• Title/Summary/Keyword: Threat score

Search Result 54, Processing Time 0.022 seconds

An APT Attack Scoring Method Using MITRE ATT&CK (MITRE ATT&CK을 이용한 APT 공격 스코어링 방법 연구)

  • Cho, Sungyoung;Park, Yongwoo;Lee, Kunho;Choi, Changhee;Shin, Chanho;Lee, Kyeongsik
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.32 no.4
    • /
    • pp.673-689
    • /
    • 2022
  • We propose an APT attack scoring method as a part of the process for detecting and responding to APT attacks. First, unlike previous work that considered inconsistent and subjective factors determined by cyber security experts in the process of scoring cyber attacks, we identify quantifiable factors from components of MITRE ATT&CK techniques and propose a method of quantifying each identified factor. Then, we propose a method of calculating the score of the unit attack technique from the quantified factors, and the score of the entire APT attack composed of one or more multiple attack techniques. We present the possibility of quantification to determine the threat level and urgency of cyber attacks by applying the proposed scoring method to the APT attack reports, which contains the hundreds of APT attack cases occurred worldwide. Using our work, it will be possible to determine whether actual cyber attacks have occurred in the process of detecting APT attacks, and respond to more urgent and important cyber attacks by estimating the priority of APT attacks.

Prediction of Agricultural Wind and Gust Using Local Ensemble Prediction System (국지앙상블시스템을 활용한 농경지 바람 및 강풍 예측)

  • Jung Hyuk Kang;Geon-Hu Kim;Kyu Rang Kim
    • Korean Journal of Agricultural and Forest Meteorology
    • /
    • v.26 no.2
    • /
    • pp.115-125
    • /
    • 2024
  • Wind is a meteorological factor that has a significant impact on agriculture. Gust cause damage such as fruit drop and damage to facilities. In this study, low-altitude wind speed prediction was performed by applying physical models to Local Ensemble Prediction System (LENS). Logarithmic Law (LOG) and Power Law (POW) were used as the physical models, and Korea Ministry of Environment indicators and Moderate Resolution Imaging Spectroradiometer (MODIS) data were applied as indicator variables. We collected and verified wind and gust data at 3m altitude in 2022 operated by the Rural Development Administration, and presented the results in scatter plot, correlation coefficient, Root Mean Square Error (RMSE), Normalized Root Mean Square Error (NRMSE), and Threat Score (TS). The LOG-applied model showed better results in wind speed, and the POW-applied model showed better results in gust.

Application and Evaluation of a Web-based Education Program on Blood-borne Infection Control for Nurses (간호사를 위한 웹기반 혈액매개 감염관리 프로그램의 적용 및 평가)

  • Choi, Jeong-Sil;Kim, Keum-Soon
    • Journal of Korean Academy of Nursing
    • /
    • v.39 no.2
    • /
    • pp.298-309
    • /
    • 2009
  • Purpose: To develop a web-based program on blood-borne infection control and to examine the effect of the newly developed program on perceived threat of diseases, knowledge, preventive health behaviors for blood-borne infections, and incidence rates of accidental needle sticks and other sharp object injuries in nurses. Methods: The program was developed through the processes of analysis, design, development, implementation, and evaluation. The research design involved a nonequivalent control group for pretest and posttest experiments. The setting was a 745-bed general hospital located in Korea. Results: The program was designed and developed after consulting previous studies. After development of the program was completed, it was evaluated and revised by a panel of experts. The total score for perceived threat of diseases, knowledge, preventive health behaviors in the experimental group was significantly higher compared to the control group (p<.05). The incidence rates for needle sticks and other sharp object injuries in the experimental group were significantly lower compared to the control group (p<.05). Conclusion: Application of a Web-based, blood-borne infection control program is effective, and can be expanded to other healthcare workers who also have a high risk of blood-borne infections.

3-Step Security Vulnerability Risk Scoring considering CVE Trends (CVE 동향을 반영한 3-Step 보안 취약점 위험도 스코어링)

  • Jihye, Lim;Jaewoo, Lee
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.27 no.1
    • /
    • pp.87-96
    • /
    • 2023
  • As the number of security vulnerabilities increases yearly, security threats continue to occur, and the vulnerability risk is also important. We devise a security threat score calculation reflecting trends to determine the risk of security vulnerabilities. The three stages considered key elements such as attack type, supplier, vulnerability trend, and current attack methods and techniques. First, it reflects the results of checking the relevance of the attack type, supplier, and CVE. Secondly, it considers the characteristics of the topic group and CVE identified through the LDA algorithm by the Jaccard similarity technique. Third, the latest version of the MITER ATT&CK framework attack method, technology trend, and relevance between CVE are considered. We used the data within overseas sites provide reliable security information to review the usability of the proposed final formula CTRS. The scoring formula makes it possible to fast patch and respond to related information by identifying vulnerabilities with high relevance and risk only with some particular phrase.

Research on the application of Machine Learning to threat assessment of combat systems

  • Seung-Joon Lee
    • Journal of the Korea Society of Computer and Information
    • /
    • v.28 no.7
    • /
    • pp.47-55
    • /
    • 2023
  • This paper presents a method for predicting the threat index of combat systems using Gradient Boosting Regressors and Support Vector Regressors among machine learning models. Currently, combat systems are software that emphasizes safety and reliability, so the application of AI technology that is not guaranteed to be reliable is restricted by policy, and as a result, the electrified domestic combat systems are not equipped with AI technology. However, in order to respond to the policy direction of the Ministry of National Defense, which aims to electrify AI, we conducted a study to secure the basic technology required for the application of machine learning in combat systems. After collecting the data required for threat index evaluation, the study determined the prediction accuracy of the trained model by processing and refining the data, selecting the machine learning model, and selecting the optimal hyper-parameters. As a result, the model score for the test data was over 99 points, confirming the applicability of machine learning models to combat systems.

Evaluation of Predictability of Global/Regional Integrated Model System (GRIMs) for the Winter Precipitation Systems over Korea (한반도 겨울철 강수 유형에 따른 전지구 수치모델(GRIMs) 예측성능 검증)

  • Yeon, Sang-Hoon;Suh, Myoung-Suk;Lee, Juwon;Lee, Eun-Hee
    • Atmosphere
    • /
    • v.32 no.4
    • /
    • pp.353-365
    • /
    • 2022
  • This paper evaluates precipitation forecast skill of Global/Regional Integrated Model system (GRIMs) over South Korea in a boreal winter from December 2013 to February 2014. Three types of precipitation are classified based on development mechanism: 1) convection type (C type), 2) low pressure type (L type), and 3) orographic type (O type), in which their frequencies are 44.4%, 25.0%, and 30.6%, respectively. It appears that the model significantly overestimates precipitation occurrence (0.1 mm d-1) for all types of winter precipitation. Objective measured skill scores of GRIMs are comparably high for L type and O type. Except for precipitation occurrence, the model shows high predictability for L type precipitation with the most unbiased prediction. It is noted that Equitable Threat Score (ETS) is inappropriate for measuring rare events due to its high dependency on the sample size, as in the case of Critical Success Index as well. The Symmetric Extreme Dependency Score (SEDS) demonstrates less sensitivity on the number of samples. Thus, SEDS is used for the evaluation of prediction skill to supplement the limit of ETS. The evaluation via SEDS shows that the prediction skill score for L type is the highest in the range of 5.0, 10.0 mm d-1 and the score for O type is the highest in the range of 1.0, 20.0 mm d-1. C type has the lowest scores in overall range. The difference in precipitation forecast skill by precipitation type can be explained by the spatial distribution and intensity of precipitation in each representative case.

The Improvement of Forecast Accuracy of the Unified Model at KMA by Using an Optimized Set of Physical Options (기상청 현업 지역통합모델 물리과정 최적화를 통한 예측 성능 향상)

  • Lee, Juwon;Han, Sang-Ok;Chung, Kwan-Young
    • Atmosphere
    • /
    • v.22 no.3
    • /
    • pp.345-356
    • /
    • 2012
  • The UK Met Office Unified Model at the KMA has been operationally utilized as the next generation numerical prediction system since 2010 after it was first introduced in May, 2008. Researches need to be carried out regarding various physical processes inside the model in order to improve the predictability of the newly introduced Unified Model. We first performed a preliminary experiment for the domain ($170{\times}170$, 10 km, 38 layers) smaller than that of the operating system using the version 7.4 of the UM local model to optimize its physical processes. The result showed that about 7~8% of the improvement ratio was found at each stage by integrating four factors (u, v, th, q), and the final improvement ratio was 25%. Verification was carried out for one month of August, 2008 by applying the optimized combination to the domain identical to the operating system, and the result showed that the precipitation verification score (ETS, equitable threat score) was improved by 9%, approximately.

A Grey Wolf Optimized- Stacked Ensemble Approach for Nitrate Contamination Prediction in Cauvery Delta

  • Kalaivanan K;Vellingiri J
    • Economic and Environmental Geology
    • /
    • v.57 no.3
    • /
    • pp.329-342
    • /
    • 2024
  • The exponential increase in nitrate pollution of river water poses an immediate threat to public health and the environment. This contamination is primarily due to various human activities, which include the overuse of nitrogenous fertilizers in agriculture and the discharge of nitrate-rich industrial effluents into rivers. As a result, the accurate prediction and identification of contaminated areas has become a crucial and challenging task for researchers. To solve these problems, this work leads to the prediction of nitrate contamination using machine learning approaches. This paper presents a novel approach known as Grey Wolf Optimizer (GWO) based on the Stacked Ensemble approach for predicting nitrate pollution in the Cauvery Delta region of Tamilnadu, India. The proposed method is evaluated using a Cauvery River dataset from the Tamilnadu Pollution Control Board. The proposed method shows excellent performance, achieving an accuracy of 93.31%, a precision of 93%, a sensitivity of 97.53%, a specificity of 94.28%, an F1-score of 95.23%, and an ROC score of 95%. These impressive results underline the demonstration of the proposed method in accurately predicting nitrate pollution in river water and ultimately help to make informed decisions to tackle these critical environmental problems.

Detecting Anomalies in Time-Series Data using Unsupervised Learning and Analysis on Infrequent Signatures

  • Bian, Xingchao
    • Journal of IKEEE
    • /
    • v.24 no.4
    • /
    • pp.1011-1016
    • /
    • 2020
  • We propose a framework called Stacked Gated Recurrent Unit - Infrequent Residual Analysis (SG-IRA) that detects anomalies in time-series data that can be trained on streams of raw sensor data without any pre-labeled dataset. To enable such unsupervised learning, SG-IRA includes an estimation model that uses a stacked Gated Recurrent Unit (GRU) structure and an analysis method that detects anomalies based on the difference between the estimated value and the actual measurement (residual). SG-IRA's residual analysis method dynamically adapts the detection threshold from the population using frequency analysis, unlike the baseline model that relies on a constant threshold. In this paper, SG-IRA is evaluated using the industrial control systems (ICS) datasets. SG-IRA improves the detection performance (F1 score) by 5.9% compared to the baseline model.

The Difference of Locus-of-control among Western Medical School Student, Oriental Medical School Students, and Non-Medical School Students (의과대학생과 한의과대학생, 일반대학생들의 건강통제위에 대한 차이)

  • Choi, Kui-Son;Lee, Han-Joon;Lee, Sun-Hee
    • Journal of Preventive Medicine and Public Health
    • /
    • v.36 no.3
    • /
    • pp.239-247
    • /
    • 2003
  • Objectives : The objectives of this study were to examine the difference in attitude toward health-specific locus-of-control and medical care among western medical students, oriental Medical students, and non-medical school students. Methods : The subjects of this study were 667 students who agreed to respond the questionnaire :212 western medical school students, 190 oriental medical school students, and 205 non-medical school students. The health-specific locus of control was measured by the structured questionnaire developed by Lau and Ware. The attitude toward western and oriental medicine was also measured by the questionnaire. Results : Western medical students and non-medical school students were more likely than oriental medical students to place high value on 'the provider control over health' and 'the general threat to health' scales (F=20.47, F=19.98). But oriental medical school students ranked 'the self control of health' scale as more important than any other locus of control scale (F=19.34). The health specific locus of control was also different from the grade. When trte grade was increased, 'the provider control over health' scale was slowly decreased, especially in western medical students and non medical school students. However, the 'general threat to health' scale was increased in oriental medical students. Western medical school students expressed more positive attitude toward western medicine. Oriental medical school students put a higher score on oriental medicine. Nevertheless, as the grade was increased, the positive attitude toward oriental medicine slightly decreased in oriental medical school students. Conclusions : There is a difference in health-specific locus of control and attitude toward medicine among western medical students, oriental medical students, and non-medical students. The locus of control and attitude of medical students towards medicine may affect both how they behave towards patients and how they help shape future public policy. Therefore, interdisciplinary educational initiatives may be the best way to handle this issue.