클러스터 기반 IT 자산들의 유사도 계산: 공격자의 다음 목표를 탐지하는 방법

김동성(Dongsung Kim),손선경(Seon-Gyoung Shon),김동성(Dan Dongseong Kim),김휘강(Huy-Kang Kim) 한국컴퓨터정보학회 2024 韓國컴퓨터情報學會論文誌 Vol.29 No.5

공격자들은 공격 대상인 IT 자산을 찾을 때 자신이 가지고 있는 유사한 취약점을 사용하는 경향이 있다. 따라서 IT 자산 중 표적이 될 수 있는 유사한 운영체제, 애플리케이션이 있을 때 이를 사전에 찾아내는 것이 중요하다. 본 논문은 효율적인 취약자산 관리 및 제로데이 대응을 위한 새로운 접근방식을 제안한다. 해당 방법론은 클러스터링과 유사도 계산 결과를 기반으로 새로운 취약점이나 이미 발견된 취약점에 의해 감염될 가능성이 있는 IT 자산을 탐지하는 기능을 제공한다. 실험 결과, 수집된 전체 자산의 86%의 정확도로 클러스터의 목적에 맞게 분류되었으며, 무작위 자산을 선정하여 유사성 계산 실험을 한 결과 동일한 운영체제 및 서비스를 사용하는 자산이 나열됐다. Attackers tend to use similar vulnerabilities when finding their next target IT assets. They also continuously search for new attack targets. Therefore, it is essential to find the potential targets of attackers in advance. Our method proposes a novel approach for efficient vulnerable asset management and zero-day response. In this paper, we propose the ability to detect the IT assets that are potentially infected by the recently discovered vulnerability based on clustering and similarity results. As the experiment results, 86% of all collected assets are clustered within the same clustering. In addition, as a result of conducting a similarity calculation experiment by randomly selecting vulnerable assets, assets using the same OS and service were listed.

부정 탐지를 위한 이상치 분석 활용방안 연구

김동성(Dongsung Kim),김기태(Kitae Kim),김종우(Jongwoo Kim),박성기(Steve Park) 한국지능정보시스템학회 2014 지능정보연구 Vol.20 No.3

To support business decision making, interests and efforts to analyze and use transaction data in different perspectives are increasing. Such efforts are not only limited to customer management or marketing, but also used for monitoring and detecting fraud transactions. Fraud transactions are evolving into various patterns by taking advantage of information technology. To reflect the evolution of fraud transactions, there are many efforts on fraud detection methods and advanced application systems in order to improve the accuracy and ease of fraud detection. As a case of fraud detection, this study aims to provide effective fraud detection methods for auction exception agricultural products in the largest Korean agricultural wholesale market. Auction exception products policy exists to complement auction-based trades in agricultural wholesale market. That is, most trades on agricultural products are performed by auction; however, specific products are assigned as auction exception products when total volumes of products are relatively small, the number of wholesalers is small, or there are difficulties for wholesalers to purchase the products. However, auction exception products policy makes several problems on fairness and transparency of transaction, which requires help of fraud detection. In this study, to generate fraud detection rules, real huge agricultural products trade transaction data from 2008 to 2010 in the market are analyzed, which increase more than 1 million transactions and 1 billion US dollar in transaction volume. Agricultural transaction data has unique characteristics such as frequent changes in supply volumes and turbulent time-dependent changes in price. Since this was the first trial to identify fraud transactions in this domain, there was no training data set for supervised learning. So, fraud detection rules are generated using outlier detection approach. We assume that outlier transactions have more possibility of fraud transactions than normal transactions. The outlier transactions are identified to compare daily average unit price, weekly average unit price, and quarterly average unit price of product items. Also quarterly averages unit price of product items of the specific wholesalers are used to identify outlier transactions. The reliability of generated fraud detection rules are confirmed by domain experts. To determine whether a transaction is fraudulent or not, normal distribution and normalized Z-value concept are applied. That is, a unit price of a transaction is transformed to Z-value to calculate the occurrence probability when we approximate the distribution of unit prices to normal distribution. The modified Z-value of the unit price in the transaction is used rather than using the original Z-value of it. The reason is that in the case of auction exception agricultural products, Z-values are influenced by outlier fraud transactions themselves because the number of wholesalers is small. The modified Z-values are called Self-Eliminated Z-scores because they are calculated excluding the unit price of the specific transaction which is subject to check whether it is fraud transaction or not. To show the usefulness of the proposed approach, a prototype of fraud transaction detection system is developed using Delphi. The system consists of five main menus and related submenus. First functionalities of the system is to import transaction databases. Next important functions are to set up fraud detection parameters. By changing fraud detection parameters, system users can control the number of potential fraud transactions. Execution functions provide fraud detection results which are found based on fraud detection parameters. The potential fraud transactions can be viewed on screen or exported as files. The study is an initial trial to identify fraud transactions in Auction Exception Agricultural Products. There are still many remained research topics of the issue. First, the

Mitochondrial Genetic Variation of Pen Shell, Atrina pectinata in Korea and Japan

Dongsung Kim,Hyun Soo Rho,Jongwoo Jung 한국동물분류학회 2017 Animal Systematics, Evolution and Diversity Vol.33 No.3

In the northwestern Pacific region, the pen shell (Atrina pectinata) is a widely distributed bivalve and economically important in fisheries. Recently, stock of this species has been greatly reduced due to overexploitation and marine pollution, which arouses interest in conservation. Studies on genetic and taxonomic entities of pen shells have not been tried in Korea, which makes difficult to take measures for effective conservation of this marine resource. In this study, we investigated mitochondrial genetic polymorphism of pen shells collected from 4 locations in Korea and Japan using cytochrome c oxidase I (COI) gene sequences. A total of 39 haplotypes were identified among 86 individuals of pen shell. Although only 5 haplotypes were shared, no significant genetic differentiation was observed between Korean and Japanese populations. These results suggest that pen shell populations of these regions share an ancestral population which might have experienced expansion during the Pleistocene, but gene flow must have been highly restricted after expansion.

High-Throughput Screening for Novel Inhibitors of Protein-Tyrosine Phosphatase-1B

Kim WonBae,Lee Inki,Son MiWon,Jung MiYoung,Shin ChangYell,Kim DongSung,Kim SoonHoe,Yoo MooHi 大韓藥學會 2002 大韓藥學會 總會 및 學術大會 Vol.2002 No.2

Mitochondrial Genetic Variation of Pen Shell, Atrina pectinata in Korea and Japan

Kim, Dongsung,Rho, Hyun Soo,Jung, Jongwoo The Korean Society of Systematic Zoology 2017 Animal Systematics, Evolution and Diversity Vol.33 No.3

In the northwestern Pacific region, the pen shell (Atrina pectinata) is a widely distributed bivalve and economically important in fisheries. Recently, stock of this species has been greatly reduced due to overexploitation and marine pollution, which arouses interest in conservation. Studies on genetic and taxonomic entities of pen shells have not been tried in Korea, which makes difficult to take measures for effective conservation of this marine resource. In this study, we investigated mitochondrial genetic polymorphism of pen shells collected from 4 locations in Korea and Japan using cytochrome c oxidase I (COI) gene sequences. A total of 39 haplotypes were identified among 86 individuals of pen shell. Although only 5 haplotypes were shared, no significant genetic differentiation was observed between Korean and Japanese populations. These results suggest that pen shell populations of these regions share an ancestral population which might have experienced expansion during the Pleistocene, but gene flow must have been highly restricted after expansion.

Discourse Structure and Syntax-Semantics Interface

Dongsung Kim 담화·인지언어학회 2003 담화·인지언어학회 학술대회 발표논문집 Vol.- No.-

Study on statistical breakdown delay time in argon gas using a W-band millimeter-wave gyrotron

Kim, Dongsung,Kim, Sung Gug,Sawant, Ashwini,Yu, Dongho,Choe, MunSeok,Choi, EunMi American Institute of Physics 2016 Physics of plasmas Vol.23 No.4

Use of colloidal iron as a tracer to measure the ingestion rates of free-living marine nematodes

Kim, Dongsung,Shirayama, Yoshihisa Springer-Verlag 2010 Journal of oceanography Vol.66 No.2

A Retrospective Clinical Evaluation of an Artificial Intelligence Screening Method for Early Detection of STEMI in the Emergency Department

Kim Dongsung,Hwang Ji Eun,Cho Youngjin,Cho Hyoung-Won,Lee Wonjae,Lee Ji Hyun,Oh Il-Young,Baek Sumin,Lee Eunkyoung,Kim Joonghee 대한의학회 2022 Journal of Korean medical science Vol.37 No.10

Background: Rapid revascularization is the key to better patient outcomes in ST-elevation myocardial infarction (STEMI). Direct activation of cardiac catheterization laboratory (CCL) using artificial intelligence (AI) interpretation of initial electrocardiography (ECG) might help reduce door-to-balloon (D2B) time. To prove that this approach is feasible and beneficial, we assessed the non-inferiority of such a process over conventional evaluation and estimated its clinical benefits, including a reduction in D2B time, medical cost, and 1-year mortality. Methods: This is a single-center retrospective study of emergency department (ED) patients suspected of having STEMI from January 2021 to June 2021. Quantitative ECG (QCG™), a comprehensive cardiovascular evaluation system, was used for screening. The non-inferiority of the AI-driven CCL activation over joint clinical evaluation by emergency physicians and cardiologists was tested using a 5% non-inferiority margin. Results: Eighty patients (STEMI, 54 patients [67.5%]) were analyzed. The area under the curve of QCG score was 0.947. Binned at 50 (binary QCG), the sensitivity, specificity, positive predictive value (PPV) and negative predictive value (NPV) were 98.1% (95% confidence interval [CI], 94.6%, 100.0%), 76.9% (95% CI, 60.7%, 93.1%), 89.8% (95% CI, 82.1%, 97.5%) and 95.2% (95% CI, 86.1%, 100.0%), respectively. The difference in sensitivity and specificity between binary QCG and the joint clinical decision was 3.7% (95% CI, −3.5%, 10.9%) and 19.2% (95% CI, −4.7%, 43.1%), respectively, confirming the non-inferiority. The estimated median reduction in D2B time, evaluation cost, and the relative risk of 1-year mortality were 11.0 minutes (interquartile range [IQR], 7.3–20.0 minutes), 26,902.2 KRW (22.78 USD) per STEMI patient, and 12.39% (IQR, 7.51–22.54%), respectively. Conclusion: AI-assisted CCL activation using initial ECG is feasible. If such a policy is implemented, it would be reasonable to expect some reduction in D2B time, medical cost, and 1-year mortality.

DA 11004, a synthetic IDPc inhibitor, inhibits the high fat high sucrose diet-induced obesity in C57BL/6 mice

Kim WonBae,Jeong MiYoung,Shin ChangYell,Sohn JinBup,Lee InKi,Son Miwon,Bae CheolJun,Byun JongSoo,Kim DongSung,Huh TaeLin,Yoo Moohi,Kim SoonHae 大韓藥學會 2003 大韓藥學會 總會 및 學術大會 Vol.2003 No.1