• 제목/요약/키워드: static code analysis

Search Result 374, Processing Time 0.024 seconds

Analysis of Blockchain Software Vulnerability against OS Command Injection Attack (블록체인 소프트웨어의 취약점을 이용한 OS 커맨드 인젝션 공격에 대한 연구)

  • Kim, Byoungkuk;Hur, Junbeom
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.29 no.2
    • /
    • pp.309-320
    • /
    • 2019
  • Blockchain has been developed as a key technology for many cryptocurrency systems such as Bitcoin. These days, blockchain technology attracts many people to adopt it to various fields beyond cryptocurrency systems for their information sharing and processing. However, with the development and increasing adoption of the blockchain, security incidents frequently happen in the blockchain systems due to their implementation flaws. In order to solve this problem, in this paper, we analyze the software vulnerabilities of Bitcoin and Ethereum, which are the most widely used blockchain applications in real world. For that purpose, we conduct an in-depth analysis of source code of them to detect software vulnerabilities, and examine an OS command injection attack exploiting the detected ones.

Collapse Mechanism of Ordinary RC Shear Wall-Frame Buildings Considering Shear Failure Mode (전단파괴모드를 고려한 철근콘크리트 보통전단벽-골조 건물의 붕괴메커니즘)

  • Chu, Yurim;Kim, Taewan
    • Journal of the Earthquake Engineering Society of Korea
    • /
    • v.25 no.1
    • /
    • pp.1-9
    • /
    • 2021
  • Most commercial buildings among existing RC buildings in Korea have a multi-story wall-frame structure where RC shear wall is commonly used as its core at stairways or elevators. The members of the existing middle and low-rise wall-frame buildings are likely arranged in ordinary details considering building occupancy, and the importance and difficulty of member design. This is because there are few limitations, considerations, and financial burdens on the code for designing members with ordinary details. Compared with the intermediate or unique details, the ductility and overstrength are insufficient. Furthermore, the behavior of the member can be shear-dominated. Since shear failure in vertical members can cause a collapse of the entire structure, nonlinear characteristics such as shear strength and stiffness deterioration should be adequately reflected in the analysis model. With this background, an 8-story RC wall-frame building was designed as a building frame system with ordinary shear walls, and the effect of reflecting the shear failure mode of columns and walls on the collapse mechanism was investigated. As a result, the shear failure mode effect on the collapse mechanism was evident in walls, not columns. Consequently, it is recommended that the shear behavior characteristics of walls are explicitly considered in the analysis of wall-frame buildings with ordinary details.

Seismic Performance of Alternative Steel Structural Systems for an Equipment-Supporting Plant Structure (플랜트 설비 지지용 대안 강구조 시스템의 내진성능)

  • Kwak, Byeong Hun;Ahn, Sook-Jin;Park, Ji-Hun
    • Journal of the Earthquake Engineering Society of Korea
    • /
    • v.27 no.1
    • /
    • pp.13-24
    • /
    • 2023
  • In this study, alternative seismic force-resisting systems for plant structure supporting equipment were designed, and the seismic performance thereof was compared using nonlinear dynamic analysis. One alternative seismic force-resisting system was designed per the requirement for ordinary moment-resisting and concentrically braced frames but with a reduced base shear. The other seismic force-resisting system was designed by accommodating seismic details of intermediate and unique moment-resisting frames and special concentrically braced frames. Different plastic hinge models were applied to ordinary and ductile systems based on the validation using existing test results. The control model obtained by code-based flexible design and/or reduction of base shear did not satisfy the seismic performance objectives, but the alternative structural system did by strengthened panel zones and a reduced effective buckling length. The seismic force to equipment calculated from the nonlinear dynamic analysis was significantly lower than the equivalent static force of KDS 41 17 00. The comparison of design alternatives showed that the seismic performance required for a plant structure could be secured economically by using performance-based design and alternative seismic-force resisting systems adopting minimally modified seismic details.

A new base shear equation for reliability-based design of steel frames

  • Hakki Deniz Gul;Kivanc Taskin
    • Earthquakes and Structures
    • /
    • v.27 no.1
    • /
    • pp.31-39
    • /
    • 2024
  • The reliability-based seismic design of steel frames is a complex process that incorporates seismic demand with a structural capacity to attain safe buildings aligned with specified constraints. This paper introduces an efficient base shear force formulation to support the reliability-based design process of steel frames. The introduced base shear force equation combines the seismic demand statistics with the reliability objective to calculate a fictitious base shear force for linear static analysis. By concentrating on the seismic demand and promising to meet a certain level of reliability, the equation converts the reliability-based seismic design problem to a deterministic one. Two code-compliant real-size steel moment frames are developed according to different reliability objectives to demonstrate the competency of the proposed formula. The nonlinear dynamic analysis method is used to assess the seismic reliability of the constructed frames, and the numerical results validate the credibility of the suggested formulation. The base shear force calculation method regarding seismic reliability is the main finding of this study. The ease of use makes this approach a potent tool for design professionals and stakeholders to make rapid risk-informed decisions regarding steel moment frame design.

Inelastic Dynamic Demands of a RC Special Moment Frame Building (철근 콘크리트 특수 모멘트 골조 건물의 비탄성 동적 요구값)

  • Kim, Tae-Wan
    • Journal of the Earthquake Engineering Society of Korea
    • /
    • v.9 no.5 s.45
    • /
    • pp.11-19
    • /
    • 2005
  • Seismic design of a building is usually performed by using the linear static procedure. However, the actual behavior of the building subjected to earthquake is inelastic and dynamic in nature. Therefore, inelastic dynamic analysis is required to evaluate the safety of the structure designed by the current design codes. For the validation, a RC special moment resisting frame building was chosen and designed by IBC 2003 representing new codes. Maximum plastic rotation and dissipated energy of some selected members were calculated for examining if the inelastic behavior of the building follows the intention of the code, and drift demand were calculated as well for checking if the building well satisfies the design drift limit. In addition, the effect of including internal moment resisting frames (non lateral resisting system) on analyses results was investigated. As a result of this study, the building designed by IBC 2003 showed the inelastic behavior intended in the code and satisfied the design drift limit. Furthermore, the internal moment resisting frames should be included in the analytical model as they affect the results of seismic analyses significantly.

A Study on Dynamic Response of Truss Bridge due to Moving Train Loads (열차하중의 주행에 의한 트러스교의 동적응답에 관한 연구)

  • Chang, Dong Il;Choi, Kang Hee;Lee, Jong Deuk
    • KSCE Journal of Civil and Environmental Engineering Research
    • /
    • v.9 no.2
    • /
    • pp.1-10
    • /
    • 1989
  • In this paper, dynamic response of a truss bridge due to constantly moving train loads is analysed. Dynamic response of the bridge is found by the mode superposition method with the solution of the eigenvalue problem by Householder transformation and QL algorithm. To prove the validity of the analysis procedure, the response due to a very slowly moving load is compared with the result from the static analysis program, and the dynamic response is also compared with the result from the direct integration method. Based upon this, the variation of dynamic amplification factors is investigated by changing the train types and speeds, and the result is compared with the code specified impact factor. From this study, it was known that the dynamic amplification factor is not quite different by train types in low speeds but in high speeds it is, and in the case of electric car and U. I. C. loads the factor could exceed the code specified impact factor depending upon the speed.

  • PDF

A Method for Detecting Program Plagiarism Comparing Class Structure Graphs (클래스 구조 그래프 비교를 통한 프로그램 표절 검사 방법)

  • Kim, Yeoneo;Lee, Yun-Jung;Woo, Gyun
    • The Journal of the Korea Contents Association
    • /
    • v.13 no.11
    • /
    • pp.37-47
    • /
    • 2013
  • Recently, lots of research results on program comparison have been reported since the code theft become frequent as the increase of code mobility. This paper proposes a plagiarism detection method using class structures. The proposed method constructs a graph representing the referential relationship between the member variables and the methods. This relationship is shown as a bipartite graph and the test for graph isomorphism is applied on the set of graphs to measure the similarity of the programs. In order to measure the effectiveness of this method, an experiment was conducted on the test set, the set of Java source codes submitted as solutions for the programming assignments in Object-Oriented Programming course of Pusan National University in 2012. In order to evaluate the accuracy of the proposed method, the F-measure is compared to those of JPlag and Stigmata. According to the experimental result, the F-measure of the proposed method is higher than those of JPlag and Stigmata by 0.17 and 0.34, respectively.

A Study on Structural Performance of HB-DECK and Cast in Place Concrete Slab (HB-DECK와 현장타설 콘크리트 슬래브의 구조성능에 관한 연구)

  • Lee, Wang-Su;Lho, Byeong-Cheol;Cho, Hyun-Chul
    • Journal of the Korea institute for structural maintenance and inspection
    • /
    • v.22 no.2
    • /
    • pp.59-67
    • /
    • 2018
  • The interference between the lattice bar of existing LB-DECK and the bars placed at site degrades the constructability, which is pointed as a problem. HB-DECK simplified the shape of lattice bar, and converted the direction of main rebar direction to the distributing bar direction, and installed the rib on the underside of HB-DECK to increase the stiffness. The purpose of this study is to verify the structural performance of HB-DECK and cast in place concrete slab. The static load test was conducted to verify the structural performance according to Korean highway bridge design code(2015) and composite behavior of HB-DECK with Cast in Place Concrete Slab. Three-dimensional finite element analysis was carried by MIDAS FEA, and analyzed to compare the result of analysis and experiment. At a result, composite behavior was examined between HB-DECK and cast in place concrete slab, and structural performance satisfied Korean highway bridge design code(2015).

Response modification factors of concrete bridges with different bearing conditions

  • Zahrai, Seyed Mehdi;Khorraminejad, Amir;Sedaghati, Parshan
    • Earthquakes and Structures
    • /
    • v.16 no.2
    • /
    • pp.185-196
    • /
    • 2019
  • One of the shortcomings of seismic bridge design codes is the lack of clarity in defining the role of different seismic isolation systems with linear or nonlinear behavior in terms of R-factor. For example, based on AASHTO guide specifications for seismic isolation design, R-factor for all substructure elements of isolated bridges should be half of those expressed in the AASHTO standard specifications for highway bridges (i.e., R=3 for single columns and R=5 for multiple column bent) but not less than 1.50. However, no distinction is made between two commonly used types of seismic isolation devices, i.e., elastomeric rubber bearing (ERB) with linear behavior, and lead rubber bearing (LRB) with nonlinear behavior. In this paper, five existing bridges located in Iran with two types of deck-pier connection including ERB and LRB isolators, and two bridge models with monolithic deck-pier connection are developed and their R-factor values are assessed based on the Uang's method. The average R-factors for the bridges with ERB isolators are calculated as 3.89 and 4.91 in the longitudinal and transverse directions, respectively, which are not in consonance with the AASHTO guide specifications for seismic isolation design (i.e., R=3/2=1.5 for the longitudinal direction and R=5/2=2.5 for the transverse direction). This is a clear indicator that the code-prescribed R-factors are conservative for typical bridges with ERB isolators. Also for the bridges with LRB isolators, the average computed R-factors equal 1.652 and 2.232 in the longitudinal and transverse directions, respectively, which are in a good agreement with the code-specified R-factor values. Moreover, in the bridges with monolithic deck-pier connection, the average R-factor in the longitudinal direction is obtained as 2.92 which is close to the specified R-factor in the bridge design codes (i.e., 3), and in the transverse direction is obtained as 2.41 which is about half of the corresponding R-factor value in the specifications (i.e., 5).

A Behavior based Detection for Malicious Code Using Obfuscation Technique (우회기법을 이용하는 악성코드 행위기반 탐지 방법)

  • Park Nam-Youl;Kim Yong-Min;Noh Bong-Nam
    • Journal of the Korea Institute of Information Security & Cryptology
    • /
    • v.16 no.3
    • /
    • pp.17-28
    • /
    • 2006
  • The appearance of variant malicious codes using obfuscation techniques is accelerating the spread of malicious codes around the detection by a vaccine. n a system does not patch detection patterns for vulnerabilities and worms to the vaccine, it can be infected by the worms and malicious codes can be spreaded rapidly to other systems and networks in a few minute. Moreover, It is limited to the conventional pattern based detection and treatment for variants or new malicious codes. In this paper, we propose a method of behavior based detection by the static analysis, the dynamic analysis and the dynamic monitoring to detect a malicious code using obfuscation techniques with the PE compression. Also we show that dynamic monitoring can detect worms with the PE compression which accesses to important resources such as a registry, a cpu, a memory and files with the proposed method for similarity.