• Title/Summary/Keyword: Security Rules

Search Result 327, Processing Time 0.025 seconds

Research of generate a test case to verify the possibility of external threat of the automotive ECU (차량 ECU의 외부 위협성 가능성을 검증하기 위한 테스트 케이스 생성 연구)

  • Lee, Hye-Ryun;Kim, Kyoung-Jin;Jung, Gi-Hyun;Choi, Kyung-Hee
    • Journal of the Korea Society of Computer and Information
    • /
    • v.18 no.9
    • /
    • pp.21-31
    • /
    • 2013
  • ECU(Electric Control Unit) on the important features of the vehicle is equipped, ECU between sending and receiving messages is connected to one of the internal network(CAN BUS), but this network easily accessible from the outside and not intended to be able to receive attacks from an attacker, In this regard, the development of tools that can be used in order to verify the possibility of attacks on attacks from outside, However, the time costs incurred for developing tools and time to analyze from actual car for CAN messages to be used in the attack to find. In this paper, we want to solve it, propose a method to generate test cases required for the attack is publicly available tool called Sulley and it explains how to find the CAN messages to be used in the attack. Sulley add the CAN messages data generated library files in provided library file and than Sulley execute that make define and execute file conform to the CAN communication preferences and create message rules. Experiments performed by the proposed methodology is applied to the actual car and result, test cases generated by the CAN messages fuzzing through Sulley send in the car and as a result without a separate tool developed was operating the car.

A Study on Multi-modal Near-IR Face and Iris Recognition on Mobile Phones (휴대폰 환경에서의 근적외선 얼굴 및 홍채 다중 인식 연구)

  • Park, Kang-Ryoung;Han, Song-Yi;Kang, Byung-Jun;Park, So-Young
    • Journal of the Institute of Electronics Engineers of Korea CI
    • /
    • v.45 no.2
    • /
    • pp.1-9
    • /
    • 2008
  • As the security requirements of mobile phones have been increasing, there have been extensive researches using one biometric feature (e.g., an iris, a fingerprint, or a face image) for authentication. Due to the limitation of uni-modal biometrics, we propose a method that combines face and iris images in order to improve accuracy in mobile environments. This paper presents four advantages and contributions over previous research. First, in order to capture both face and iris image at fast speed and simultaneously, we use a built-in conventional mega pixel camera in mobile phone, which is revised to capture the NIR (Near-InfraRed) face and iris image. Second, in order to increase the authentication accuracy of face and iris, we propose a score level fusion method based on SVM (Support Vector Machine). Third, to reduce the classification complexities of SVM and intra-variation of face and iris data, we normalize the input face and iris data, respectively. For face, a NIR illuminator and NIR passing filter on camera are used to reduce the illumination variance caused by environmental visible lighting and the consequent saturated region in face by the NIR illuminator is normalized by low processing logarithmic algorithm considering mobile phone. For iris, image transform into polar coordinate and iris code shifting are used for obtaining robust identification accuracy irrespective of image capturing condition. Fourth, to increase the processing speed on mobile phone, we use integer based face and iris authentication algorithms. Experimental results were tested with face and iris images by mega-pixel camera of mobile phone. It showed that the authentication accuracy using SVM was better than those of uni-modal (face or iris), SUM, MAX, NIN and weighted SUM rules.

A Study on The Waegu(倭寇)'s invasion and the importance of the Ocean Defence in the Late Goryeo(高麗) Dynasty. (고려 말 왜구 침입과 해양방어의 중요성에 대한 연구)

  • Lee, Do-Won
    • Strategy21
    • /
    • s.32
    • /
    • pp.36-70
    • /
    • 2013
  • Waegu(倭寇)'s invasion in the Late Goryeo(高麗) Dynasty was huge damage for Goryeo's local society. And It was shock that Goryeo government's basic foundation of rules. Invasion background of waegu for Kyeong-in-yeon(庚寅年, 1350) was Kyushyu(九州)'s political divide because of Nihon(日本) government's confusion. Waegu was huge damage for Goryeo's Jo-wun(漕運, the shipping system of grain paid as a tax) system. So, government started military response, but it was turn out a failure and had great damage. When execution of military operations failed, Goryeo government sent diplomatic delegation to request the prevent of waegu, but the invasion continued. Since waegu invasion, Goryeo was got nowhere with defence of waegu. So, some people demanded for a new understanding of the ocean defence in the government. Lee-Saek(李穡), Woo-Hyeonbo(禹玄寶), Lee-Hee(李禧) and Jung-Ji(鄭地) were representatives of a new understanding of the ocean defence. Their demands were received attention when all operations had been failed. Therefore, Goryeo government began to reorganization of the naval forces and set up a special committee of gunpowder manufacturing named Hwa-tong-do-gam(火筒都監). This administrative reform was achieved substantial results since then. In 1380, the naval battle at Jin-po(鎭浦) was a big event that first gunpowder attack the waegu. Since Jin-po, Goryeo's naval forces gain confidence. In 1389, Dae-ma-do(對馬島) was attacked by Park-Wi(朴葳). It was meant that Goryeo's naval forces had huge offense power. Goryeo's defence system was focused on a northern race before 14th century waegu's invasion. So they were neglected their ocean defence. But after military operation of waegu's invasion was failure, they focused on the ocean defence. A new understanding of the ocean defence was foundation of that. It means to us to a new understanding of the ocean defence. Now, East Asia has maritime disputes. And we have high exposure to potential threats. So, we have a new understanding of importance of the ocean defence. And we fight for 21th century's ocean threats as foundation of sense of national security.

  • PDF

An Efficient Query-based XML Access Control Enforcement Mechanism (효율적인 질의 기반 XML 접근제어 수행 메커니즘)

  • Byun, Chang-Woo;Park, Seog
    • Journal of KIISE:Databases
    • /
    • v.34 no.1
    • /
    • pp.1-17
    • /
    • 2007
  • As XML is becoming a de facto standard for distribution and sharing of information, the need for an efficient yet secure access of XML data has become very important. To enforce the fine-level granularity requirement, authorization models for regulating access to XML documents use XPath which is a standard for specifying parts of XML data and a suitable language for both query processing. An access control environment for XML documents and some techniques to deal with authorization priorities and conflict resolution issues are proposed. Despite this, relatively little work has been done to enforce access controls particularly for XML databases in the case of query access. Developing an efficient mechanism for XML databases to control query-based access is therefore the central theme of this paper. This work is a proposal for an efficient yet secure XML access control system. The basic idea utilized is that a user query interaction with only necessary access control rules is modified to an alternative form which is guaranteed to have no access violations using tree-aware metadata of XML schemes and set operators supported by XPath 2.0. The scheme can be applied to any XML database management system and has several advantages over other suggested schemes. These include implementation easiness, small execution time overhead, fine-grained controls, and safe and correct query modification. The experimental results clearly demonstrate the efficiency of the approach.

A Study of China's Condition as the Logistics Hub of Northeast Asia and a Development Strategy (중국의 동북아 물류중심화 현황과 발전전략에 관한 연구)

  • Oh, Moon-Kap
    • Journal of Distribution Science
    • /
    • v.12 no.2
    • /
    • pp.95-103
    • /
    • 2014
  • Purpose - Korea has a better geographical location than other nations in the Northeast Asian region. This means that Korea has an opportunity to become the center of international physical distribution in Northeast Asia. Korea should take advantage of this opportunity by exploring appropriate strategies to achieve this goal, assuming government willingness, with a view to capitalizing on the geographical advantage of the Korean peninsula and constructing a comprehensive physical distribution network system. If we prepare for this scenario, Korea could become the center of international physical distribution in Northeast Asia. Research design, data, and methodology - This study has the purpose of determining how shipping companies form partnerships with third-party logistics providers, and the relevant implications. The survey methods used were personal interview and a questionnaire distributed through e-mail, fax, mail, and telephone. A total of 600 questionnaires were distributed, out of which 285 were returned. Of the collected questionnaires, 10 were excluded because of insufficient content, leaving 275 to be used in the study as available valid samples. The data that was collected from these samples was analyzed using the data coating process and by employing a statistical package program. Results - Flexible policies, administration, and systems will be needed to create better business practices. In this dissertation, first and foremost, the results reveal that in order to become the center of Northeast Asian logistics, Korea must transition into a new paradigm based on the current economic and social systems that have stemmed from bureaucracy, inflexibility, chauvinism, and egalitarianism. Flexible policies, administration, and systems will be required to create better business practices. Domestic logistics corporations need to occupy a strategic logistics hub, create a logistics network, and activate value-added logistics business strategies by ensuring significant manpower and by building a logistics information system to strengthen their competitive edge, creating an improved system. Conclusions - In this dissertation, first and foremost, we point out that in order to become a center of North East Logistics, Korea should change to a new paradigm from the old one based on current economic and social systems that have stemmed from bureaucracy, inflexibility, chauvinism, and egalitarianism. More reasonable business laws, systems, and policies based on market-driven flexibility and transparency should be created. Moreover, social norms and rules should be reasonably established, to accomplish political and social security. Korea has to cultivate a culture of tolerance for foreign companies. This involves a change of paradigm for the development of the capital city and satellite cities. It will take a powerful task force or organization to plan and execute the vision that aims to meet these needs, accomplish the necessary goals, use the appropriate system effectively, and make Korea a key country in the field of Northeast Asian logistics.

Deficiencies of China's General Aviation Law and its Improvement (중국 일반항공법의 법적 흠결과 개선방향)

  • Zhang, Chrystal;Diao, Weimin
    • The Korean Journal of Air & Space Law and Policy
    • /
    • v.28 no.2
    • /
    • pp.145-181
    • /
    • 2013
  • General aviation is an integral part of civil aviation and involves the widest range of aviation segments except commercial aviation. Featured with different operational procedures and practices to satisfy the economic needs and safety requirements of a sovereign state, general aviation tends to be regulated by an individual state. The last three decades have seen exponential growth of commercial air transport in China, but its general aviation sector has remained disproportionally underdeveloped. With the deepening of the reform of low-altitude airspace, the sector is poised for a radical change and rapid growth. However, legislation governing general aviation activities in China is distorted causing inconsistency and confusions in their application and implementation. This paper aims to analyse China's prevailing legislation regulating general aviation activities. It first discusses the various definitions adopted by ICAO and its member states and reviews the development of general aviation in the US, EU, Australia and China. It then examines the sources of China's general aviation laws, e.g. Chicago Convention and its annexes, and Chinese domestic legislature which covers legislation, laws, directives, rules and procedures. The paper continues to analyse and establish the deficiencies of its prevailing legal framework by pointing out the following: variation of definitions in different regulations, inconsistency of principles in existing laws and regulations, legal vacuum concerning government subsidy, environment protection, safety and security, and other operational areas such as aerial club, sightseeing, and search and rescue. In this process, the paper argues that a coherent, consistent and systematic legal framework is required in order to ensure fair competition and safety for a healthy, progressive and sustainable general aviation growth. Suggestions for rectification and improvement are proposed.

  • PDF

A Comparative Study on the Compliance Program(CP) of Strategic Export Control System between Korea and Japan (전략물자 수출통제 자율준수제도(CP)에 관한 한.일 비교 연구)

  • Shim, Sang-Ryul;Shao, Dan;Joo, E-Wha
    • International Commerce and Information Review
    • /
    • v.13 no.4
    • /
    • pp.297-321
    • /
    • 2011
  • Under the UN Security Council Resolution 1540/1810 in 2004 to restrict the proliferation of WMD (weapons of mass destruction) and their means of delivery, many countries have taken great efforts to, control the export of strategic items, thereby preventing the transfer of ABCM (atomic, biological, chemical weapons, missiles) and technologies and goods related to conventional weapons or dual-use items, Compliance Program (CP) in Korea or Internal Compliance Program(ICP) in Japan refers to a company's internal system or rules to comply with the export control laws and regulations, and is to prevent the unintentional illegal export of strategic items. This paper analyzes the Compliance Program (CP) of strategic export control system between Korea and Japan. Both countries have very similar legal frameworks under the guiding principles of multilateral export control regimes. However, there are some differences in actual procedures, classification service, supporting system, export license, sanctions for illegal exporters, etc. Korea should take more active and customer-oriented measures to promote the Compliance Program (CP) into Korean export companies for better awareness and positive attitude, practical information and education, smoothy government-firm communication, closer cooperation between Korea and Japan, etc.

  • PDF

A Study on the Problems and Improvement of the Safety Management Law of Nuclear Facilities -Focused on Safety Management of Aquatic Products- (원자력시설 안전관리 법제의 문제점과 개선방안 연구 -수산물의 안전관리를 중심으로-)

  • Lee, Woo-Do
    • The Journal of Fisheries Business Administration
    • /
    • v.50 no.2
    • /
    • pp.23-40
    • /
    • 2019
  • The main purpose of this study is to analyze and examine the problems of the law systems of the safety and maintenance of nuclear facilities and to propose the improvements with respect to the related problems especialy focused on safety management of aquatic products. Therefore, the results of the paper would be helpful to build an effective management law system of safety and maintenance of nuclear facilities and fisheries products. The research methods are longitudinal and horizontal studies. This study compares domestic policies with foreign policies of nuclear plants and aquatic products. Using the above methods, examining the current system of nuclear-related laws and regulations, we have found that there exist 13 Acts including "Nuclear Safety Act", etc. Safety laws related on nuclear facilities have seven Acts including "Nuclear Safety Act", "the Act on Physical Protection and Radiological Emergency", "Radioactive waste control Act", "Act on Protective Action Guidelines against Radiation in the Natural Environment", "Special Act on Assistance to the locations of facilities for disposal low and intermediate level radioactive waste", "Korea Institute of Nuclear Safety Act". "Act on Establishment and Operation of the Nuclear Safety and Security Commission". The seven laws are composed of 119 legislations. They have 112 lower statute of eight Presidential Decrees, six Primeministrial Decrees and Ministrial Decrees, 92 administrative rules (orders), 6 legislations of local self-government aself-governing body. The concluded proposals of this paper are as follows. Firstly, we propose that the relationship between the special law and general law should be re-established. Secondly, the terms with respect to law system of safety and maintenance of nuclear plants should be redefined and specified. Thirdly, it is advisable to re-examine and re-establish the Law System for Safety and Maintenance of Nuclear Facilities. and environmental rights like the French Nuclear Safety Legislation. Lastly, inadequate legislation on the aquatic pollution damage should be re-established. It is necessary to ensure sufficient transparency as well as environmental considerations in the policy decisions of the Korean government and legislation of the National Assembly. It is necessary to further study the possibilities of accepting the implications of the French legal system as a legal system in Korea. In conclusion, the safety management of nuclear facilities is not only focused on the secondary industry and the tertiary industry centering on power generation and supply, but also on the primary industry, which is the food of the people. It is necessary to prevent damage to be foreseen. Therefore, it is judged that there should be no harm to the people caused by contaminated marine products even if the "Food Safety Law for Prevention of Radiation Pollution Damage" is enacted.

Middle-Old Age's Retirement Transition, Old Age Income Security and the Support of Gradual Retirement (중고령자의 퇴직전환 및 노후소득보장과 점진적 퇴직지원)

  • Ji, Eun-Jeong
    • Korean Journal of Social Welfare
    • /
    • v.58 no.3
    • /
    • pp.135-168
    • /
    • 2006
  • This study reviewed pension reform's overall characteristic and(anticipated) positive negative effect in OECD countries's and then analysed middle-old age's retirement transition and determinants of full/gradual retirement through the $3{\sim}7th$ Korea Labor and Income Panel considering that Korea has been aging society quickly and it is necessary to suggest not only solution of early retirement and working age reduction but also pension reform. As a result of this study, about 1/4 of 50 years and older have been continuing to work through various pathways after retirement and 98% among fully retired older who passed by re-employment step of occupational status including retirement are still searching for jobs. This showed that it is also inappropriate to typical retirement concept itself on the lines of labour market participation in Korea and part-time/temporary work or self-employment have been used by means of alternatives of maintaining works for middle-old ages. However, the duration of changed occupational status of gradual retirees is mostly only $1{\sim}2$ years. Therefore it is necessary to support the gradual retirement to minimize a term of income insecurity and promote the work of the old ages who have will and capacity of work. Most of all, partial pension system which is main program of gradual retirement, should make the rules that beneficiaries are those who age less than pensionable age and benefit levels should be actuarial fairness together with pension system and provide substantial help. But, the introduction of partial pension system is not the only way to solve and needs overall social economic approach. Especially guarantee the increase of quantitative qualitative employment for middle-old ages linking labor market policy and supporting gradual retirement not ought to be abused to force the part time works and early retirement route against their own will.

  • PDF

A Study on Jurisdiction under the International Aviation Terrorism Conventions (국제항공테러협약의 관할권 연구)

  • Kim, Han-Taek
    • The Korean Journal of Air & Space Law and Policy
    • /
    • v.24 no.1
    • /
    • pp.59-89
    • /
    • 2009
  • The objectives of the 1963 Tokyo Convention cover a variety of subjects, with the intention of providing safety in aircraft, protection of life and property on board, and promoting the security of civil aviation. These objectives will be treated as follows: first, the unification of rules on jurisdiction; second, the question of filling the gap in jurisdiction; third, the scheme of maintaining law and order on board aircraft; fourth, the protection of persons acting in accordance with the Convention; fifth, the protection of the interests of disembarked persons; sixth, the question of hijacking of aircraft; and finally some general remarks on the objectives of the Convention. The Tokyo Convention mainly deals with general crimes such as murder, violence, robbery on board aircraft rather than aviation terrorism. The Article 11 of the Convention deals with hijacking in a simple way. As far as aviation terrorism is concerned 1970 Hague Convention and 1971 Montreal Convention cover the hijacking and sabotage respectively. The Problem of national jurisdiction over the offence and the offender was as tangled at the Hague and Montreal Convention, as under the Tokyo Convention. Under the Tokyo Convention the prime base of jurisdiction is the law of the flag (Article 3), but concurrent jurisdiction is also allowed on grounds of: territorial principle, active nationality and passive personality principle, security of the state, breach of flight rules, and exercise of jurisdiction necessary for the performance of obligations under multilateral agreements (Article 4). No Criminal jurisdiction exercised in accordance with national law is excluded [Article 3(2)]. However, Article 4 of the Hague Convention(hereafter Hague Article 4) and Article 5 of the Montreal Convention(hereafter Montreal Article 5), dealing with jurisdiction have moved a step further, inasmuch as the opening part of both paragraphs 1 and 2 of the Hague Article 4 and the Montreal Article 5 impose an obligation on all contracting states to take measures to establish jurisdiction over the offence (i.e., to ensure that their law is such that their courts will have jurisdiction to try offender in all the circumstances covered by Hague Article 4 and Montreal Article 5). The state of registration and the state where the aircraft lands with the hijacker still on board will have the most interest, and would be in the best position to prosecute him; the paragraphs 1(a) and (b) of the Hague Article 4 and paragraphs 1(b) and (c) of the Montreal Article 5 deal with it, respectively. However, paragraph 1(b) of the Hague Article 4 and paragraph 1(c) of the Montreal Article 5 do not specify if the aircraft is still under the control of the hijacker or if the hijacker has been overpowered by the aircraft commander, or if the offence has at all occurred in the airspace of the state of landing. The language of the paragraph would probably cover all these cases. The weaknesses of Hague Article 4 and Montreal Article 5 are however, patent. The Jurisdictions of the state of registration, the state of landing, the state of the lessee and the state where the offender is present, are concurrent. No priorities have been fixed despite a proposal to this effect in the Legal Committee and the Diplomatic Conference, and despite the fact that it was pointed out that the difficulty in accepting the Tokyo Convention has been the question of multiple jurisdiction, for the reason that it would be too difficult to determine the priorities. Disputes over the exercise of jurisdiction can be endemic, more so when Article 8(4) of the Hague Convention and the Montreal Convention give every state mentioned in Hague Article 4(1) and Montreal Article 5(1) the right to seek extradition of the offender. A solution to the problem should not have been given up only because it was difficult. Hague Article 4(3) and Montreal Article 5(3) provide that they do not exclude any criminal jurisdiction exercised in accordance with national law. Thus the provisions of the two Conventions create additional obligations on the state, and do not exclude those already existing under national laws. Although the two Conventions do not require a state to establish jurisdiction over, for example, hijacking or sabotage committed by its own nationals in a foreign aircraft anywhere in the world, they do not preclude any contracting state from doing so. However, it has be noted that any jurisdiction established merely under the national law would not make the offence an extraditable one under Article 8 of the Hague and Montreal Convention. As far as international aviation terrorism is concerned 1988 Montreal Protocol and 1991 Convention on Marking of Plastic Explosives for the Purpose of Detention are added. The former deals with airport terrorism and the latter plastic explosives. Compared to the other International Terrorism Conventions, the International Aviation Terrorism Conventions do not have clauses of the passive personality principle. If the International Aviation Terrorism Conventions need to be revised in the future, those clauses containing the passive personality principle have to be inserted for the suppression of the international aviation terrorism more effectively. Article 3 of the 1973 Convention on the Prevention and Punishment of Crimes Against Internationally Protected Persons, Including Diplomatic Agents, Article 5 of the 1979 International Convention against the Taking of Hostages and Article 6 of the 1988 Convention for the Suppression of Unlawful Acts Against the Safety of Maritime Navigation would be models that the revised International Aviation Terrorism Conventions could follow in the future.

  • PDF