• Title/Summary/Keyword: aggregate detection

Search Result 34, Processing Time 0.019 seconds

MITRE ATT&CK and Anomaly detection based abnormal attack detection technology research (MITRE ATT&CK 및 Anomaly Detection 기반 이상 공격징후 탐지기술 연구)

  • Hwang, Chan-Woong;Bae, Sung-Ho;Lee, Tae-Jin
    • Convergence Security Journal
    • /
    • v.21 no.3
    • /
    • pp.13-23
    • /
    • 2021
  • The attacker's techniques and tools are becoming intelligent and sophisticated. Existing Anti-Virus cannot prevent security accident. So the security threats on the endpoint should also be considered. Recently, EDR security solutions to protect endpoints have emerged, but they focus on visibility. There is still a lack of detection and responsiveness. In this paper, we use real-world EDR event logs to aggregate knowledge-based MITRE ATT&CK and autoencoder-based anomaly detection techniques to detect anomalies in order to screen effective analysis and analysis targets from a security manager perspective. After that, detected anomaly attack signs show the security manager an alarm along with log information and can be connected to legacy systems. The experiment detected EDR event logs for 5 days, and verified them with hybrid analysis search. Therefore, it is expected to produce results on when, which IPs and processes is suspected based on the EDR event log and create a secure endpoint environment through measures on the suspicious IP/Process.

Face Spoofing Attack Detection Using Spatial Frequency and Gradient-Based Descriptor

  • Ali, Zahid;Park, Unsang
    • KSII Transactions on Internet and Information Systems (TIIS)
    • /
    • v.13 no.2
    • /
    • pp.892-911
    • /
    • 2019
  • Biometric recognition systems have been widely used for information security. Among the most popular biometric traits, there are fingerprint and face due to their high recognition accuracies. However, the security system that uses face recognition as the login method are vulnerable to face-spoofing attacks, from using printed photo or video of the valid user. In this study, we propose a fast and robust method to detect face-spoofing attacks based on the analysis of spatial frequency differences between the real and fake videos. We found that the effect of a spoofing attack stands out more prominently in certain regions of the 2D Fourier spectra and, therefore, it is adequate to use the information about those regions to classify the input video or image as real or fake. We adopt a divide-conquer-aggregate approach, where we first divide the frequency domain image into local blocks, classify each local block independently, and then aggregate all the classification results by the weighted-sum approach. The effectiveness of the methodology is demonstrated using two different publicly available databases, namely: 1) Replay Attack Database and 2) CASIA-Face Anti-Spoofing Database. Experimental results show that the proposed method provides state-of-the-art performance by processing fewer frames of each video.

Analysis on an improved resistance tuning type multi-frequency piezoelectric spherical transducer

  • Qin, Lei;Wang, Jianjun;Liu, Donghuan;Tang, Lihua;Song, Gangbing
    • Smart Structures and Systems
    • /
    • v.24 no.4
    • /
    • pp.435-446
    • /
    • 2019
  • The existing piezoelectric spherical transducers with fixed prescribed dynamic characteristics limit their application in scenarios with multi-frequency or frequency variation requirement. To address this issue, this work proposes an improved design of piezoelectric spherical transducers using the resistance tuning method. Two piezoceramic shells are the functional elements with one for actuation and the other for tuning through the variation of load resistance. The theoretical model of the proposed design is given based on our previous work. The effects of the resistance, the middle surface radius and the thickness of the epoxy adhesive layer on the dynamic characteristics of the transducer are explored by numerical analysis. The numerical results show that the multi-frequency characteristics of the transducer can be obtained by tuning the resistance, and its electromechanical coupling coefficient can be optimized by a matching resistance. The proposed design and derived theoretical solution are validated by comparing with the literature given special examples as well as an experimental study. The present study demonstrates the feasibility of using the proposed design to realize the multi-frequency characteristics, which is helpful to improve the performance of piezoelectric spherical transducers used in underwater acoustic detection, hydrophones, and the spherical smart aggregate (SSA) used in civil structural health monitoring, enhancing their operation at the multiple working frequencies to meet different application requirements.

Ultrasonic Wave Propagation Analysis for Damage Detection in Heterogeneous Concrete Materials (콘크리트 내부결함 탐지를 위한 초음파 전파 해석)

  • Jung, Hwee Kwon;Rhee, Inkyu;Kim, Jae-Min
    • Journal of the Computational Structural Engineering Institute of Korea
    • /
    • v.33 no.4
    • /
    • pp.225-235
    • /
    • 2020
  • Ultrasonic investigation of damage detection has been widely used for non-destructive testing of various concrete structures. This study focuses on damage detection analysis with the aid of wave propagation in two-phase composite concrete with aggregate (inclusion) and mortar (matrix). To fabricate a realistic simulation model containing a variety of irregular aggregate shapes, the mesh generation technique using an image processing technique was proposed. Initially, the domains and boundaries of the aggregates were extracted from the digital image of a typical concrete cut-section. This enables two different domains: aggregates and mortar in heterogeneous concrete sections, and applied the grids onto these domains to discretize the model. Subsequently, finite element meshes are generated in terms of spatial and temporal requirements of the model size. For improved analysis results, all meshes are designed to be quadrilateral type, and an additional process is conducted to improve the mesh quality. With this simulation model, wave propagation analyses were conducted with a central frequency of 75 kHz of the Mexican hat incident wave. Several void damages, such as needle-shaped cracks and void-shaped holes, were artificially introduced in the model. Finally, various formats of internal damage were detected by implementing energy mapping based signal processing.

A Study on Fish Movement Efficiency in Biopolymer and Aggregate Mixed Fishway (피마자유기반 바이오폴리머와 골재를 혼합한 어도의 어류이동효율 실험연구)

  • Dong-Jin Lee;Min Ho, Jang;Joongu Kang;Hong-Kyu Ahn
    • Ecology and Resilient Infrastructure
    • /
    • v.11 no.1
    • /
    • pp.11-22
    • /
    • 2024
  • A fishway is an artificial waterway or device used to resolve difficulties in the movement of fish in a river. Most existing fishways are made of concrete and emit toxic substances, which has a negative impact on the river environment. Accordingly, there is a need to develop fishway construction technology that is eco-friendly and can increase movement efficiency. The technology presented in this study is an integrated porous structure that combines the aggregate with a biopolymer material extracted from castor oil, a non-toxic material. It is a fishway construction technology using eco-friendly materials that can allow vegetation to grow on the surface. In this study, an eco-friendly fishway mixed with biopolymer and aggregate was built on a real scale and the fish movement efficiency was tested and analyzed. As a result of the experiment, a total of 201 fish of 14 species were released with tags inserted, and the detection rate of released fish was confirmed to be 82.6% on average. A total of 40 fish of 6 species were transported upstream through the fishway, and the average passage rate was confirmed to be 21.7%. As a result of checking the circadian migration pattern, it was found that all fish mainly migrate during the day. It was confirmed that there was no significant functional difference between a fishway using biopolymer and a concrete fishway. It is believed that a fishway using biopolymer can be used as a replacement for a concrete fishway.

A study on enhancement of heterogeneous noisy image quality for the performance improvement of target detection and tracking (표적 탐지/추적 성능 향상을 위한 불균일 미세 잡음 영상 화질개선 연구)

  • Kim, Y.;Yoo, P.H.;Kim, D.S.
    • Journal of Korea Multimedia Society
    • /
    • v.17 no.8
    • /
    • pp.923-936
    • /
    • 2014
  • Images can be contaminated with different types of noise, for different reasons. The neighborhood averaging and smoothing by image averaging are the classical image processing techniques for noise removal. The classical spatial filtering refers to the aggregate of pixels composing an image and operating directly on these pixels. To reduce or remove effectively noise in image sequences, it usually needs to use noise reduction filter based on space or time domain such as method of spatial or temporal filter. However, the method of spatial filter can generally cause that signals of objects as the target are also blurred. In this paper, we propose temporal filter using the piece-wise quadratic function model and enhancement algorithm of image quality for the performance improvement of target detection and tracking by heterogeneous noise reduction. Image tracking simulation that utilizes real IIR(Imaging Infra-Red) images is employed to evaluate the performance of the proposed image processing algorithm.

A Global TraHlc Conool Architecture For Isolating Network Attacts h Highspeed Intemet Backbone Networle (인터넷 백본망상에서 네트워크 공격 고립을 위한 전역 트래픽 제어 구조)

  • 노병희
    • The Journal of Korean Institute of Communications and Information Sciences
    • /
    • v.29 no.5B
    • /
    • pp.491-497
    • /
    • 2004
  • In this Paper, we W a Hovel global traffic control architecture to isolate malicious network attacks and protect network infrastructure in Internet backbone networks. Unlike existing methods based on individual packets or flows, since the proposed detection and control methods are operated on the aggregate traffic level, the computational complexity can k significantly reduced, and they are applicable to develop a global defense architecture against network attack. Experimental results show that the proposed scheme can detect the network attack symptoms very exactly and quickly and protect the network resources as well as the normal traffic flows very efficiently.

A methodology for spatial distribution of grain and voids in self compacting concrete using digital image processing methods

  • Onal, Okan;Ozden, Gurkan;Felekoglu, Burak
    • Computers and Concrete
    • /
    • v.5 no.1
    • /
    • pp.61-74
    • /
    • 2008
  • Digital image processing algorithms for the analysis and characterization of grains and voids in cemented materials were developed using toolbox functions of a mathematical software package. Utilization of grayscale, color and watershed segmentation algorithms and their performances were demonstrated on artificially prepared self-compacting concrete (SCC) samples. It has been found that color segmentation was more advantageous over the gray scale segmentation for the detection of voids whereas the latter method provided satisfying results for the aggregate grains due to the sharp contrast between their colors and the cohesive matrix. The watershed segmentation method, on the other hand, appeared to be very efficient while separating touching objects in digital images.

Mechanisms of ASR surface cracking in a massive concrete cylinder

  • Kagimoto, Hiroyuki;Yasuda, Yukihiro;Kawamura, Mitsunori
    • Advances in concrete construction
    • /
    • v.3 no.1
    • /
    • pp.39-54
    • /
    • 2015
  • Relative humidity and strains within a massive concrete cylinder (${\varphi}450mm{\times}900mm$) in the drying and the re-saturating process were measured for elucidating the process of ASR surface cracking in concrete. The expansion behavior of mortars in dry atmospheres with various R.H. values and the resaturating process was revealed. Non- or less-expansive layers were formed in near-surface regions in the concrete cylinder in the drying process, but ASR expansions actively progressed in inner portions. After resaturating, R.H. values of near-surface regions rapidly increased with time, but expansions in the regions were found to be very small. However, in the middle portions, of which R.H. values were kept 80% ~ 90% R.H. in the drying process, expansion actively progressed, resulting in further development of surface cracks in the re-saturating process.

Time Series Representation Combining PIPs Detection and Persist Discretization Techniques for Time Series Classification (시계열 분류를 위한 PIPs 탐지와 Persist 이산화 기법들을 결합한 시계열 표현)

  • Park, Sang-Ho;Lee, Ju-Hong
    • The Journal of the Korea Contents Association
    • /
    • v.10 no.9
    • /
    • pp.97-106
    • /
    • 2010
  • Various time series representation methods have been suggested in order to process time series data efficiently and effectively. SAX is the representative time series representation method combining segmentation and discretization techniques, which has been successfully applied to the time series classification task. But SAX requires a large number of segments in order to represent the meaningful dynamic patterns of time series accurately, since it loss the dynamic property of time series in the course of smoothing the movement of time series. Therefore, this paper suggests a new time series representation method that combines PIPs detection and Persist discretization techniques. The suggested method represents the dynamic movement of high-diemensional time series in a lower dimensional space by detecting PIPs indicating the important inflection points of time series. And it determines the optimal discretizaton ranges by applying self-transition and marginal probabilities distributions to KL divergence measure. It minimizes the information loss in process of the dimensionality reduction. The suggested method enhances the performance of time series classification task by minimizing the information loss in the course of dimensionality reduction.