• Title/Summary/Keyword: Incident analysis

Search Result 1,073, Processing Time 0.023 seconds

Windows 7 Operating System Event based Visual Incident Analysis System (윈도우즈 7 운영체제 이벤트에 대한 시각적 침해사고 분석 시스템)

  • Lee, Hyung-Woo
    • Journal of Digital Convergence
    • /
    • v.10 no.5
    • /
    • pp.223-232
    • /
    • 2012
  • Recently, the leakage of personal information and privacy piracy increase. The victimized case of the malicious object rapidlies increase. Most of users use the windows operating system. Recently, the Windows 7 operating system was announced. Therefore, we need to study for the intrusion response technique at the next generation operate system circumstances. The accident response technique developed till now was mostly implemented around the Windows XP or the Windows Vista. However, a new vulnerability problem will be happen in the breach process of reaction as the Windows 7 operating system is announced. In the windows operating system, the system incident event needs to be efficiently analyzed. For this, the event information generated in a system needs to be visually analyzed around the time information or the security threat weight information. Therefore, in this research, we analyzed visually about the system event information generated in the Windows 7 operating system. And the system analyzing the system incident through the visual event information analysis process was designed and implemented. In case of using the system developed in this study the more efficient accident analysis is expected to be possible.

A Study on the Development of Analysis Model for Maritime Security Management (해상보안관리 분석모델 개발에 관한 연구)

  • Jeong, Woo-Lee
    • Journal of Navigation and Port Research
    • /
    • v.36 no.1
    • /
    • pp.9-14
    • /
    • 2012
  • Maritime security incidents by pirates and by terrorists increase, but maritime incidents investigation models are limited to figure out the maritime security incidents. This paper provides the analysis model for maritime security incidents. To develop this analysis model, this categorizes five threat factors, the ship, the cargo type, port system, human factor, information flow system, makes the risk assessment matrix to quantify the risk related to threat factors and classifies four priority categories of risk assessment matrix. Also, this model makes from the frameworks which include a variety of security initiatives implementing in stakeholder levels like international organizations, individual governments, shipping companies, and the ship. Therefore, this paper develops the Analysis for Maritime Security Management model based on various security initiatives responding to the stakeholder levels of maritime security management and top-bottom/bottom-up decision trees, and shows the validity through verifying the real maritime security incident of M/V Petro Ranger.

Quantitative Analysis of Safety Improvement on Smart Roads (스마트도로 안전성 향상 효과의 정량화 연구)

  • Chang, Hyun-Ho;Baek, Seung-Kirl;Oh, Sung-Ho;Kim, Ho-Jeung
    • The Journal of The Korea Institute of Intelligent Transport Systems
    • /
    • v.10 no.4
    • /
    • pp.44-54
    • /
    • 2011
  • Intelligent transport services on smart roads tend to have a problem at the stage of benefit-cost analysis that can not secure economic feasibility of the new services which increase early investment cost on building its infrastructure. It is expected that the number of road accidents, 'Incident/Accident', will decline through various safety services using intelligent safety facilities, intelligent transport management and so on, and that traffic congestion will also decrease. The effect of traffic congestion reduction could be the benefit by safety improvement, however current investment-analysis process in Korea does not appropriate it as a benefit. This study estimated road blocking time with 'Incident/Accident' classification and highway accident data of past three years. It also developed a generalized model by a regression analysis with a microscopical simulation. Furthermore, it suggested necessary units on quantitative analysis in order to make the developed model applicable to investment evaluation. As a result of applying the developed model to Smart-Highway Project, it showed that total safety improvement benefit is about 139 billion dollars over 30 years when it is supposed that accident decreasing rate by smart safety facilities is 10%.

An Analysis of Causes of Marine Incidents at sea Using Big Data Technique (빅데이터 기법을 활용한 항해 중 준해양사고 발생원인 분석에 관한 연구)

  • Kang, Suk-Young;Kim, Ki-Sun;Kim, Hong-Beom;Rho, Beom-Seok
    • Journal of the Korean Society of Marine Environment & Safety
    • /
    • v.24 no.4
    • /
    • pp.408-414
    • /
    • 2018
  • Various studies have been conducted to reduce marine accidents. However, research on marine incidents is only marginal. There are many reports of marine incidents, but the main content of existing studies has been qualitative, which makes quantitative analysis difficult. However, quantitative analysis of marine accidents is necessary to reduce marine incidents. The purpose of this paper is to analyze marine incident data quantitatively by applying big data techniques to predict marine incident trends and reduce marine accident. To accomplish this, about 10,000 marine incident reports were prepared in a unified format through pre-processing. Using this preprocessed data, we first derived major keywords for the Marine incidents at sea using text mining techniques. Secondly, time series and cluster analysis were applied to major keywords. Trends for possible marine incidents were predicted. The results confirmed that it is possible to use quantified data and statistical analysis to address this topic. Also, we have confirmed that it is possible to provide information on preventive measures by grasping objective tendencies for marine incidents that may occur in the future through big data techniques.

Event Log Analysis Framework Based on the ATT&CK Matrix in Cloud Environments (클라우드 환경에서의 ATT&CK 매트릭스 기반 이벤트 로그 분석 프레임워크)

  • Yeeun Kim;Junga Kim;Siyun Chae;Jiwon Hong;Seongmin Kim
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.34 no.2
    • /
    • pp.263-279
    • /
    • 2024
  • With the increasing trend of Cloud migration, security threats in the Cloud computing environment have also experienced a significant increase. Consequently, the importance of efficient incident investigation through log data analysis is being emphasized. In Cloud environments, the diversity of services and ease of resource creation generate a large volume of log data. Difficulties remain in determining which events to investigate when an incident occurs, and examining all the extensive log data requires considerable time and effort. Therefore, a systematic approach for efficient data investigation is necessary. CloudTrail, the Amazon Web Services(AWS) logging service, collects logs of all API call events occurring in an account. However, CloudTrail lacks insights into which logs to analyze in the event of an incident. This paper proposes an automated analysis framework that integrates Cloud Matrix and event information for efficient incident investigation. The framework enables simultaneous examination of user behavior log events, event frequency, and attack information. We believe the proposed framework contributes to Cloud incident investigations by efficiently identifying critical events based on the ATT&CK Framework.

Analysis of Cyber Incident Artifact Data Enrichment Mechanism for SIEM (SIEM 기반 사이버 침해사고 대응을 위한 데이터 보완 메커니즘 비교 분석)

  • Lee, Hyung-Woo
    • Journal of Internet of Things and Convergence
    • /
    • v.8 no.5
    • /
    • pp.1-9
    • /
    • 2022
  • As various services are linked to IoT(Internet of Things) and portable communication terminals, cyber attacks that exploit security vulnerabilities of the devices are rapidly increasing. In particular, cyber attacks targeting heterogeneous devices in large-scale network environments through advanced persistent threat (APT) attacks are on the rise. Therefore, in order to improve the effectiveness of the response system in the event of a breach, it is necessary to apply a data enrichment mechanism for the collected artifact data to improve threat analysis and detection performance. Therefore, in this study, by analyzing the data supplementation common elements performed in the existing incident management framework for the artifacts collected for the analysis of intrusion accidents, characteristic elements applicable to the actual system were derived, and based on this, an improved accident analysis framework The prototype structure was presented and the suitability of the derived data supplementary extension elements was verified. Through this, it is expected to improve the detection performance when analyzing cyber incidents targeting artifacts collected from heterogeneous devices.

Qualitative Analysis of Film Thickness in Elastohydrodynamic Lubrication (탄성 유체 윤활에서의 유막 두께 측정에 관한 정성적 분석)

  • 최언진;장시열
    • Proceedings of the Korean Society of Tribologists and Lubrication Engineers Conference
    • /
    • 1999.06a
    • /
    • pp.147-155
    • /
    • 1999
  • The film thickness and shape of elastohydrodynamic lubrication is measured by optical interferometer, which is the most precise method for EHL film measurement. However the interpretation of the image pattern from optical viscometer is not easy for two-dimensional shape. A newly developed method of image processing makes it possible to evaluate the film thickness and shape in every point of contact region with two dimensional aspects. In this study, we captured film shape of EHL film from the monochromatic incident light with the Image processing method, which uses phase shift method, and obtained the image analysis method for gray level image in order to qualitatively evaluate film shapes.

  • PDF

Analysis of SAR Distribution Characteristics in a Head Model using FDTD (FDTD를 이용한 인체 두부모델의 SAR 분포특성 해석)

  • Hong, Dong-Uk;Kim, Doo-Hyun;Kang, Dong-Kyu
    • Journal of the Korean Society of Safety
    • /
    • v.19 no.2
    • /
    • pp.34-40
    • /
    • 2004
  • This paper presents an analysis of SAR(Specific Absorption Rate) distribution characteristics in a head model using FDTD(Finite Difference Time Domain). In this study human head was modelled in four elements-layered structure, consisting of skin, fat, skull and brain. To calculate the electromagnetic fields wihtin the head model, FDTD method was used. In the FDTD method, the electromagnetic wave is analyzed by solving a Maxwell's equations repeatedly. For the calculation, distance between power source and head model increased by 10[m]. Power density and incident electric field intensity were calculated. Based on the incident electric field, the program which calaculated internal electric fields intensity and SAR calculation of the head model were developed. The results of developed program using FDTD were compared with those of a commericial programs, which showed the availability and usefulness of the suggested scheme in this paper.

Measurement of Film Thickness by Fringe Intensity Analysis in Point Contact Elastohydrodynamic Lubrication (점접촉 탄성 유체 윤활에서의 띠 무의 강도에 의한 유막 두께 측정)

  • 장시열;최언진
    • Proceedings of the Korean Society of Tribologists and Lubrication Engineers Conference
    • /
    • 1999.11a
    • /
    • pp.103-113
    • /
    • 1999
  • Point contact film thickness in elastohydrodynamic lubrication (EHL) is analyzed by the image processing method for the monochromatic incident light. Interference between the reflected lights both on Cr coating of glass disk and on super finished ball makes circular fringes, which are regarded as film thickness together with numbering of fringe order. In this study, we developed technology to measure the film thickness by analyzing dark and bright intensity waves which results from monochrome green light. Two typical fringe patterns only with intensity values 3re examined for the measurement of point contact EHL film thickness. We expect that this technology will give valuable clue to improve color image processing analysis for high resolution of EHL film thickness with white incident light.

  • PDF

A Study on the Improvement of Evacuation Measures through the Analysis of Fire Incident in the Facility of People Vulnerable to Disaster (재난약자시설의 화재사례 분석을 통한 피난대책 개선에 관한 연구)

  • Jin, Seung-Hyeon;Kim, Hye-Won;Lee, Byeong-Heun;Kwon, Young-Jin
    • Proceedings of the Korean Institute of Building Construction Conference
    • /
    • 2018.05a
    • /
    • pp.78-79
    • /
    • 2018
  • The facilities of domestic elderly people are getting higher in the facility due to the rapid increase of the elderly population. Elderly people ability to evacuate the facility such as cognition and walking ability is very low. Therefore, it is necessary to secure the safety of evacuation in case of fire, but the evacuation safety measures in case of domestic fire accidents are insufficient. This study is to identify the problems of the safety of evacuation through the fire case analysis and to propose the measures against it.

  • PDF