• Title/Summary/Keyword: Operation Audit

Search Result 93, Processing Time 0.021 seconds

A Novel Cost-Effective Firewall Token for Hacking Protection on TCP/IP Based Network (TCP/IP를 이용하는 전산망의 해킹방지를 위한 경제적인 방화벽 토큰 설계 방안)

  • 고재영
    • Journal of the Korea Institute of Military Science and Technology
    • /
    • v.2 no.1
    • /
    • pp.159-169
    • /
    • 1999
  • Recently a firewall is being employed to protect hacking by controlling the traffics. The security services in the firewall include authentication, access control, confidentiality, integrity, and audit trail. A token is adapted for authentication to the firewall. A token has a small battery within which has restricted power capacity, This paper proposes a novel cost-effective firewall token for hacking protecting on transmission control protocol/internet protocol (TCP/IP) based network. This paper proposes a fast exponentiation method with a sparse prime that take a major operation for a public-key crypto-system and a major power consumption in the token. The proposed method uses much less amount of modular operations in exponentiation that is reduced of battery's capacity or CPU's price in the token.

  • PDF

A Study on the Role Model of an Integrated Management System for Government Informatization (국가정보화의 통합적 관리체계를 위한 역할 모형에 관한 연구)

  • Im, Sung-Mook
    • Journal of the military operations research society of Korea
    • /
    • v.32 no.1
    • /
    • pp.159-175
    • /
    • 2006
  • Korea e-government sets the goal of reaching the full integration stage. In this study, we propose a role model of the National Informatization Agency which is a fundamental organization for achieving the goal. The National Informatization Agency assumes full charge of support functions needed for consistent and efficient accomplishment of all the e-government projects, and those functions include e-government planning, project administration, national IT resource operation, national standards management, and project audit and evaluation. The proposed role-model is expected to be a theoretical basis for innovative government at informatization.

A Design for a Hyperledger Fabric Blockchain-Based Patch-Management System

  • Song, Kyoung-Tack;Kim, Shee-Ihn;Kim, Seung-Hee
    • Journal of Information Processing Systems
    • /
    • v.16 no.2
    • /
    • pp.301-317
    • /
    • 2020
  • An enterprise patch-management system (PMS) typically supplies a single point of failure (SPOF) of centralization structure. However, a Blockchain system offers features of decentralization, transaction integrity, user certification, and a smart chaincode. This study proposes a Hyperledger Fabric Blockchain-based distributed patch-management system and verifies its technological feasibility through prototyping, so that all participating users can be protected from various threats. In particular, by adopting a private chain for patch file set management, it is designed as a Blockchain system that can enhance security, log management, latest status supervision and monitoring functions. In addition, it uses a Hyperledger Fabric that owns a practical Byzantine fault tolerant consensus algorithm, and implements the functions of upload patch file set, download patch file set, and audit patch file history, which are major features of PMS, as a smart contract (chaincode), and verified this operation. The distributed ledger structure of Blockchain-based PMS can be a solution for distributor and client authentication and forgery problems, SPOF problem, and distribution record reliability problem. It not only presents an alternative to dealing with central management server loads and failures, but it also provides a higher level of security and availability.

A Study on An Improvement of the Ability of Preparing the Financial Statements (기업의 재무제표 작성역량 강화방안에 관한 연구)

  • Koh, Yun-Sung;Shin, Il-Hang
    • Asia-Pacific Journal of Business
    • /
    • v.11 no.1
    • /
    • pp.167-183
    • /
    • 2020
  • Purpose - The purpose of this study is to achieve effective system improvement and operation methods for the improvements on the ability of firms'preparation of the financial statements Design/methodology/approach - This study conducts a survey of not only the accounting staff but also accounting specialist such as CPA or CTA. Findings - For the improvements on the ability of firms'preparation of the financial statements, comprehensive improvement in accounting education is needed as follows. First, the focus of accounting education should be converted to the consolidated financial statements, case study and analysis of accounting standards. Second, Financial Supervisory Service and Korea Accounting Institute in cooperation with accountancy firm need to create an accounting education program. Third, the focus of accounting education should be converted to consumer oriented education by providing accounting knowledge with various methods of teaching. Fourth, this study suggests the creation of the committee on Accounting Education. Research implications or Originality - As a result of the incorrect practice of firms'relying on auditors to prepare the financial statements, social concerns about the reliability of accounting information are raised because the incorrect practice decreases the auditor's independence and weaken the auditor's ability to verify accounting information. Therefore, this study analyzes the current status of auditors'preparation of the financial statements.

Factors Affecting LOSA Data Quality (LOSA Data 품질(Quality)에 영향을 미치는 요소)

  • Kyoung Ho Lee;Jang Ryong Lee
    • Journal of the Korean Society for Aviation and Aeronautics
    • /
    • v.31 no.2
    • /
    • pp.72-80
    • /
    • 2023
  • Line Operations Safety Audit (LOSA) is a well known preventive aviation safety program for Threat and Error management (TEM). High quality LOSA data suitable for safety management is obtained when a flight crew flies at the same level of attention as ordinary flight. Factors contributing to LOSA data quality may include flight crew's understanding on LOSA purpose, observer's career, and characteristics of the organization responsible for LOSA operations. This study explored purposes of TEM and LOSA, as well as their relationship. Previous studies mentioned quality of LOSA data can be influenced by heuristic judgment, hawthorne effect, and priming effect. This study recognized the importance of LOSA data quality to be effectively used for preventive safety management. It was confirmed that the level of understanding on LOSA concept, experience of the observer, and the characteristics of the department in charge of LOSA operation could affect the quality of LOSA data.

Analysis of LCOE for Korean and Foreign Onshore Wind Turbines in Operation in Korea (국내에서 운영 중인 국산과 외국산 육상풍력발전기의 발전원가 분석)

  • Keon-Woo Lee;Kyung-Nam Ko
    • Journal of Wind Energy
    • /
    • v.14 no.3
    • /
    • pp.54-60
    • /
    • 2023
  • In order to reveal the levelized cost of energy (LCOE) of Korean and foreign wind turbines, a study was conducted for Korean onshore wind farms. Actual CapEx and OpEx data were obtained from audit reports for 26 onshore wind farms corresponding to 53.87 percent of the total onshore wind farms in Korea in the Data Analysis, Retrieval Transfer (DART) system. In addition, capacity factor (CF) data were calculated from data provided by Statistics Korea. Random numbers were generated from distributions that were fitted by the datasets, which were used as input data to perform a Monte Carlo simulation (MCS). The levelized fixed cost (LFC) and the levelized variable cost (LVC) were calculated from distributions of the CapEx, the OpEx and the CF. As a result, the LCOEs of the analyzed total Korean wind farms, and Korean and foreign wind turbines were 147, 148, and 146 USD/MWh, respectively. The averaged LCOE of Korea was estimated to be 4 USD/MWh lower than that of Japan, while it was much higher than German and global averages.

Suggested Improvement Strategies for the Efficient Review and Rational Operation of Institutional Review Board (IRB) Based on the Analysis of IRB Review Results (Institutional Review Board 심의 결과 분석을 통한 효율적 심사 및 합리적 운영에 대한 개선안 모색)

  • Lee, Yoon Jin;Jang, Hye Yun;Jang, Jung-Hee
    • The Journal of KAIRB
    • /
    • v.4 no.1
    • /
    • pp.5-15
    • /
    • 2022
  • To suggest future directions for the improvement in the Institutional Review Board (IRB) review process and efficient operation of IRB, we have analyzed the IRB review results from 460 new research proposals submitted to the Review by the Convened IRB of the Keimyung University Dongsan Hospital IRB from January 2019 to July 2021. IRB is an independently established institutional committee to protect the human subjects by reviewing the research protocol in ethical as well as scientific aspects, so it is necessary to continuously contemplate the ethical versus scientific dilemma of 'what is ethical or scientific and what can actually protect human subjects.' Particularly, in this process, it is necessary to consider diverse ways to strengthen self-supervision through continuous Internal Audit rather than simple reporting outcomes. In addition, if it does not directly affect the protection of the human subjects, the discussion with the committee members is needed so that the comments such as administrative and typographical errors can be reduced as much as possible. Furthermore, as statistical analysis methods can have a significant impact on the safety of human subjects, if a legal basis and/or support related to statistics is provided for the composition of IRB members, a more specialized IRB review will be achieved.

  • PDF

A Study on Improvement of Safety Management System of Publicly Used Establishments Through Analysis of the UK Regulatory Regime (영국 안전규제체계의 분석을 통한 국내 다중이용업소 안전관리체계의 개선방안 연구)

  • Park, Suhyeong;Yoon, Myong-O
    • Journal of the Society of Disaster Information
    • /
    • v.16 no.4
    • /
    • pp.768-783
    • /
    • 2020
  • Purpose: In response to the critical risk of fire due to the characteristic of Publicly used establishments(hereinafter referred to as PUE), 'Special Act on the Safety Control of PUE' was enacted in 2006 and is still in operation. However, in spite of numerous revisions so far, still there are problems to be resolved. This study analyses the regulatory regime of fire safety in UK to find measures which could fundamentally improve the safety management of PUE. Method: This study compares and analyses the safety management system of PUE in Korea and the case of the UK by using the comparative research method. Result: As a result of the qualitative analysis, some noticeable systems and concepts of the UK regulatory regime have been discovered(e.g. 'Responsible person', 'Fire risk assessment', 'Fire safety audit', etc.) and consequently, 'Proposal for the Fire Safety Management System for PUE' is designed based on the findings from examples in the UK and drawbacks of safety management of PUE. Conclusion: This study proposes the way to improve the safety management of PUE into a more rational and effective system by analysing the case of the UK, which reorganised the fire safety management to the private sector centered, in which the fire authority minimizes intervention.

A Study on The Application of ISO/IEC 17025 Software Accredited Testing Institute Using ISO/IEC/IEEE 29119 and ISO/IEC 25023 (ISO/IEC/IEEE 29119와 ISO/IEC 25023을 이용한 ISO/IEC 17025 소프트웨어 공인시험기관 적용에 관한 연구)

  • Lee, Chang-Hee;Kim, Yoon-Sook;Noh, A-Reum;Yang, Jung-Sim;Kim, Myung-Sup;Song, Sung-Hyun
    • Journal of the Korea Academia-Industrial cooperation Society
    • /
    • v.21 no.12
    • /
    • pp.97-106
    • /
    • 2020
  • The purpose of this study is to determine how to apply ISO/IEC/IEEE 29119 software test procedures and ISO/IEC 25023 software test evaluation items to software-accredited testing laboratories based on the ISO/IEC 17025 international standard requirements. As a method, the overall requirements for their application to a test laboratory were analyzed by mapping ISO/IEC/IEEE 29119 and ISO/IEC 25023 based on ISO/IEC 17025. According to the mapping analysis, a total of 29 documents were created, including quality manuals, procedures, and test guidelines for the operation of the test laboratory. As a result of the study, a test laboratory management system was developed using Confluence 6.15 software by applying the analyzed results of the overall requirements. The test procedures, documents, and records were stored in, and operated from, this system. Verification of suitability for operation of the test laboratory was conducted by KOLAS evaluators through a document review and an on-site audit at the LG Electronics SW Accredited Test Laboratory in Seoul. In conclusion, it was confirmed through the KOLAS evaluation that the test laboratory management system and the operation of the test laboratory are appropriate and, compared with previous cases, the test laboratory operates effectively, and the overall schedule of accreditation could be shortened.

DEA Model for Measuring the relative Efficiency of Korean Materials and Components Industry (DEA 모형을 이용한 부품소재산업의 효율성 분석)

  • Oh, Ji-Hwan;Chung, Ki-Ho
    • Management & Information Systems Review
    • /
    • v.31 no.1
    • /
    • pp.273-292
    • /
    • 2012
  • This paper attempts to analyze the efficiency of Korean Materials and Components Industry. 48 sample companies are extracted and efficiency analysis for them are accomplished by using DEA model. We use both CCR-I model and BCC-I model and classify the 48 companies into two groups; efficient and inefficient companies. We find the reference set which inefficient companies should benchmark in order to achieve efficiency and present the improving values for input and output variables. We analyze whether the inefficiencies come from scale or inefficient operation by measuring the scale efficiency. Finally the ranking among the efficient companies is derived through the super-efficiency analysis.

  • PDF