• The KIPS Transactions:PartC
• /
• v.13C no.7 s.110
• /
• pp.821-830
• /
• 2006

As internet worms are spread out worldwide, the detection and filtering of worms becomes one of hot issues in the internet security. As one of implementation methods to detect worms, the Linux Netfilter kernel module can be used. Its basic operation for worm detection is a string matching where coming packet(s) on the network is/are compared with predefined worm signatures(patterns). A worm can appear in a packet or in two (or more) succeeding packets where some part of worm is in the first packet and its remaining part is in its succeeding packet(s). Assuming that the maximum length of a worm pattern is less than 1024 bytes, we need to perform a string matching up to two succeeding packets of 2048 bytes. To do so, Linux Netfilter keeps the previous packet in buffer and performs matching with a combined 2048 byte string of the buffered packet and current packet. As the number of concurrent connections to be handled in the worm detection system increases, the total size of buffer (memory) increases and string matching speed becomes low In this paper, to reduce the memory buffer size and get higher speed of string matching, we propose a string matching scheme without using buffer. The proposed scheme keeps the partial matching result of the previous packet with signatures and has no buffering for previous packet. The partial matching information is used to detect a worm in the two succeeding packets. We implemented the proposed scheme by modifying the Linux Netfilter. Then we compared the modified Linux Netfilter module with the original Linux Netfilter module. Experimental results show that the proposed scheme has 25% lower memory usage and 54% higher speed compared to the original scheme.

• Journal of the Korean association of regional geographers
• /
• v.7 no.2
• /
• pp.35-54
• /
• 2001

The construction of Daedeok Science Town, located in Yuseong ward of Daejeon metropolitan city, began in the early 1970s. It started out as a national project to form an agglomeration of the major central government research institutions. Since that time Daedeok Science Town has also attracted private research institutions, mainly during the 1900s. This study geographically analyzes this research institutions to clarify the regional identity of Daedeok Science Town through an integrated approach of existing new regional geography approach, which is characteristics of labour market as the regional pattern of its laborers' residences, spatial labour division, its research network with other institutions, and networks of university, research institution, and corporations, through the spatial spread of intellectual right of property and through network of technology business incubator relationship with spin offs which is appeared to spatial interaction. The results of the study are as follows: First of all, Daedeok Science Town was not only self-sustenance with marketing garden of agricultural regions in the suburb of Daejeon city but also was consign of agricultural products to Daejeon city before 1972. Since that time, the identity of Daedeok Science town has been formed by externally factors of the science development, by the local decentralization of population and public offices in Seoul metropolitan area in terms of the world economy system, and by the internally accessibility maximization of the central location in Korea between 1992 and 1999. On the part of Daedeok Science Town it has some merits of in-migration from nation-wide, and of mother city's Daejeon. Lastly at the period of the venture business beginning after 1999, the role of institution, developing the existing high technology, made great contribution to an attraction of ventures business to here in need of high technology industry growth, including knowledge-based industry in the informated society. On these bases, Daedeok Science Town seems to grow spontaneously as a science park.

• Journal of the Society of Disaster Information
• /
• v.13 no.3
• /
• pp.296-304
• /
• 2017

In order to predict about forest fire behavior we constructed a database for combustion characteristic of forest fuels in Samcheok, Gangwon-do and prepared fire risk map and fire risk rating using GIS method in this study. For the mapping autoignition temperature, ignition time, flame duration time, total heat release and total smoke release are selected as the standardized parameters and the overall risk rating was made up of the ignition risk parameters(autoignition temperature, ignition time) and the spread risk parameters(flame duration time, total heat release, total smoke release). Forest fire risk was classified into 5 grades and lower grade of fire risk rating mean to correspond to more dangerous forest fire. As a result, the overall risk rating of Samcheok was classified into three grades from 1 to 3 and Nogok-myeon and Miro-myeon were turned out the most dangerous areas for forest fire. Because of the colony of pine and oak trees and the higher fire loads, the flame propagation will be carried out quickly in these areas.

• Journal of Intelligence and Information Systems
• /
• v.18 no.2
• /
• pp.107-130
• /
• 2012

In Twitter, a user can post a message below 140 characters on his/her account, and can also repost a message of other users who the user follows. The message posted by the user in turn can be seen and reposted by other users who follow the user, which is called Re-tweet (RT). While some messages spread widely, other messages have relatively less or no RT. What factors cause these quantity variances of RT originated from original messages? How can the messages become influential in online social networks? As an effort to answer the above questions, we focused on information vividness, message characteristics, and originator characteristics. In perspective of managerial implication, we expect that the findings of this paper will provide corporations with helpful insight on the Word-of-Mouth (WOM) effect for efficient and effective advertisements and communications when they send a message of new products or services through Social Network Services. In perspective of academic implication, we identify the effect of contents of a message on WOM, which has been dealt with by few social network researches.

• Journal of the Korean Institute of Landscape Architecture
• /
• v.44 no.3
• /
• pp.65-78
• /
• 2016

LID(Low-Impact Development) has received a great deal of attention in the field of urban water management. The spread of LID technologies as a natural drainage system has led to a rise in consideration of the applicability of policy in Korea. In this respect, the purpose of this study is to analyze experts' perception about utilization, applicability of policy, and improvements of LID by using Q-methodology. The sample included 31 experts who were government employees, landscape architects, researchers, and professors related to LID. All participants completed a 28-statement Q-sort task. Data was analyzed by using QUANL computer software. As a result of this study, four distinct experts' perceptions about LID are identified: Policy Enforcement Oriented Type, Expert Understanding Oriented Type, Manual Oriented Type, and Effectiveness Oriented Type. This study suggested appropriate directions related to LID technologies, and it is helpful to apply the domestic type's LID and increase the efficiency of LID in Korea. However, this study has a limit in which the viewpoint of the researcher intervenes: a complementary searcher is needed to verify the validity by type in policy decision-making.

• Journal of the Korea Academia-Industrial cooperation Society
• /
• v.11 no.7
• /
• pp.2549-2558
• /
• 2010

A Remote Vital Sign Monitor is an in-home healthcare system designed to wirelessly monitor core-body temperature. The Remote Vital Sign Monitor provides accuracy and features which are comparable to hospital equipment while minimizing cost with ease-of-use. It has two parts, a bandage and a monitor. The bandage and the monitor both use the Chipcon2430(CC2430) which contains an integrated 2.4GHz Direct Sequence Spread Spectrum radio. The CC2430 allows Remote Vital Sign Monitor to operate at over a 100-foot indoor radius. A simple user interface allows the user to set an upper temperature and a lower temperature that is monitored with respect to the core-body temperature. If the core-body temperature exceeds the one of two defined temperatures, the alarm will sound. The alarm is powered by a low-voltage audio amplifier circuit which is connected to a speaker. In order to accurately calculate the core-body temperature, the Remote Vital Sign Monitor must utilize an accurate temperature sensing device. The thermistor selected from GE Sensing satisfies the need for a sensitive and accurate temperature reading. The LCD monitor has a screen size that measures 64.5mm long by 16.4mm wide and also contains back light, and this should allow the user to clearly view the monitor from at least 3 feet away in both light and dark situations.

• Journal of KIISE:Information Networking
• /
• v.37 no.5
• /
• pp.317-326
• /
• 2010

Nowadays, transmission bandwidth for network traffic is increasing and the type is varied such as peer-to-peer (PZP), real-time video, and so on, because distributed computing environment is spread and various network-based applications are developed. However, as PZP traffic occupies much volume among Internet backbone traffics, transmission bandwidth and quality of service(QoS) of other network applications such as web, ftp, and real-time video cannot be guaranteed. In previous research, the port-based technique which checks well-known port number and the Deep Packet Inspection(DPI) technique which checks the payload of packets were suggested for solving the problem of the P2P traffics, however there were difficulties to apply those methods to detection of P2P traffics because P2P applications are not used well-known port number and payload of packets may be encrypted. A proposed algorithm for identifying P2P heavy traffics based on flow transport parameters and behavioral characteristics can solve the problem of the port-based technique and the DPI technique. The focus of this paper is to identify P2P heavy traffic flows rather than all P2P traffics. P2P traffics are consist of two steps i)searching the opposite peer which have some contents ii) downloading the contents from one or more peers. We define P2P flow patterns on these P2P applications' features and then implement the system to classify P2P heavy traffics.

• KIPS Transactions on Software and Data Engineering
• /
• v.5 no.7
• /
• pp.345-350
• /
• 2016

This research suggests the keyword filtering about disaster and the method of detecting area in real-time event detecting system by analyzing contents of twitter. The diffusion of smart-mobile has lead to a fast spread of SNS and nowadays, various researches based on studying SNS are being processed. Among SNS, the twitter has a characteristic of fast diffusion since it is written in 140 words of short paragraph. Therefore, the tweets that are written by twitter users are able to perform a role of sensor. By using these features the research has been constructed which detects the events that have been occurred. However, people became reluctant to open their information of location because it is reported that private information leakage are increasing. Also, problems associated with accuracy are occurred in process of analyzing the tweet contents that do not follow the spelling rule. Therefore, additional designing keyword filtering and the method of area detection on detecting real-time event process were required in order to develop the accuracy. This research suggests the method of keyword filtering about disaster and two methods of detecting area. One is the method of removing area noise which removes the noise that occurred in the local name words. And the other one is the method of determinating the area which confirms local name words by using landmarks. By applying the method of keyword filtering about disaster and two methods of detecting area, the accuracy has improved. It has improved 49% to 78% by using the method of removing area noise and the other accuracy has improved 49% to 89% by using the method of determinating the area.

• Proceedings of the Korean Institute of Electrical and Electronic Material Engineers Conference
• /
• 2007.06a
• /
• pp.328-328
• /
• 2007

Large area matrix-addressed image detectors are a recent technology for x-ray imaging with medical diagnostic and other applications. The imaging properties of x-ray pixel detectors depend on the quantum efficiency of x-rays, the generated signal of each x-ray photon and the distribution of the generated signal between pixels. In a phosphor coated detector the light signal is generated by electrons captured in the phosphor screen. In our study we simulated the lateral spread distributions for phosphor coupled detector by Monte Carlo simulations. Most simulations of such detectors simplify the setup by only taking the conversion layer into account neglecting behind. The Monte Carlo code MCNPX has been used to simulate the complete interaction and subsequent charge transport of x-ray radiation. This has allowed the analysis of charge sharing between pixel elements as an important limited factor of digital x-ray imaging system. The parameters are determined by lateral distribution of x-ray photons and x-ray induced electrons. The primary purpose of this study was to develop a design tool for the evaluation of geometry factor in the phosphor coupled optical imaging detector. In order to evaluate the spatial resolution for different phosphor material, phosphor geometry we have developed a simulation code. The developed code calculates the energy absorption and spatial distribution based on both the signal from the scintillating layer and the signal from direct detection of x-ray in the detector. We show that internal scattering contributes to the so-called spatial resolution drop of the image detector. Results from the simulation of spatial distribution in a phosphor pixel detector are presented. The spatial resolution can be increased by optimizing pixel size and phosphor thickness.

• International Journal of Highway Engineering
• /
• v.11 no.1
• /
• pp.117-126
• /
• 2009

Total number of recorded earthquakes in Korea is more than 2,000 of which 48 were catastrophic. The impacts from infrastructure damage due to an earthquake to production facilities and lifelines may spread across boundaries of several regions via import-export relationships and can bring serious economic impact to other regions. The economic impacts from unscheduled events stem not only from the damage and direct losses, but also from the indirect losses during the recovery and reconstruction periods. To recover and reconstruct the facilities and lifelines damaged by unexpected events through investment or government financial aid, both the direct and the indirect economic impacts from an event need to be measured in regional and interregional contexts. Direct economic impact is the direct change of production and demand due to the disruption of production facilities and lifelines from an unexpected event, and indirect economic impact is the change in other sectors due to inter-industry relationships. The purpose of the paper is to analyze various economic impacts of an earthquake, especially impacts on transportation networks in Korea. We collected spatial and economic data from Korea, and analyzed and estimated final demand loss and commodity flows from the unscheduled event.