• The KIPS Transactions:PartC
• /
• v.12C no.7 s.103
• /
• pp.1007-1014
• /
• 2005

A generation of rules or patterns for detecting attacks from network is very difficult. Detection rules and patterns are usually generated by Expert's experiences that consume many man-power, management expense, time and so on. This paper proposes statistical methods that effectively detect intrusion and attacks without expert's experiences. The methods are to select useful measures in measures of network connection(session) and to detect attacks. We extracted the network session data of normal and each attack, and selected useful measures for detecting attacks using relative entropy. And we made probability patterns, and detected attacks using likelihood ratio testing. The detecting method controled detection rate and false positive rate using threshold. We evaluated the performance of the proposed method using KDD CUP 99 Data set. This paper shows the results that are to compare the proposed method and detection rules of decision tree algorithm. So we can know that the proposed methods are useful for detecting Intrusion and attacks.

• Journal of the Korean Operations Research and Management Science Society
• /
• v.39 no.1
• /
• pp.29-48
• /
• 2014

The recent keyword advertising does not reflect the individual customer searching pattern because it is focused on each keyword at the aggregate level. The purpose of this research is to observe processes of customer searching patterns. To be specific, individual deal-proneness is mainly concerned. This study incorporates location as a control variable. This paper examines the relationship between customers' searching patterns and probability of purchase. A customer searching session, which is the collection of sequence of keyword queries, is utilized as the unit of analysis. The degree of deal-proneness is measured using customer behavior which is revealed by customer searching keywords in the session. Deal-proneness measuring function calculates the discount of deal prone keyword leverage in accordance with customer searching order. Location searching specificity function is also calculated by the same logic. The analyzed data is narrowed down to the customer query session which has more than two keyword queries. The number of the data is 218,305 by session, which is derived from Internet advertising agency's (COMAS) advertisement managing data and the travel business advertisement revenue data from advertiser's. As a research result, there are three types of the deal-prone customer. At first, there is an unconditional active deal-proneness customer. It is the customer who has lower deal-proneness which means that he/she utilizes deal-prone keywords in the last phase. He/she starts searching a keyword like general ones and then finally purchased appropriate products by utilizing deal-prone keywords in the last time. Those two types of customers have the similar rates of purchase. However, the last type of the customer has middle deal-proneness; who utilizes deal-prone keywords in the middle of the process. This type of a customer closely gets into the information by employing deal-prone keywords but he/she could not find out appropriate alternative then would modify other keywords to look for other alternatives. That is the reason why the purchase probability in this case would be decreased Also, this research confirmed that there is a loyalty effect using location searching specificity. The customer who has higher trip loyalty for specificity location responds to selected promotion rather than general promotion. So, this customer has a lower probability to purchase.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.22 no.6
• /
• pp.1315-1324
• /
• 2012

Security visualization is a form of the data visualization techniques in the field of network security by using security-related events so that it is quickly and easily to understand network traffic flow and security situation. In particular, the security visualization that detects the abnormal situation of network visualizing connections between two endpoints is a novel approach to detect unknown attack patterns and to reduce monitoring overhead in packets monitoring technique. However, the session-based visualization doesn't notice a difference between normal traffic and attacks that they are composed of similar connection pattern. Therefore, in this paper, we propose an efficient session-based visualization method for analyzing and detecting between normal server activities and attacks by using the IP address splitting and port attributes analysis. The proposed method can actually be used to detect and analyze the network security with the existing security tools because there is no dependence on other security monitoring methods. And also, it is helpful for network administrator to rapidly analyze the security status of managed network.

• Journal of Korean Critical Care Nursing
• /
• v.1 no.1
• /
• pp.19-31
• /
• 2008

Purpose: This study was conducted to exam the effects of the Abbreviated Cognitive Behavioral Therapy(ACBT) on chronic insomnia. Methods: Study was one-group interrupted time series study that involved 13 adults(mean age=51.7, aged 25-77 years) with chronic primary insomnia who visited sleep disorder clinic of S Hospital from November 2004 to October 2005. The subjects received 2-session individual ACBT with 2 week-interval($1^{st}$: 1.5- 2hrs, $2^{nd}$: 20-30min). To measure the subjective insomnia severity and sleep patterns, 3 times of insomnia severity index and sleep logs were completed(before ACBT, after ACBT, and 3-month after ACBT). The main outcomes were subjective insomnia severity and sleep patterns(sleep onset latency, waking after sleep onset, and total sleep time, sleep efficiency). The data were analyzed with SPSS 10.0 version program by Friedman test, Wilcoxon signed rank test with Bonferroni correction. Results: There were statistically significant decrease in insomnia severity index, sleep onset latency, and waking after sleep onset, and increase total sleep time and sleep efficiency. Conclusion: ACBT was effective in reducing subjective insomnia severity and improving sleep patterns. Sleep improvement was better sustained over time with ACBT.

• Journal of the Korean BIBLIA Society for library and Information Science
• /
• v.25 no.1
• /
• pp.19-37
• /
• 2014

Server transaction logs containing complete click-through data from a digital library of primarily image-based documents were analyzed to better understand user search session behavior. One month of data was analyzed using descriptive statistics and network analysis methods. The findings reveal iterative search behaviors centered on result views and evaluation and topical areas of focus for the search sessions. The study is novel in its combined analytical techniques and use of click-through data for image collections.

• PNF and Movement
• /
• v.6 no.2
• /
• pp.1-10
• /
• 2008

Purpose : The purpose of this study was to investigate the effect of aquatic exercise applied PNF patterns on body composition and balance performance in people who have had a stroke. Methods : Forteen candidates who have all experienced a stroke were participating in a community based rehabilitation program, have been included in this study. The program was conducted three times weekly, 1 hour per session, for 10 consecutive weeks. Subjects were tested with body composition and 5 items of Berg's balance test at pre-training and post-training. Total balance indexes in 3 conditions were measured by K.A.T. 3000. The aquatic exercise applied PNF patterns was consisted of PNF patterns and various aquatic activities. Results : After ten weekends of aquatic exercise training, there were not significant difference in body composition(p>.05) except of muscular weight of affected lower extremity(p<.05). But edema index increased more than pre-training (p<.05). Subjects showed significant difference in Berg's balance test results except of 2 items of Berg's balance test (p<.05). Total balance index score when subjects opened their eyes and didn't hold the handle was decreased less than pre-training(p<.05). Conclusion : The results of this study showed that intervention of this aquatic exercise program applied PNF patterns could increase edema index and muscular weight of affected lower extremity and improve the balance performance in people who have had a stroke.

• Journal of Intelligence and Information Systems
• /
• v.25 no.1
• /
• pp.85-107
• /
• 2019

Online consumers browse products belonging to a particular product line or brand for purchase, or simply leave a wide range of navigation without making purchase. The research on the behavior and purchase of online consumers has been steadily progressed, and related services and applications based on behavior data of consumers have been developed in practice. In recent years, customization strategies and recommendation systems of consumers have been utilized due to the development of big data technology, and attempts are being made to optimize users' shopping experience. However, even in such an attempt, it is very unlikely that online consumers will actually be able to visit the website and switch to the purchase stage. This is because online consumers do not just visit the website to purchase products but use and browse the websites differently according to their shopping motives and purposes. Therefore, it is important to analyze various types of visits as well as visits to purchase, which is important for understanding the behaviors of online consumers. In this study, we explored the clustering analysis of session based on click stream data of e-commerce company in order to explain diversity and complexity of search behavior of online consumers and typified search behavior. For the analysis, we converted data points of more than 8 million pages units into visit units' sessions, resulting in a total of over 500,000 website visit sessions. For each visit session, 12 characteristics such as page view, duration, search diversity, and page type concentration were extracted for clustering analysis. Considering the size of the data set, we performed the analysis using the Mini-Batch K-means algorithm, which has advantages in terms of learning speed and efficiency while maintaining the clustering performance similar to that of the clustering algorithm K-means. The most optimized number of clusters was derived from four, and the differences in session unit characteristics and purchasing rates were identified for each cluster. The online consumer visits the website several times and learns about the product and decides the purchase. In order to analyze the purchasing process over several visits of the online consumer, we constructed the visiting sequence data of the consumer based on the navigation patterns in the web site derived clustering analysis. The visit sequence data includes a series of visiting sequences until one purchase is made, and the items constituting one sequence become cluster labels derived from the foregoing. We have separately established a sequence data for consumers who have made purchases and data on visits for consumers who have only explored products without making purchases during the same period of time. And then sequential pattern mining was applied to extract frequent patterns from each sequence data. The minimum support is set to 10%, and frequent patterns consist of a sequence of cluster labels. While there are common derived patterns in both sequence data, there are also frequent patterns derived only from one side of sequence data. We found that the consumers who made purchases through the comparative analysis of the extracted frequent patterns showed the visiting pattern to decide to purchase the product repeatedly while searching for the specific product. The implication of this study is that we analyze the search type of online consumers by using large - scale click stream data and analyze the patterns of them to explain the behavior of purchasing process with data-driven point. Most studies that typology of online consumers have focused on the characteristics of the type and what factors are key in distinguishing that type. In this study, we carried out an analysis to type the behavior of online consumers, and further analyzed what order the types could be organized into one another and become a series of search patterns. In addition, online retailers will be able to try to improve their purchasing conversion through marketing strategies and recommendations for various types of visit and will be able to evaluate the effect of the strategy through changes in consumers' visit patterns.

• The Journal of the Korea Contents Association
• /
• v.21 no.9
• /
• pp.63-74
• /
• 2021

The aim of this study was to analyze the levels of learners' participation and interactions both quantitatively and qualitatively based on the learners' choices of topic patterns in a process of online debate of a general subject and to explore the effects in order to suggest the ways for activating online debates. For this, it quantitatively analyzed the messages and the patterns in the online debate boards and supplementally implemented a post survey in order to investigate the participants' recognition on the factors of the learners' interactions and the effects. The given topic patterns were 'the presentation of one's opinion' and 'the presentation of pros and cons.' As a result of the analysis, the participating degree was higher in the pattern of 'the presentation of one's opinion' apart from the previous study. This study surveyed and, based on the result, it proposed the teachers should refer to the participants' tendency in advance. Also, it presented the deeper meanings on the interactions extracted by the results of the survey. The learners showed the strong dependence on the teacher' lectures or his materials and a variety of interactions with diverse objects. Besides, it is revealed that debates are helpful factors for enhancing learners' argumentative thinking, writing skills, and the knowledge about the subject in terms of the participants' recognition. Based on the findings, this study emphasized the teachers' educational roles and suggested the educational effects of the online debates in each class should be activated in this era of distance education.

• Journal of the Korea Institute of Information Security & Cryptology
• /
• v.14 no.4
• /
• pp.97-110
• /
• 2004

As modem web services become enormously complex, web attacks has become frequent and serious. Existing security solutions such as firewalls or signature-based intrusion detection systems are generally inadequate in securing web services, and analysis of raw web log data is simply impractical for most organizations. Visual display of "interpreted" web logs, with emphasis on anomalous web requests, is essential for an organization to efficiently track web usage patterns and detect possible web attacks. In this paper, we discuss various issues related to effective real-time visualization of web usage patterns and anomalies. We implemented a software tool named SAD (session anomaly detection) Viewer to satisfy such need and conducted an empirical study in which anomalous web traffics such as Misuse attacks, DoS attacks, Code-Red worms and Whisker scans were injected. Our study confirms that SAD Viewer is useful in assisting web security engineers to monitor web usage patterns in general and anomalous web sessions in particular.articular.

• The Journal of Korean Physical Therapy
• /
• v.8 no.1
• /
• pp.1-14
• /
• 1996

The present case study has a object to investigate the changes in locomotion patterns of infant with athetoid cerebral palsy would be occured by the program when it is applied with upper extremity weight bearing. The subject has been limited to one infant over one year of age, selected from the patients in the physical therapy clinic, Rehabilitation Center, Taegu University. Subject is normal in the visual and auditory sense, but he is unable to walk on his own Subject weighted 2.9kg at birth and underwent severe postnatal kernicterus, always on the baby-walker at homo. He disliked supine position characteristic in moving in athetoid type before he was under the program. The program was applied 7 months. Each session of the program is composed of 7 stages : (1) prebriefing between the therapist and the parents (2) pretherapy amusement time of the infant (3) warming-up (4) upper extremity weight bearing (5) cooling-down (6) post-therapy amusement time (7) postbriefing. The locomotion of the subject is proved to be influenced by the program. He showed a leftward circular movement as a result of the exercise, reducing the involuntary movement of his head when he was positioned for crawling. Later he proceeded to develop into creeping, crawling, kneeling and finally cruising. In conclusion, it appeared evident that the locomotive abilities of the subject is improved by the program explored in this study. The higher locomotive patterns could be achieved such as crawling, sitting, kneeling and cruising wich enable the upper extremities weight bearing.