• Journal of Intelligence and Information Systems
• /
• v.18 no.1
• /
• pp.125-141
• /
• 2012

These days, the malicious attacks and hacks on the networked systems are dramatically increasing, and the patterns of them are changing rapidly. Consequently, it becomes more important to appropriately handle these malicious attacks and hacks, and there exist sufficient interests and demand in effective network security systems just like intrusion detection systems. Intrusion detection systems are the network security systems for detecting, identifying and responding to unauthorized or abnormal activities appropriately. Conventional intrusion detection systems have generally been designed using the experts' implicit knowledge on the network intrusions or the hackers' abnormal behaviors. However, they cannot handle new or unknown patterns of the network attacks, although they perform very well under the normal situation. As a result, recent studies on intrusion detection systems use artificial intelligence techniques, which can proactively respond to the unknown threats. For a long time, researchers have adopted and tested various kinds of artificial intelligence techniques such as artificial neural networks, decision trees, and support vector machines to detect intrusions on the network. However, most of them have just applied these techniques singularly, even though combining the techniques may lead to better detection. With this reason, we propose a new integrated model for intrusion detection. Our model is designed to combine prediction results of four different binary classification models-logistic regression (LOGIT), decision trees (DT), artificial neural networks (ANN), and support vector machines (SVM), which may be complementary to each other. As a tool for finding optimal combining weights, genetic algorithms (GA) are used. Our proposed model is designed to be built in two steps. At the first step, the optimal integration model whose prediction error (i.e. erroneous classification rate) is the least is generated. After that, in the second step, it explores the optimal classification threshold for determining intrusions, which minimizes the total misclassification cost. To calculate the total misclassification cost of intrusion detection system, we need to understand its asymmetric error cost scheme. Generally, there are two common forms of errors in intrusion detection. The first error type is the False-Positive Error (FPE). In the case of FPE, the wrong judgment on it may result in the unnecessary fixation. The second error type is the False-Negative Error (FNE) that mainly misjudges the malware of the program as normal. Compared to FPE, FNE is more fatal. Thus, total misclassification cost is more affected by FNE rather than FPE. To validate the practical applicability of our model, we applied it to the real-world dataset for network intrusion detection. The experimental dataset was collected from the IDS sensor of an official institution in Korea from January to June 2010. We collected 15,000 log data in total, and selected 10,000 samples from them by using random sampling method. Also, we compared the results from our model with the results from single techniques to confirm the superiority of the proposed model. LOGIT and DT was experimented using PASW Statistics v18.0, and ANN was experimented using Neuroshell R4.0. For SVM, LIBSVM v2.90-a freeware for training SVM classifier-was used. Empirical results showed that our proposed model based on GA outperformed all the other comparative models in detecting network intrusions from the accuracy perspective. They also showed that the proposed model outperformed all the other comparative models in the total misclassification cost perspective. Consequently, it is expected that our study may contribute to build cost-effective intelligent intrusion detection systems.

• Korean Journal of Optics and Photonics
• /
• v.33 no.4
• /
• pp.167-176
• /
• 2022

Adaptive optics (AO) systems compensate for atmospheric disturbance, especially phase distortion, by introducing counter-wavefront deformation calculated from real-time wavefront sensing or prediction. Because AO system implementations are time-consuming and costly, it is highly desirable to estimate the system's performance during the development of the AO system or its parts. Among several techniques, we mostly apply statistical analysis, computational simulation, and optical-bench tests. Statistical analysis estimates performance based on the sum of performance variances due to all design parameters, but ignores any correlation between them. Computational simulation models every part of an adaptive optics system, including atmospheric disturbance and a closed loop between wavefront sensor and deformable mirror, as close as possible to reality, but there are still some differences between simulation models and reality. The optical-bench test implements an almost identical AO system on an optical bench, to confirm the predictions of the previous methods. We are currently developing an AO system for a 1.6-m ground telescope using a deformable mirror that was recently developed in South Korea. This paper reports the results of the statistical analysis and computer simulation for the system's design and confirmation. For the analysis, we apply the Strehl ratio as the performance criterion, and the median seeing conditions at the Bohyun observatory in Korea. The statistical analysis predicts a Strehl ratio of 0.31. The simulation method similarly reports a slightly larger value of 0.32. During the study, the simulation method exhibits run-to-run variation due to the random nature of atmospheric disturbance, which converges when the simulation time is longer than 0.9 seconds, i.e., approximately 240 times the critical time constant of the applied atmospheric disturbance.

• Korean Journal of Remote Sensing
• /
• v.37 no.3
• /
• pp.419-430
• /
• 2021

Remote sensing techniques using drone-based multispectral image were studied for fast and two-dimensional monitoring of algal blooms in the river. Drone is anticipated to be useful for algal bloom monitoring because of easy access to the field, high spatial resolution, and lowering atmospheric light scattering. In addition, application of multispectral sensors could make image processing and analysis procedures simple, fast, and standardized. Spectral indices derived from the active spectrum of photosynthetic pigments in terrestrial plants and phytoplankton were tested for estimating chlorophyll-a concentrations (Chl-a conc.) from drone-based multispectral image. Spectral indices containing the red-edge band showed high relationships with Chl-a conc. and especially, 3-band model (3BM) and normalized difference chlorophyll index (NDCI) were performed well (R²=0.86, RMSE=7.5). NDCI uses just two spectral bands, red and red-edge, and provides normalized values, so that data processing becomes simple and rapid. The 3BM which was tuned for accurate prediction of Chl-a conc. in productive water bodies adopts originally two spectral bands in the red-edge range, 720 and 760 nm, but here, the near-infrared band replaced the longer red-edge band because the multispectral sensor in this study had only one shorter red-edge band. This index is expected to predict more accurately Chl-a conc. using the sensor specialized with the red-edge range.

• Atmosphere
• /
• v.12 no.4
• /
• pp.20-42
• /
• 2002

Based on the "Mid to Long Term Plan for Space Development", a project to launch COMeS (Communication, Oceanography, and Meteorological Satellite) into the geostationary orbit is undergoing. Accordingly, KMA (Korea Meteorological Administration) has defined the meteorological missions and prepared the user requirements to fulfill the missions. To make a realistic user requirements, we prepared a first draft based on the ideal meteorological products derivable from a geostationary platform and sent the RFI (request for information) to the sensor manufacturers. Based on the responses to the RFI and other considerations, we revised the user requirement to be a realistic plan for the 2008 launch of the satellite. This manuscript introduces the revised user requirements briefly. The major mission defined in the revised user requirement is the augmentation of the detection and prediction ability of the severe weather phenomena, especially around the Korean Peninsula. The required payload is an enhanced Imager, which includes the major observation channels of the current geostationary sounder. To derive the required meteorological products from the Imager, at least 12 channels are required with the optimum of 16 channels. The minimum 12 channels are 6 wavelength bands used for current geostationary satellite, and additional channels in two visible bands, a near infrared band, two water vapor bands and one ozone absorption band. From these enhanced channel observation, we are going to derive and utilize the information of water vapor, stability index, wind field, and analysis of special weather phenomena such as the yellow sand event in addition to the standard derived products from the current geostationary Imager data. For a better temporal coverage, the Imager is required to acquire the full disk data within 15 minutes and to have the rapid scan mode for the limited area coverage. The required thresholds of spatial resolutions are 1 km and 2 km for visible and infrared channels, respectively, while the target resolutions are 0.5 km and 1 km.

• Korean Journal of Remote Sensing
• /
• v.14 no.1
• /
• pp.53-68
• /
• 1998

Observation of hydrometeors' behavior in the atmosphere is important to understand weather and climate. By conventional observations, we can get the distribution of water vapor at limited number of points on the earth. In this study, the precipitable water has been estimated from the split window channel data on GMS-5 based upon the technique developed by Chesters et al.(1983). To retrieve the precipitable water, water vapor absorption parameter depending on filter function of sensor has been derived using the regression analysis between the split window channel data and the radiosonde data observed at Osan, Pohang, Kwangiu and Cheju staions for 4 months. The air temperature of 700 hPa from the Global Spectral Model of Korea Meteorological Administration (GSM/KMA) has been used as mean air temperature for single layer radiation model. The retrieved precipitable water for the period from August 1996 through December 1996 are compared to radiosonde data. It is shown that the root mean square differences between radiosonde observations and the GMS-5 retrievals range from 0.65 g/$cm^2$ to 1.09 g/$cm^2$ with correlation coefficient of 0.46 on hourly basis. The monthly distribution of precipitable water from GMS-5 shows almost good representation in large scale. Precipitable water is produced 4 times a day at Korea Meteorological Administration in the form of grid point data with 0.5 degree lat./lon. resolution. The data can be used in the objective analysis for numerical weather prediction and to increase the accuracy of humidity analysis especially under clear sky condition. And also, the data is a useful complement to existing data set for climatological research. But it is necessary to get higher correlation between radiosonde observations and the GMS-5 retrievals for operational applications.

• Korean Journal of Remote Sensing
• /
• v.37 no.6_1
• /
• pp.1631-1645
• /
• 2021

This research aims to provide the characteristics of the world's first active lidar sensor Atmospheric Laser Doppler Instrument (ALADIN) wind data and Geostationary Korea Multi Purpose Satellite 2A (GK2A) Atmospheric Motion Vector (AMV) data by comparing two wind data. As a result of comparing the data from September 2019 to August 1, 2020, The total number of collocated data for the AMV (using IR channel) and Mie channel ALADIN data is 177,681 which gives the Root Mean Square Error (RMSE) of 3.73 m/s and the correlation coefficient is 0.98. For a more detailed analysis, Comparison result considering altitude and latitude, the Normalized Root Mean Squared Error (NRMSE) is 0.2-0.3 at most latitude bands. However, the upper and middle layers in the lower latitudes and the lower layer in the southern hemispheric are larger than 0.4 at specific latitudes. These results are the same for the water vapor channel and the visible channel regardless of the season, and the channel-specific and seasonal characteristics do not appear prominently. Furthermore, as a result of analyzing the distribution of clouds in the latitude band with a large difference between the two wind data, Cirrus or cumulus clouds, which can lower the accuracy of height assignment of AMV, are distributed more than at other latitude bands. Accordingly, it is suggested that ALADIN wind data in the southern hemisphere and low latitude band, where the error of the AMV is large, can have a positive effect on the numerical forecast model.

• Journal of the Korean Association of Geographic Information Studies
• /
• v.24 no.4
• /
• pp.41-54
• /
• 2021

It is very essential to estimate the water body area using remote exploration for water resource management, analysis and prediction of water disaster damage. Hydrophysical detection using satellites has been mainly performed on large satellites equipped with optical and SAR sensors. However, due to the long repeat cycle, there is a limitation that timely utilization is impossible in the event of a disaster/disaster. With the recent active development of Micro satellites, it has served as an opportunity to overcome the limitations of time resolution centered on existing large satellites. The Micro satellites currently in active operation are ICEYE in Finland and Capella satellites in the United States, and are operated in the form of clusters for earth observation purposes. Due to clustering operation, it has a short revisit cycle and high resolution and has the advantage of being able to observe regardless of weather or day and night with the SAR sensor mounted. In this study, the operation status and characteristics of micro satellites were described, and the water area estimation technology optimized for micro SAR satellite images was applied to the Daecheong Dam basin on the Korean Peninsula. In addition, accuracy verification was performed based on the reference value of the water generated from the optical satellite Sentinel-2 satellite as a reference. In the case of the Capella satellite, the smallest difference in area was shown, and it was confirmed that all three images showed high correlation. Through the results of this study, it was confirmed that despite the low NESZ of Micro satellites, it is possible to estimate the water area, and it is believed that the limitations of water resource/water disaster monitoring using existing large SAR satellites can be overcome.