Safe Web Using Scrapable Headless Browser in Network Separation Environment

Won-chi Jung(정원치),Jeonghun Park(박정훈),Namje Park(박남제) 한국컴퓨터정보학회 2019 韓國컴퓨터情報學會論文誌 Vol.24 No.8

In this paper, we propose a "Safe Web Using Scrapable Headless Browse" Because in a network separation environment for security, It does not allow the Internet. The reason is to physically block malicious code. Many accidents occurred, including the 3.20 hacking incident, personal information leakage at credit card companies, and the leakage of personal information at “Interpark”(Internet shopping mall). As a result, the separation of the network separate the Internet network from the internal network, that was made mandatory for public institutions, and the policy-introduction institution for network separation was expanded to the government, local governments and the financial sector. In terms of information security, network separation is an effective defense system. Because building a network that is not attacked from the outside, internal information can be kept safe. therefore, "the separation of the network" is inefficient. because it is important to use the Internet"s information to search for it and to use it as data directly inside. Using a capture method using a Headless Web browser can solve these conflicting problems. We would like to suggest a way to protect both safety and efficiency.

금융회사 망분리 정책의 효과성 연구

조병주(Byeong-joo Cho),윤장호(Jang-ho Yun),이경호(Kyeong-ho Lee) 한국정보보호학회 2015 정보보호학회논문지 Vol.25 No.1

과거 금융권은 고객 및 외부기관과의 연계업무 연속성을 위하여 외부 인터넷망과 내부 업무망을 통합 운영하였다. 그러나 이러한 환경은 악성코드의 유입을 통한 외부 공격 및 정보유출에 대한 위험을 내포하고 있어 금융감독 당국으로부터 보다 근본적인 기술적·관리적 보호대책이 요구되었다. 금융권은 인터넷을 통한 악성코드 감염, 해킹공격 등의 위협으로부터 IT자산을 보호하고, 고객의 개인정보 및 금융거래정보 등 중요정보의 유출을 차단하기 위하여 금융감독당국의 가이드라인에 따라 업무망과 인터넷망을 분리하고, 기존 환경 하에서 정의되었던 보안정책을 망분리 이후 환경에 맞게 재구성하고 있다. 본 연구는 망분리가 적용된 금융회사의 구축사례와 운영현황을 통하여 악성코드 유입 부분에 대한 망분리 정책의 효과를 살펴보고, 모든 경로의 악성코드 유입이 차단되었는지 확인하였다. 연구결과 망분리 이후에도 이동식 저장매체를 통한 악성코드의 감염경로가 완전히 차단되지 않았음을 확인하였다. 이에 따라 망분리 효과를 극대화할 수 있는 이동식 저장매체의 통제 등의 효율적인 보안정책을 제시하고자 한다. Financial industries have operated internal and external network with an unified system for continual business process of customers and other organizations in the past. The financial supervising authority requires more technical and managerial protecting policy to financial industries related to the exposure as danger of external attacks or information leakage. Financial industries performed network separation into internal business and external internet networks for protecting IT assets from malware infection accessing internet or hacking attacks and prohibiting leakage of customers’ personal and financial information following financial supervising authority and redefine security policy to fit on network separated-condition. In this study, effectiveness for network separation policy was examined on malware inflow and verified that malware inflow in all routes can be blocked by the policy with analyzing operration data of a financial company, estimating network separation. Result of this study proves that malware infection route by portable storages was not completely blocked even on adapting network-separated condition. As a solution for this, efficient security policy would be suggested in this paper as controlling portable storages for maximizing effectiveness of network separation.

망분리 환경에서의 보안관제 효율화 방안 연구

한창우,김휘강,김은진 한국지식정보기술학회 2014 한국지식정보기술학회 논문지 Vol.9 No.6

Internal network connected to the internet are vulnerable to external attack. A consensus of awareness of that problem are spreading. As solutions to that problem, To prevent any damage on the system in the organization, The network separation obligation are spreading. Even if the intranet operates as a closed network by separating the internet can not be guaranteed to be secure. Security threats posed by malicious code are still present, such as stuxnet which works on control network that operates on a closed network. User carelessness, internet connect by intranet PC due to malicious intent, information leakage through the USB, an influx of malicious code to intranet, and using a technique for transferring data between separate networks without the use data transmission system for secure data transfer can be transferred uncontrolled data between internet and intranet. Also, even if network separation is completed insider threat is still present. Network separation made a difference of the traffic form occurring in each of the network, and the characteristics of the security log was affected. Accordingly, separately many researching for the internet about malicious traffic detection, need a plan that can effectively detect anomalies in the security log occurring in the interanet. In this study, Analysis of the characteristics of the security log occurring in physically separate the network environment focusing on the interanet and proposes a model for efficiently performing the security control.

망분리 정책이 핀테크 기업의 개발자들의 업무환경에 미치는 영향에 대한 연구

나윤선,박나현,김재윤,원종호,이대호 정보통신정책학회 2022 정보통신정책연구 Vol.29 No.3

Although the network separation regulation has the advantage that it is difficult to access with general hacking because the internal network of a company is cut off from the external Internet network, it is difficult to keep up with rapid changes in hacking and security techniques. For that reason, US government gives companies the opportunity to choose the way to protect their network. In this study, in order to analyze the effect of network separation regulation on the R&D environment of domestic Fintech companies, 134 developers in the Fintech industry were asked about their opinions on the working environment and network separation regulation through open questions. Through network analysis and CONCOR analysis of the collected data, we try to group the thoughts that developers currently have in relation to the R&D environment by topic and determine their importance. Multiple-choice questions were asked to developers about the variables derived through this on a Likert 7-point scale, and based on this data, we analyzed the effect of the problems caused by network separation regulation on the job satisfaction of developers in the Fintech industry and on the intention to leave/leave a job through path analysis. As a result of the analysis, the network separation regulation has a negative effect on the ease of information retrieval and the availability of open source, which lowers work productivity. And it was found that decreased work productivity did not affect job satisfaction, but increased the intention of developers to consider changing/leaving a job. 망분리 규제는 기업의 내부 망이 외부의 인터넷 망과 단절되어 있기 때문에, 일반적인 방식의 해킹으로는 접근이 힘들다는 장점에도 불구하고, 해킹과 보안 기법의 빠른변화를 따라가지 못한다는 단점으로 인하여 미국 등에서는 기업이 선택할 수 있는기회를 제공하고 있다. 본 연구에서는 망분리 규제가 국내 핀테크 기업 업무 환경에미치는 영향을 분석하기 위하여, 핀테크 산업 개발자들 134명을 대상으로 재직 중인기업의 근무 환경과 망분리 규제에 대한 의견을 열린 질문을 통해 취합하였다. 취합된 데이터를 네트워크 분석과 CONCOR 분석을 통해 현재 개발자들이 업무 환경과관련하여 가지고 있는 생각들을 주제별로 묶어보고 중요도를 판단하고자 한다. 이를통해 도출된 변수들에 - 대하여 개발자들에게 리커트 7점 척도로 객관식 질문을 하였으며, 이 데이터에 기반하여 경로방정식 분석을 통해 망분리 규제가 가지고 오는 문제점들이 핀테크 산업에 종사하는 개발자들의 직장 만족도나 이직/퇴사 의도에 미치는 영향을 분석하고자 한다. 분석 결과, 망분리 규제는 정보검색의 용이성과 오픈소스 획득의 용이성에 부정적인 영향을 주고, 이는 업무 생산성을 하락시킨다. 그리고이렇게 하락된 업무 생산성은 직장에 대한 만족도에는 영향을 주지 않으나, 개발자들의 이직/퇴사 고려에 대한 의도는 증가시키는 것으로 나타났다.

Lung Sounds Signal Separation Model of Medical Monitoring Based on Wireless Sensor Network

Beibei Dong,Bing Han,Jingjing Yang,Wei Peng 보안공학연구지원센터 2015 International Journal of Multimedia and Ubiquitous Vol.10 No.12

According to the present medical monitoring system still exist the problems such as low accuracy of the condition judgment and the less range of data transmission, a kind of lung sounds signal separation model of medical monitoring is put forward based on wireless sensor network. First, using the optimization strategy of the flying speed and the effect between particles to two-way optimization for particle swarm optimization algorithm (PSOA), and then applied it to the blind source separation of lung sounds signal, in order to improve the precision of the blind source separation of lung sound signals, then carried on the optimization of artificial fish behavior through tabu search, did coverage optimization for wireless sensor network by using the improved algorithm, to expand the scope of wireless data transmission. As the simulation experiments results showed that, the proposed lung sounds signal separation model of medical monitoring based on wireless sensor network had good accuracy and large range of data transmission, and deserved to be popularized and used.

A Separation Method for Electromagnetic Radiation Sources of the Same Frequency

Xiao, Yingchun,Yang, Yang,Zhu, Feng 한국전자파학회 2023 Journal of Electromagnetic Engineering and Science Vol.23 No.6

To separate electromagnetic interference sources with an unknown source number, a new separation method is proposed, which includes five key steps: spatial spectrum estimation, source number and direction-of-arrival estimation, mixed matrix estimation, separation matrix estimation, and source signal recovery. A pseudospatial spectrum estimation network based on a convolutional neural network is proposed to estimate the number of electromagnetic radiation sources, their direction of arrival, and the mixing matrix. A new loss function is designed as an optimization criterion for estimating the separation matrix. To ensure generalization, both simulated and measured datasets are used to train the proposed network. Experimental results demonstrate that the proposed separation method outperforms existing source separation techniques in terms of correlation coefficient, root mean square error, and running time. Importantly, it exhibits strong performance in underdetermined cases, as well as in overdetermined or determined cases.

5G 서비스들에 대한 회계분리 방안 연구

강병민 ( Byung Min Kang ),정형록 ( Hyung Rok Jung ) 정보통신정책학회 2020 정보통신정책연구 Vol.27 No.1

5G 시대의 도래에 따라, 기존의 일반 음성 · 데이터서비스와 함께 자율주행, 원격로봇 등 폭넓고 다양한 신규서비스들이 출현하리라 전망된다. 후자의 B2B 서비스들은 제4차 산업혁명을 주도할 기반으로써 기존 규제보다 완화된 활성화 정책이 요구됨에 따라, 5G 서비스들에 대한 회계분리가 필요할 가능성이 높다. 그런데도, 5G 서비스 제공은 우리나라가 최초이기 때문에 이에 관한 연구는 매우 미진한 상태이다. 따라서 본 연구의 목적은 5G 서비스들에 대한 회계분리 방안을 모색하는 데 있다. 이를 위하여, 5G망의 기술적 특성, 물리적 구조 등을 파악한 후에 5G 회계분리에 적합한 배부기준자를 도출하였다. 연구 결과에 따르면, 우선 현행 회계분리기준이 규정한 장부가액, 회선수등의 배부기준을 5G 서비스 별 회계분리에 적용할 수 없다. 왜냐하면, 현행 기준은 회계분리대상 서비스별로 물리적인 망 또는 망구간을 정의한 후에, 이에 배부기준을 적용하는 회계분리 논리(logic)를 가지고 있는 반면에, 5G망은 하나의 물리적 망을 통하여 차별적 특성(QoS)을 지닌 다양한 서비스들이 제공되기 때문이다. 둘째, 5G 서비스별 회계분리에 적용할 가장 적합한 배부기준자는 사용량 기준의 누적 통신량이다. 이는 인과관계 기준자로서, IP화된 5G망에서 Packet 단위의 서비스별 측정이 가능하기 때문이다. 더구나 N/W Slicing을 통하여 서비스별 가상망 구성이 수시로 변하거나 향후 5G 신규서비스들이 하나씩 도입되더라도 적용할 수 있다. 셋째, 5G 서비스가 LTE망을 이용하는 경우 내부거래로 처리하는 것이 바람직하다. 마지막으로, 현행 배부기준에 대한 몇 가지 개선사항을 부수적인 연구 결과로 제시하였다. The 5G telecom era is expected to lead to the introduction of a wide variety of new services such as autonomous cars and remote controlled robots. The 4^th industrial revolution hinges on the advancement of new B2B services under more relaxed regulation, requiring with all likelihood an accounting separation of 5G services from existing services. However, studies that could guide this process are rare, since Korea has been the first in the world to commercialize 5G services. This study aims to examine the approaches to accounting separation by reviewing the characteristics and structure of 5G networks and identifying the allocators suitable to realize the separation. The study concludes that, first, the current allocators stipulated by the Korean Accounting Separation Standards (KASS) are not appropriate for the separation of 5G services, because services with diverse QoS are routed simultaneously through one physical network. The current KASS allocators would be suitable only if each service was defined as a unique network or one of its sectors. Second, traffic accumulation based on network usage provides a suitable criterion for the separation of 5G services. The allocator can be measured since 5G is an IP network. It can be applied even amid the constant fluctuation of virtual network formations within 5G due to N/W Slicing, and amid the sequential introduction of new services. Third, when 5G services use an LTE network, internal-transaction accounting is preferred. This study proposes some improvements to the assignment of ASS allocators.

Computerized Color Separation System for Printed Fabrics by Using Backward-Propagation Neural Network

Kuo, Chung-Feng Jeffrey,Su, Te-Li,Huang, Yi-Jen The Korean Fiber Society 2007 Fibers and polymers Vol.8 No.5

Textile production must be coupled with hi-tech assistant system to save cost of labor, material, time. Therefore color quality control is one very important step in any textiles, however excellent the fabric material itself is, if it lacks good color, then it may still result in dull sale. Therefore, this paper proposes a printed fabrics computerized color separation system based on backward-propagation neural network, whose primary function is to separate rich color of printed fabrics pattern so as to reduce time-consuming manual color separation color matching of current players. What it adopted was RGB color space, expressed in red, green, and blue. Analyze color features of printed fabrics, use gene algorithm to find sub-image with same color distribution as original image of printed fabrics yet smaller area, for later color separation algorithm use. In terms of color separation algorithm, this paper relied on supervised backward-propagation neural network to conduct color separation of printed fabrics RGB sub-image, and utilized $PANTONE^{(R)}$ standard color ticket to do color matching, so as to realize accurate color separation.

입출력 가상화 기반 가상 데스크탑 서비스를 이용한 물리적 네트워크 망분리 시스템 설계 및 구현

김선욱(Sunwook Kim),김성운(Seongwoon Kim),김학영(Hakyoung Kim),정성권(Seongkwon Chung),이숙영(Sookyoung Lee) 한국정보과학회 2015 정보과학회 컴퓨팅의 실제 논문지 Vol.21 No.7

입출력 가상화는 하나의 물리적 입출력 장치를 하나 이상의 가상 데스크탑들이 공유해서 사용할 수 있도록 하는 기술로서 일반적으로 가상화 소프트웨어가 소프트웨어적으로 에뮬레이션하여 제공하는 가상 I/O 장치들을 가상 데스크탑에서 사용한다. 소프트웨어 에뮬레이션 기반 I/O 장치들을 사용하는 가상 데스크탑들은 성능이 떨어지고 고사양의 응용 프로그램을 지원할 수 없는 문제점을 가지고 있다. 본 논문에서는 이러한 서비스의 품질 및 성능 저하를 극복하기 위해 PCI기반 하드웨어 직접 할당기술을 이용한 망분리 가상 데스크탑 시스템을 제안한다. 제안하는 시스템은 하나의 물리적 데스크탑 컴퓨터에 서버가상화 기술을 이용하여 사용자에게 인터넷 등의 외부망과 인트라넷 등의 업무망 접속을 위한 독립적인 데스크탑을 제공한다. 이를 통해 물리적 망분리를 위한 별도의 데스크탑 설치 및 논리적 망분리를 위한 네트워크 패킷의 검사에 따른 성능의 저하 없이 가상 데스크탑 서비스를 이용한 물리적 네트워크 망분리시스템을 제공한다. IOV is a technology that supports one or more virtual desktops, and can share a single physical device. In general, the virtual desktop uses the virtual IO devices which are provided by virtualization SW, using SW emulation technology. Virtual desktops that use the IO devices based on SW emulation have a problem in which service quality and performance are declining. Also, they cannot support the high-end application operations such as 3D-based CAD and game applications. In this paper, we propose a physical network separation system using Virtual Desktop Service based on HW direct assignments to overcome these problems. The proposed system provides independent desktops that are used to access the intranet or internet using server virtualization technology in a physical desktop computer for the user. In addition, this system can also support a network separation without network performance degradation caused by inspection of the network packet for logical network separations and additional installations of the desktop for physical network separations.

기숙사 거주 대학생의 네트워크 거주 실태분석

박영미,최정민 국토연구원 2011 국토연구 Vol.71 No.-

The number of single or 2-person households is rapidly increasing in our society, corresponding to rapid changes in familial structures and lifestyles. Now it is thus common to have family members live separately. The concept of “network residence” was developed along with this new familial structure. This study aimed to explore a new concept of “network residence”, related characteristics, and future housing directions to accommodate these new familial characteristics. The major data collection method was a questionnaire survey targeting 411 single college students living in dormitories. We investigated their network residence conditions, relationships with family members, and opinions. Results showed that the average monthly cost of tuition, housing, and living was approximately 1.60 million Korean Won (19 million KRW annually). The majority of the expenses (93%) were paid by parents or close relatives. Many students (69%), however, had strong psychological bonding to friends or acquaintances rather than their parents. Interestingly, students’ perceived family boundary was far broader - about triple - than the actual family size. They considered their relatives not even living with them as their family members. This showed students had conceptual connections with their actual and extended family members. This is the evidence to show how the concept of network residence works for them. 급속한 사회적 환경변화에 따라 근래 우리나라도 1~2인 가구가 급증하고 있다. 이는 주로 가족구조의 변화 및 가족구성원의 라이프스타일 변화에 따른 것으로, 주거정책 측면에서도 이러한 변화를 눈여겨볼 필요가 있다. 이에 본 연구는 공간적으로 분산하는 가족관계를 본가와 분거가족 중심으로 하는 ‘네트워크 거주’ 개념에서 고찰하였다. 대학기숙사 미혼 재학생 411명의 설문조사를 통해 대학생 네트워크 거주의 현황 및 실태를 파악하였다. 분석결과, 첫째, 등록금, 주거비, 생활비 등 대학생이 지출하는 한 달 평균 지출액은 약 160만 원(연 1,900만 원)이며 이 중 주거비는 대부분(93%) 본가나 혈연으로부터 지원받고 있다. 하지만 정신적 교류는 상당부분(69%) 친구나 지인으로부터 받고 있어 경제적 지원 주체와 대조를 이룬다. 둘째, 가족 인식범위에 있어 실제 가족구성원 수에 비해 가족이라고 인식하는 범위는 3배 정도 훨씬 넓은 것으로 나타났다. 비록 함께 살고 있지는 않을지라도 혈연에 대해 가족이라고 인식하는 범위는 훨씬 넓다. 이는 네트워크 거주가 혈연의 범위를 초월하여 실제 공간적으로 널리 성립하고 있음을 보여주는 것이다.