MS 오피스 문서 파일 내 비정상 요소 탐지 기법 연구

조성혜 ( Sung Hye Cho ),이상진 ( Sang Jin Lee ) 한국정보처리학회 2017 정보처리학회논문지. 컴퓨터 및 통신시스템 Vol.6 No.2

최근 각종 공문서와 증빙 서류를 비롯하여 대부분의 문서가 디지털 데이터의 형태로 사용되고 있다. 특히 MS 오피스는 전 세계적으로 공공기관, 기업, 학교, 가정 등 다양한 곳에서 가장 많이 사용하고 있는 문서 편집 소프트웨어로써 악의적인 목적을 가진 사용자들이 해당 문서 프로그램의 범용성을 이용하여 MS 오피스 문서 파일을 악성 행위를 위한 매개체로 사용하고 있으며, 최근에는 단순한 사용자뿐만 아니라 국내외 정부 기관과 주요기업을 비롯하여 기반시설에서도 MS 오피스 문서 파일 형태의 악성코드가 유입되고 있다. MS 오피스 문서에 악성 코드를 삽입하는 방법은 단순히 미할당 영역에 은닉하는 방법을 사용할 뿐만 아니라 매크로 기능을 이용하는 등 다양한 방법을 통해 점점 정교한 형태로 진화되고 있다. 이러한 악성 코드들을 탐지하기 위해서 시그니처를 이용하거나 샌드박스를 이용한 탐지방법이 존재하지만, 유동적이고 복잡해지는 악성 코드들을 탐지하기에는 한계가 있다. 따라서 본 논문에서는 디지털 포렌식 관점에서 MS 오피스 문서 분석에 필요한 주요 메타데이터와 파일 포맷 구조 분석을 통해 매크로 영역과 그 외 악성 코드가 삽입될 가능성이 존재하는 영역들을 확인함으로써 MS 오피스 문서 파일 내 비정상 요소를 탐지하는 기법을 제안한다. Microsoft Office is an office suite of applications developed by Microsoft. Recently users with malicious intent customize Office files as a container of the Malware because MS Office is most commonly used word processing program. To attack target system, many of malicious office files using a variety of skills and techniques like macro function, hiding shell code inside unused area, etc. And, people usually use two techniques to detect these kinds of malware. These are Signature-based detection and Sandbox. However, there is some limits to what it can afford because of the increasing complexity of malwares. Therefore, this paper propose methods to detect malicious MS office files in Computer forensics` way. We checked Macros and potential problem area with structural analysis of the MS Office file for this purpose.

도시거주 중년기 성인의 노화에 대한 기대와 신체활동과의 관련성

조성혜(Cho, Sung-Hye),최문기(Choi, MoonKi),이주희(Lee, JuHee),조혜원(Cho, Hyewon) 한국간호과학회 2015 Journal of Korean Academy of Nursing Vol.45 No.1

Purpose: The purpose of this study was to measure the level of expectations regarding aging (ERA) and identify relationship between ERA and physical activity of middle aged adults. Methods: Participants were middle aged adults who resided in the community in three cities in Korea. Data were collected using questionnaires that contained items on individual characteristic, International Physical Activity Questionnaires (IPAQ), and behavior-specific cognitive factors including ERA-12. Hierarchical multiple regression was conducted to examine whether ERA would predict physical activity by controlling other factors. Results: The mean age of the participants was 51.1±6.9 years. The mean score for ERA (possible range=0 to 100) was 40.04±14.31. More than half of the participants (62.6%) were not engaged in health promoting physical activity. Gender, employment status and exercise confidence were associated with level of physical activity (F=7.14, p<.001, R²=.36). After controlling for individual factors and behavior-specific cognitive factors, ERA was independently related to physical activity (F=7.19, p<.001, R²=.38). Conclusion: The results demonstrate that individuals’ belief about aging has effects on physical activity in Korean middle aged adults. Thus, nursing interventions which focused on ERA could help enhance physical activity in middle aged adults.

중국 이민여성의 신체활동 관련 요인

조성혜(Cho, Sung-Hye),이현경(Lee, Hyeonkyeong) 한국간호과학회 2013 Journal of Korean Academy of Nursing Vol.43 No.6

Purpose: This study was done to assess the level of physical activity among Chinese immigrant women and to determine the relationships of physical activity with individual characteristics and behavior-specific cognition. Methods: A cross-sectional descriptive study was conducted with 161 Chinese immigrant women living in Busan. A health promotion model of physical activity adapted from Pender’s Health Promotion Model was used. Self-administered questionnaires were used to collect data during the period from September 25 to November 20, 2012. Using SPSS 18.0 program, descriptive statistics, t-test, analysis of variance, correlation analysis, and multiple regression analysis were done. Results: The average level of physical activity of the Chinese immigrant women was 1,050.06±686.47 MET-min/week and the minimum activity among types of physical activity was most dominant (59.6%). As a result of multiple regression analysis, it was confirmed that self-efficacy and acculturation were statistically significant variables in the model (p<.001), with an explanatory power of 23.7%. Conclusion: The results indicate that the development and application of intervention strategies to increase acculturation and self-efficacy for immigrant women will aid in increasing the physical activity in Chinese immigrant women.

유기적 건축을 기반으로 한 키네틱 건축표면 경향 분석

조성혜(Jo, Sung Hye),김민찬(Kim, Minchan),조혜인(Cho, Jyein),박재완(Park, Jae Wan) 한국디지털디자인협의회 2013 (사)한국디지털디자인협의회 conference Vol.2013 No.4

The goal of this research is to analyze the trend of kinetic architectural surfaces and provide the evolving trend of them based on organic architecture. Today, kinetic architectural surfaces plays an increasingly significant role in our urban environments due to substantiality or physical aesthetics. However, the development direction of kinetic architectural surface has been under-explored. Thus, the future direction of them is needed for research and development. For this research, we investigate different recent cases of kinetic architectural surfaces and extract three elements that represent the important features of recent kinetic architectural surfaces: substantiality, kinless, and interaction. Moreover, we explore these elements in detail based on the evolving direction. Based on this methodology, we propose the new direction of kinetic architectural surfaces in this study. We expect that this research contribute to helping the studies that explore and develop kinetic architectural surfaces.

농촌지역 중년과 노인의 자기효능감, 사회적 지지와 지역사회 공동체의식이 건강관련 삶의 질에 미치는 영향

이현경(Lee, Hyeonkyeong),조성혜(Cho, Sung Hye),김정희(Kim, Jung Hee),김윤경(Kim, Yune Kyong),추향임(Choo, Hyang Im) 한국간호과학회 2014 Journal of Korean Academy of Nursing Vol.44 No.6

Purpose: The purpose of this study was to examine the relationship between self-efficacy, social support, sense of community and health-related quality of life (HRQoL), including the direct and indirect effects of the variables on HRQoL. Methods: A cross-sectional survey was conducted with a convenience sample of 249 middle-aged and elderly residents living in a rural community in A-County, K Province. The structured questionnaire included 4 scales from the Euro Quality of life-5 Dimensions (mobility, self-care, usual activities, pain/discomfort, anxiety/depression), and measures of General Self-Efficacy, Social Support, and Sense of Community. Data were analyzed using SPSS WIN 20.0 and AMOS 21.0 program. Results: The mean HRQoL score for the participants was 0.87±0.13. Self-efficacy (ß=.13, p=.039) and age (ß= -.38, p<.001) were significantly associated with HRQoL, explaining 21% of the variance. In the path analysis, self-efficacy showed a significant direct effect on HRQoL (ß=.14, p=.040) and significantly mediating relationships between both social support (ß=.05, p=.030) and sense of community (ß=.02, p=.025) and HRQoL. Conclusion: Although self-efficacy was found to be the main predictor for HRQoL, the findings imply that social environmental factors such as social support and sense of community need to be considered when developing interventions to increase HRQoL in middle-aged and elderly residents in rural communities.

HPLC-FLD 및 LC-MS/MS에 의한 식품 중 총아플라톡신 오염실태 조사

장미란(Mi-Ran Jang),이창희(Chang-Hee Lee),조성혜(Sung-Hye Cho),박준식(Joon-Shik Park),권은영(Eun-Young Kwon),이은진(Eun-Jin Lee),김소희(So-Hee Kim),김대병(Dai-Byung Kim) 한국식품과학회 2007 한국식품과학회지 Vol.39 No.5

국내유통중인 곡류, 견과류 및 그 가공품 총 25품목, 393건의 시료에 대해 immunoaffinity column 정제방법을 이용하여 총아플라톡신 오염실태를 조사하였으며, 그 결과 곡류 및 곡류가공품 6건, 견과류 및 견과류 가공품 37건에서 아플라톡신 오염이 확인되었으며 오염수준은 아플라톡신 B1으로서 0.04-2.65 μg/kg, 총아플라톡신으로서 0.04-5.51 μg/kg 범위로 나타났다. Immunoaffinity column 정제를 거쳐 HPLC-FLD로 분석한 결과 아플라톡신이 검출된 시료에 대해서 LC-MS/MS로 확인하였으며, 그 결과 모두 아플라톡신으로 확인되었다. 본 연구결과에서 나타난 곡류 및 견과류에 대한 아플라톡신 검출빈도 및 오염수준은 국내, 외 연구결과와 유사하거나 비교적 낮게 나타났으며 국내 아플라톡신 기준 및 미국, CODEX에서 설정된 기준규격 이하로 검출되었다. A survey for total aflatoxins (aflatoxins B₁, B₂, G₁, and G₂) was conducted on 245 cereals and processed cereal products, and 148 nuts and processed nut products in Korea, for a total of 393 commercialized samples. The total aflatoxins were quantified by the immunoaffinity column clean-up method with high performance liquid chromatography (HPLC) - fluorescence detection (FLD), and were confirmed by liquid chromatography tandem mass spectrometry (LCMS/ MS). Total aflatoxins (AFs) were detected in 37 samples (9.4% incidence), including 2 millet samples, 1 mixed cereal (sunsik), 1 powdered malt sample, 2 processed cereal products, 6 peanut samples, 22 peanut butter samples, and 1 sample each of almonds, adlay tea, and a processed nut product. The contamination levels were 0.04-2.65 μg/kg for aflatoxin B1, and 0.04 -5.51 μg/kg for total aflatoxins. Finally, LC-MS/MS analysis of the contaminated samples was conducted to confirm the detected aflatoxins, and all 37 samples showing aflatoxins by HPLC-FLD were confirmed by LC-MS/MS.