Remotely controlled Interactive Magnetic Resonance Imaging in Network Environment (Network을 이용한 원격 핵자기 공명 영상)

  • Park, J.I.;Kim, C.Y.;Park, D.J.;Ryu, W.S.;Ahn, C.B.
    • Proceedings of the KIEE Conference
    • /
    • 1996.07b
    • /
    • pp.1383-1385
    • /
    • 1996
  • A network based interactive magnetic resonance imaging (MRI) system has been developed using the World Wide Web. For this purpose, an HTTP server is developed on the host computer of the MRI system. Capabilities of video and audio conferencing are included for monitoring experiment. Using the developed system. MRI imaging has been successfully carried out at the Signal Processing Lab in the Kwangwoon University with the remote MRI system located at the Medical Image Research Center at the KAIST in Daejon.

  • PDF

Remotly control led Interactive Magnetic Resonance Imaging using the World Wide Web (World Wide Web을 이용한 원격제어 자기 공명 영상)

  • Ahn, C.B.;Park, J.I.;Kim, C.Y.;Park, D.J.;Ryu, W.S.;Oh, C.H.;Lee, H.K.
    • Proceedings of the KOSOMBE Conference
    • /
    • v.1996 no.05
    • /
    • pp.139-142
    • /
    • 1996
  • A remotly controlled interactive magnetic resonance imaging (MRI) has been tried using the World Wide Web. For this purpose, an HTTP server is developed on the host computer of the MRI system. Video and audio conferencing capability is also included for the experiment. Using the developed system, MRI imaging has been successfully carried out at the Signal Processing Lab in the Kwangwoon University with the remote MRI system located at the Medical Image Research Center in the KAIST in Daejon.

  • PDF

A Study on the DAISY Service Interface for the Print-Disabled (독서장애인을 위한 DAISY 서비스 인터페이스 구성에 관한 연구)

  • Bae, Kyung-Jae
    • Journal of the Korean BIBLIA Society for library and Information Science
    • /
    • v.22 no.3
    • /
    • pp.173-188
    • /
    • 2011
  • This research intended to identify empirical recommendations for designing the DAISY service interface and used a case-based method. The case of this research was LG Digital Talking Book Library(http://voice.lg.or.kr) of LG Sangnam Library. A group of experts evaluated the current DAISY interface serviced by the web. After evaluation, major recommendations were suggested and these recommendations were used to develop the new DAISY Interface. Major recommendations were consideration of the reading flow of the screen-reader program, prevention of perception as an error about the time delay, development of web-based software, support for convenient functions and prevention of shortcut key overlap and so on.

A Study on Invasion of Privacy and Right to be forgotten by Internet Cookie Technology (인터넷 쿠키로 인한 프라이버시 침해와 잊혀질 권리에 관한 연구)

  • Choi, Younsung;Kwon, Oh-Geol;Won, Dongho
    • Journal of Internet Computing and Services
    • /
    • v.17 no.2
    • /
    • pp.77-85
    • /
    • 2016
  • Internet cookie technology is designed for solving unreliable problem of HTTP's inherent property and notifying user's previous activity to web site's server, so it is useful to provide suitable service for individual user. However, the cookie techniques are becoming more sophisticated such as the third cookie and super cookie. And its included information is applied for advertisement and target marketing strategy, so the problem occurs that user's personal information is collected excessively. However, our law does not recognize the internet cookie as personal information so user cannot know where own internet cookie is stored and applicable. Therefore, in this paper, we explain the internet cookie technology, the privacy invasion and right to be forgotten for solving problem due to the internet cookie. And we analysis the relationship between the information of internet cookie and personal information, and then present the improvement requirement on the law and technology to use internet cookie securely and conveniently.

Reexamination of foreign collector's sites and exploration routes in Korea (IV) - with respect to T. Ishidoya (외국인의 한반도 식물 채집행적과 지명 재고(IV): Tstomu Ishidoya 석호곡면(石戶谷勉))

  • Chang, Chin-Sung;Chang, Kae-Sun
    • Korean Journal of Plant Taxonomy
    • /
    • v.40 no.2
    • /
    • pp.90-104
    • /
    • 2010
  • Tstomu Ishidoya (1891-1958), a Japanese taxonomist and pharmacognosist, conducted his plant explorations on the Korean peninsula from 1911 to 1943. Especially from 1912 to 1923 Ishidoya, as a governmentemployee of Chosen Governor-General collected numerous specimens of woody plants which were later studied by T. Nakai. Collection numbers totalling 6,487 (= collections) were recorded according to Nakai's studies, while only 1,350 speciemens are confirmed to be preserved now in three Japanese herbaria (Tokyo Universtiy, Kyoto University and National Museum of Nature and Science). All collection sites were described by Nakai using romanized characters with Japanese pronunciation. For this study, one hundred seventy three locality names were reviewed using those of Ishidoya's specimens that are deposited at TI, KYO, and TNS; the database, Korean Biodiversity Information System (http://www.nature.go.kr), and the articles and literature of Nakai and Ishidoya. These are listed in the order of his collection dates.

A Method for Gene Group Analysis and Its Application (유전자군 분석의 방법론과 응용)

  • Lee, Tae-Won;Delongchamp, Robert R.
    • The Korean Journal of Applied Statistics
    • /
    • v.25 no.2
    • /
    • pp.269-277
    • /
    • 2012
  • In microarray data analysis, recent efforts have focused on the discovery of gene sets from a pathway or functional categories such as Gene Ontology terms(GO terms) rather than on individual gene function for its direct interpretation of genome-wide expression data. We introduce a meta-analysis method that combines $p$-values for changes of each gene in the group. The method measures the significance of overall treatment-induced change in a gene group. An application of the method to a real data demonstrates that it has benefits over other statistical methods such as Fisher's exact test and permutation methods. The method is implemented in a SAS program and it is available on the author's homepage(http://cafe.daum.net/go.analysis).