• 제목/요약/키워드: security requirement

검색결과 393건 처리시간 0.029초

안전한 탄 발사시험을 위한 모니터링 시스템 개발에 관한 연구 (Study on Developing a Monitoring System for Safe Fire Testing)

  • 기재석
    • 대한안전경영과학회:학술대회논문집
    • /
    • 대한안전경영과학회 2005년도 춘계학술대회
    • /
    • pp.453-459
    • /
    • 2005
  • On this research, we show some concrete examples as software design, 2D/3D display, graph display, and gage display to develop a data monitoring system for real time safe fire testing. Developed software which is simulation software for live fire testing, has been designed to display informations about whole test status in a live fire testing, and with this, user can control a live fire testing under the safe environment. Beside, we increase a security by using a authority of user to access on this software. and we develop it based on module designed to apply a requirement of user later on.

  • PDF

의료 보안 PKI 표준의 인증서 요구사항에 관한 연구 (A Study on Certificate Requirement of Health Informatics Public key infrastructure Standard)

  • 박근호;김성진;손태식
    • 한국정보처리학회:학술대회논문집
    • /
    • 한국정보처리학회 2016년도 춘계학술발표대회
    • /
    • pp.277-279
    • /
    • 2016
  • 보건의료 산업에서 보건의료제공자와 의료 단체들은 국가와 국가간 환자의 정보를 교환한다. 이 때 교환되는 환자의 정보를 보호하기 위한 수단으로 공개키 기반 구조와 전자 인증서 기술을 사용해야 한다. 하지만 국가마다 전자인증서를 사용하기 위한 인증기관과 등록기관의 정책이 일치하지 않으므로, 여러 나라들과 기관이 신뢰하고 사용할 수 있는 프레임워크가 필요하다. 이러한 프레임워크를 구축하기 위한 국제 표준 문서가 ISO 17090이며, 본 고에서는 ISO 17090에 명시된 인증서 요구사항과 암호화 알고리즘에 대한 개선방안을 제시한다.

Conditional Re-encoding Method for Cryptanalysis-Resistant White-Box AES

  • Lee, Seungkwang;Choi, Dooho;Choi, Yong-Je
    • ETRI Journal
    • /
    • 제37권5호
    • /
    • pp.1012-1022
    • /
    • 2015
  • Conventional cryptographic algorithms are not sufficient to protect secret keys and data in white-box environments, where an attacker has full visibility and control over an executing software code. For this reason, cryptographic algorithms have been redesigned to be resistant to white-box attacks. The first white-box AES (WB-AES) implementation was thought to provide reliable security in that all brute force attacks are infeasible even in white-box environments; however, this proved not to be the case. In particular, Billet and others presented a cryptanalysis of WB-AES with 230 time complexity, and Michiels and others generalized it for all substitution-linear transformation ciphers. Recently, a collision-based cryptanalysis was also reported. In this paper, we revisit Chow and others's first WB-AES implementation and present a conditional re-encoding method for cryptanalysis protection. The experimental results show that there is approximately a 57% increase in the memory requirement and a 20% increase in execution speed.

안전한 탄 발사시험을 위한 모니터링 시스템 개발에 관한 연구 (Study on Developing a Monitoring System for Safe Fire Testing)

  • 기재석
    • 대한안전경영과학회지
    • /
    • 제7권2호
    • /
    • pp.65-72
    • /
    • 2005
  • On this research, we show some concrete examples as software design, 2D/3D display, graph display, and gage display to develop a data monitoring system for real time safe fire testing. Developed software which is simulation software for live fire testing, has been designed to display informations about whole test status in a live fire testing, and with this, user can control a live fire testing under the safe environment. Beside, we increase a security by using a authority of user to access on this software. and we develop it based on module designed to apply a requirement of user later on.

기존 사무소건축의 IB화를 위한 리모델링 작업범위 (The Work Scope of Remodelling for the Intelligent Office Building)

  • 박근준;구수영
    • 한국건축시공학회지
    • /
    • 제4권1호
    • /
    • pp.75-83
    • /
    • 2004
  • The IB is normally defined in terms of BA, OA, security system, information processing and telecommunications services However, the buildings being already in existence are deficient in two areas. One of these areas is building envelope and plan. The other area is mechanical, electrical and structural systems which do not provide the environmental quality required by IB. Existing technology and design knowledge are available to address these deficiencies. Especially, the office buildings being already in existence must meet IB requirement in order to achieve desirable office environment. They are a building envelope, moisture control, properly-located windows, shafts for duct, telephone and electric closets and acoustical environments. In this paper, a new approach to construct the work scope of remodelling the office building being already existence is described by contrasting the building performance criteria of IB. It concludes by speculating on the consequences of extrapolating the results of study to remodelling the office building being already existence.

Gröbner Basis Attacks on Lightweight RFID Authentication Protocols

  • Han, Dae-Wan
    • Journal of Information Processing Systems
    • /
    • 제7권4호
    • /
    • pp.691-706
    • /
    • 2011
  • Since security and privacy problems in RFID systems have attracted much attention, numerous RFID authentication protocols have been suggested. One of the various design approaches is to use light-weight logics such as bitwise Boolean operations and addition modulo $2^m$ between m-bits words. Because these operations can be implemented in a small chip area, that is the major requirement in RFID protocols, a series of protocols have been suggested conforming to this approach. In this paper, we present new attacks on these lightweight RFID authentication protocols by using the Gr$\ddot{o}$bner basis. Our attacks are superior to previous ones for the following reasons: since we do not use the specific characteristics of target protocols, they are generally applicable to various ones. Furthermore, they are so powerful that we can recover almost all secret information of the protocols. For concrete examples, we show that almost all secret variables of six RFID protocols, LMAP, $M^2AP$, EMAP, SASI, Lo et al.'s protocol, and Lee et al.'s protocol, can be recovered within a few seconds on a single PC.

Adaptive Wireless Sensor Network Technology for Ubiquitous Container Logistics Development

  • Chai, Bee-Lie;Yeoh, Chee-Min;Kwon, Tae-Hong;Lee, Ki-Won;Lim, Hyotaek;Kwark, Gwang-Hoon
    • 한국정보통신학회:학술대회논문집
    • /
    • 한국해양정보통신학회 2009년도 춘계학술대회
    • /
    • pp.317-320
    • /
    • 2009
  • At the present day, the use of containers crisscrossing seven seas and intercontinental transport has significantly increased and bringing the change on the shape of the world economy which we cannot be neglected. Additionally, with the recent technological advances in wireless sensor network (WSN) technologies, has providing an economically feasible monitoring solution to diverse application that allow us to envision the intelligent containers represent the next evolutionary development step in order to increase the efficiency, productivity, utilities, security and safe of containerized cargo shipping. This paper we present a comprehensive containerized cargo monitoring system which has adaptively embedded WSN technology into cargo logistic technology. We share the basic requirement for an autonomous logistic network that could provide optimum performance and a suite of algorithms for self-organization and bi-directional communication of a scalable large number of sensor node apply on container regardless inland and maritime transportation.

  • PDF

IT 제품 개발자를 위한 CC평가(ver. 3.1) 보안기능 요구사항 지원 도구 프로토타이핑 (A Prototyping on Common Criteria Evaluation Security functional Requirement for Developer of IT products supporting tool.)

  • 한경수;정현미;이강수
    • 한국정보처리학회:학술대회논문집
    • /
    • 한국정보처리학회 2012년도 춘계학술발표대회
    • /
    • pp.702-705
    • /
    • 2012
  • 공통평가 기준(CC, Common Criteria)은 정보 보호 제품, 즉 IT제품에 대한 보안성을 평가하기 위한 국제 평가 기준이다. 그러나 개발자 측면에서는 CC 에서 정의된 보안 기능 사항 중 IT제품 개발에 있어서 어떤 보안기능을 요구하며, 적용 가능한 IT기술에는 무엇이 있는지 알기 어렵다. 이 때문에 평가를 받고자 할 때 제출물을 작성하거나 IT제품 개발에 있어서 많은 시간과 인력이 필요하게 된다. 본 논문은 IT제품 개발자를 위해 공통평가 기준에서 정의하여 서술된 보안기능항목을 이해하고 적용 가능한 IT기술에는 어떤 것 들이 있는지 제시하기 위한 도구를 개발하기 위해 CC(Ver3.1)2부 보안기능 요구사항 중 프라이버시 클래스만을 해결할 수 있는 S/W를 개발 및 프로토타이핑 하였다.

암호화에서 보안 요건 정의 (Definition of Security Requirement in Encryption)

  • 신성윤;김창호;장대현;이현창;이양원
    • 한국정보통신학회:학술대회논문집
    • /
    • 한국정보통신학회 2014년도 춘계학술대회
    • /
    • pp.187-188
    • /
    • 2014
  • 암호화란 데이터 전송 시 타인의 불법적인 방법에 의해 데이터가 손실되거나 변경되는 것을 방지하기 위해 데이터를 변환하여 전송하는 방법이다. 중요정보(데이터) 전송 또는 저장 시 정보의 기밀성, 무결성을 보장하여야 한다. 암호화는 단방향 및 양방향 암호화를 적용한다. 암호화 키는 안전성이 보장되어야 한다.

  • PDF

접근 통제의 보안 요건 정의 (Definition of Security Requirement in Access Control)

  • 신성윤;김창호;장대현;이현창;이양원
    • 한국정보통신학회:학술대회논문집
    • /
    • 한국정보통신학회 2014년도 춘계학술대회
    • /
    • pp.192-193
    • /
    • 2014
  • 업무수행자(사용자)의 역할(Role)과 데이터 사용행위에 기반한 접근 및 권한 통제가 이루어져야 한다. 중요 정보의 대량 조회 및 변경 작업은 사전 결재를 득해야 한다. 일정 시간 무행위 세션에 대해 통제를 해야 한다.

  • PDF