• Journal of Platform Technology
• /
• v.11 no.2
• /
• pp.15-25
• /
• 2023

This study analyzes the limitations of the insider threat datasets used for insider threat detection research and compares and analyzes the solution-based insider threat data with public insider threat data using a security solution to overcome this. Through this, we design a data format suitable for insider threat detection and implement a system that can safely share insider threat information between different institutions and companies using blockchain technology. Currently, there is no dataset collected based on actual events in the insider threat dataset that is revealed to researchers. Public datasets are virtual synthetic data randomly created for research, and when used as a learning model, there are many limitations in the real environment. In this study, to improve these limitations, a private blockchain was designed to secure information sharing between institutions of different affiliations, and a method was derived to increase reliability and maintain information integrity and consistency through agreement and verification among participants. The proposed method is expected to collect data through an outflow threat collector and collect quality data sets that posed a threat, not synthetic data, through a blockchain-based sharing system, to solve the current outflow threat dataset problem and contribute to the insider threat detection model in the future.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2020.07a
• /
• pp.41-44
• /
• 2020

최근 허가형 블록체인 기반 프로젝트가 늘어남에 따라, 블록체인 솔루션과 여러 응용 프로그램을 개발하기 위한 플랫폼인 하이퍼레저 패브릭을 도입하는 회사들이 많아지고 있다. 그러나 하이퍼레저 패브릭 네트워크 구성 시, 각 구성요소의 네트워크 지연 시간을 고려하지 않고 네트워크를 구성하면 트랜잭션 보증 시간이 늘어날 수 있다. 본 논문에서는 하이퍼레저 패브릭 네트워크에서 각 구성요소 간 네트워크 지연 시간 차이를 고려하여 트랜잭션 보증 시간을 줄이는 방법을 제안한다. 라우팅 테이블을 수정하여 네트워크 지연 시간 차이를 발생시켰고, 지연 시간과 트랜잭션 보증 시 걸리는 시간을 합산하여 트랜잭션 보증 시간을 측정하였다. 실험을 통해, 기존 방법의 트랜잭션 보증 시간보다 제안한 방법의 트랜잭션 보증 시간이 약 1/3 정도 감소하는 것을 확인하였다.

• Journal of the Korea Institute of Information and Communication Engineering
• /
• v.25 no.3
• /
• pp.440-448
• /
• 2021

This paper presents problems of network technology in smart grid and implements a blockchain-based LoRa multi-hop network to solve them. Since some smart grid applications are operated in harsh environments, it is difficult to establish communication infrastructure. We propose a LoRa network with multi-hop using the Flooding routing protocol. Smart grid environment composes an independent network using various power grid protocols depending on the application. Since this has a problem that an independent infrastructure must be established for each network, a single gateway device supports multiple power grid protocols to implement a method for network integration. Lastly, the author applied Hyperledger-based blockchain to the LoRa network to ensure the integrity of data in a smart grid environment, and strengthened security by physically distributing it. After constructing the three suggestions on the actual test bed, we confirmed that the network operates normally through experiments.

• KSII Transactions on Internet and Information Systems (TIIS)
• /
• v.17 no.3
• /
• pp.958-979
• /
• 2023

Due to laws, regulations, privacy, etc., between 70-90 percent of providers do not share medical data, forming a "data island". It is essential to collaborate across multiple institutions without sharing patient data. Most existing methods adopt distributed learning and centralized federal architecture to solve this problem, but there are problems of resource heterogeneity and data heterogeneity in the practical application process. This paper proposes a collaborative deep learning modelling method based on the blockchain network. The training process uses encryption parameters to replace the original remote source data transmission to protect privacy. Hyperledger Fabric blockchain is adopted to realize that the parties are not restricted by the third-party authoritative verification end. To a certain extent, the distrust and single point of failure caused by the centralized system are avoided. The aggregation algorithm uses the FedProx algorithm to solve the problem of device heterogeneity and data heterogeneity. The experiments show that the maximum improvement of segmentation accuracy in the collaborative training mode proposed in this paper is 11.179% compared to local training. In the sequential training mode, the average accuracy improvement is greater than 7%. In the parallel training mode, the average accuracy improvement is greater than 8%. The experimental results show that the model proposed in this paper can solve the current problem of centralized modelling of multicenter data. In particular, it provides ideas to solve privacy protection and break "data silos", and protects all data.

• International Journal of Computer Science & Network Security
• /
• v.23 no.10
• /
• pp.147-156
• /
• 2023

Electronic voting machines (EVMs) are replacing research ballots due to the errors involved in the manual counting process and the lengthy time required to count the votes. Even though these digital recording electronic systems are advancements, they are vulnerable to tampering and electoral fraud. The suspected vulnerabilities in EVMs are the possibility of tampering with the EVM's memory chip or replacing it with a fake one, their simplicity, which allows them to be tampered with without requiring much skill, and the possibility of double voting. The vote data is shared among all network devices, and peer-to-peer verification is performed to ensure the vote data's authenticity. To successfully tamper with the system, all of the data stored in the nodes must be changed. This improves the proposed system's efficiency and dependability. Elections and voting are fundamental components of a democratic system. Various attempts have been made to make modern elections more flexible by utilizing digital technologies. The fundamental characteristics of free and fair elections are intractability, immutability, transparency, and the privacy of the actors involved. This corresponds to a few of the many characteristics of blockchain-like decentralized ownership, such as chain immutability, anonymity, and distributed ledger. This working research attempts to conduct a comparative analysis of various blockchain technologies in development and propose a 'Blockchain-based Electronic Voting System' solution by weighing these technologies based on the need for the proposed solution. The primary goal of this research is to present a robust blockchain-based election mechanism that is not only reliable but also adaptable to current needs.

• Journal of Internet Computing and Services
• /
• v.20 no.6
• /
• pp.105-117
• /
• 2019

Bitcoin, which can be classified as a cryptocurrency, has attracted attention from various industries because it is an innovative digital currency and the beginning of a Blockchain system. However, as the research on Bitcoin progressed, several security vulnerabilities and possible attacks were analyzed. Among them, the security problem caused by the transparency of the Blockchain database prevents the Blockchain system from being applied to various fields. This vulnerability is further classified as the weak anonymity of participating nodes and privacy problem due to disclosure of transaction details. In recent years, several countermeasures have been developed against these vulnerabilities. In this paper, we first describe the main features of the public and private Blockchain, and explain privacy, unlinkability and anonymity. And, three public Blockchain platforms, Dash, Zcash and Monero which are derived from Bitcoin, and Hyperledger Fabric which is a private Blockchain platform, are examined. And we analyze the operating principles of the protocols applied on each platform. In addition, we classify the applied technologies into anonymity and privacy protection in detail, analyze the advantages and disadvantages, and compare the features and relative performance of the platforms based on the computational speed of the applied cryptographic mechanisms.

• Proceedings of the Korean Society of Computer Information Conference
• /
• 2018.07a
• /
• pp.78-79
• /
• 2018

최근 가짜뉴스가 무분별하게 확산되면서 가짜뉴스로 인한 경제적, 사회적 비용이 커지고 있다. 하루에 발생하는 가짜뉴스는 방대하며, 실제 뉴스기사를 악의적으로 재생산 또는 언론사를 사칭하는 방식으로 유포되고 있다. 이를 구분하기 위한 연구가 많으나, 공인된 뉴스 기사인지에 대한 신뢰성 입증과 관련된 연구 논문은 매우 적은 상황이다. 본 논문에서는 가짜뉴스 문제를 해결하기 위해 뉴스 플랫폼에 블록체인을 적용, 공인된 뉴스 제공자가 기사 내용에 대한 Fingerprint를 블록체인에 기록하여 공인된 기사 내용에 대한 신뢰성을 검증하는 방안에 대해 제안한다.

• Proceedings of the Korea Information Processing Society Conference
• /
• 2021.11a
• /
• pp.355-358
• /
• 2021

개인의 신원정보 보호에 대한 중요성이 높아지면서 개인이 직접 자신의 신원정보를 관리하고 데이터의 주권을 신원정보 소유자에게 부여하는 자기주권 신원 시스템에 대한 관심이 높아지고 있다. 자기주권 신원 시스템 내에서 개인은 스스로 자신을 식별할 수 있는 분산 식별자(DID: decentralized identifier)를 생성하고 분산 식별자 별 개인의 자격을 증명해주는 자격증명(VC: verifiable credentials) 정보를 발급받아 개인이 보유하며 자격증명의 검증을 요구하는 검증자에게 선택적으로 자격증명 정보를 제시한다. 개인의 프라이버시를 보호하기 위해 개인의 자격증명을 제시할 때 신원정보의 실제 데이터는 감추고 자격증명의 유효성은 입증시키는 영지식 증명의 개념을 적용하고 있다. 본 논문에서는 영지식 증명 기술을 살펴보고 하이퍼레저 인디(Hyperledger Indy) 기반 자기주권 신원 시스템에서 영지식 증명 기술 도입 예를 보인다.

• The Journal of Bigdata
• /
• v.4 no.1
• /
• pp.1-10
• /
• 2019

As FTA is spreading, it is becoming more and more necessary to improve the accuracy and reliability of the country of origin information at the domestic trading stage in preparation for the actual surveys expected to surge in the near future. However, there are many problems in collecting and managing information related to origin. It is pointed out that the shortage of export-oriented profits and the incentive for issuance of FTA-related profits, as well as the lack of information on the distribution and management of origin information of domestic manufacturing companies are also pointed out as important causes. In this paper, we propose a method to improve the efficiency of management and circulation of smooth FTA origin (comprehensive) certificate of Korean companies and to improve reliability through manipulation prevention by building prototype of origin information management system based on private block chain Hyperledger. The block chain, called Distributed Ledger or Trusted Internet, provides a technical infrastructure that enables various related companies to distribute origin information with high reliability and immediate distribution in the supply chain, but research on its application is still in the beginning stage.

• Convergence Security Journal
• /
• v.22 no.4
• /
• pp.161-168
• /
• 2022

After the corona virus, as non-face-to-face services are activated, domain services that guarantee integrity by embedding sensing information of the Internet of Things (IoT) with block chain technology are expanding. For example, in areas such as safety and security using CCTV, a process is required to safely update firmware in real time and to confirm that there is no malicious intrusion. In the existing safe security processing procedures, in many cases, the person in charge performing official duties carried a USB device and directly updated the firmware. However, when private blockchain technology such as Hyperledger is used, the convenience and work efficiency of the Internet of Things environment can be expected to increase. This article describes scenarios in how to prevent vulnerabilities in the operating environment of various customers such as firmware updates and device changes in a non-face-to-face environment. In particular, we introduced the optimal blockchain technique for the Internet of Things (IoT), which is easily exposed to malicious security risks such as hacking and information leakage. In this article, we tried to present the necessity and implications of security management that guarantees integrity through operation applying block chain technology in the increasingly expanding Internet of Things environment. If this is used, it is expected to gain insight into how to apply the blockchain technique to guidelines for strengthening the security of the IoT environment in the future.