The Interactive Mechanism of Static and Dynamic Analysis in the Reverse Analysis of Embedded Software

LiuTie-ming,Jinag Lie-hui,Zhu Jing-si,Meng Gang 보안공학연구지원센터 2016 International Journal of Multimedia and Ubiquitous Vol.11 No.10

Because the software reverse analysis method which combined the dynamic and static analyses lacks normative interactive mode, the work of the software reverse analysis is inefficient, and its reusability is poor. Based on dynamic and static analysis process of the embedded software,three kinds of interactive mechanismare proposed, including Static To Dynamic (STD), Dynamic To Static (DTS), Static and Dynamic simultaneous (SDM), and has also presented the method of realizing these three interaction mechanisms in detail. The test results show that interactive mechanisms of STD, DTS and SDM are suitable for correction of abnormal nodes in the results of static analysis, optimization of dynamic information extraction, identification of hidden codes and so on. It can greatly improve work efficiencyof the embedded software reverse analysis.

소프트웨어 감시 기법을 활용한 정적 실행시간 분석의 신뢰성 향상

김윤관(Yun-Kwan Kim),김태완(Tae-Wan Kim),장천현(Chun-Hyon Chang) 한국컴퓨터정보학회 2010 韓國컴퓨터情報學會論文誌 Vol.15 No.4

시간적 정확성을 필요로 하는 시스템은 신뢰성을 위하여 실행시간에 관한 정확한 설계와 검증이 필요하다. 따라서 실행시간의 분석을 위한 개발 지원 도구가 필요하고 이를 위한 많은 연구가 진행되고 있다. 이러한 개발 지원 도구의 분석 방법은 정적 분석 방법과 측정 기반 분석 방법의 두 가지로 구분된다. 먼저 정적 분석은 짧은 시간에 분석이 가능하지만, 다양한 하드웨어의 존재로 인해 I/O 정보 예측이 어려워 분석 결과의 신뢰성이 떨어진다. 두 번째로 측정 기반 분석은 실제 결과에 근접한 분석이 가능하지만, 사용하기 어렵고 분석에 걸리는 시간이 길다. 이러한 분석 방법의 문제를 해결하기 위하여 본 논문에서는 정적 분석 과정에 소프트웨어 감시 방안을 적용한 방법을 제안한다. 제안하는 분석 방안은 정적 분석을 통해 감시가 필요한 대상을 자동으로 결정하고 감시 결과를 통해 과대 예측을 줄일 수 있다. 따라서 감시에 대한 어려움과 시간의 부하를 줄이고 정적 분석의 가장 큰 문제점인 신뢰성을 향상시킬 수 있다. A system which needs timely accuracy has to design and to verify correctly about execution-time for reliability. Accordingly, it is necessary for timing analysis tools, and much previous research worked. In timing analysis tool, there are two methods. One is a static analysis, and the other is a measurement based analysis. A static analysis is able to spend time less than a measurement based analysis method, but has low reliability of analysis result caused by hard to estimate time of I/O caused by various hardware. A measurement based analysis can be close analysis to real result, but it is hard to adapt to actual application, and spend a lot of time to get result of analysis. As such, this paper present a software monitoring architecture to supply reliability of static analysis process. In a presented architecture, it can select target as needed measurement through static analysis, and reuse result of measurement exist. Therefore, The architecture can reduce overload of time and performance for measurement, and improve the reliability which is the worst problem of static analysis.

기계학습을 이용한 소스코드 정적 분석 개선에 관한 연구

박양환(Yang-Hwan Park),최진영(Jin-Young Choi) 한국정보보호학회 2020 정보보호학회논문지 Vol.30 No.6

소스코드에 대한 정적 분석은 광범위한 소스코드에 대해서 잔존하는 보안약점을 찾는 것으로 정적 분석 도구를 활용하여 점검을 하고, 그 결과에 대해서 정적 분석 전문가가 정탐 및 오탐 분석을 한다. 이 과정에서 분석양이 많고 오탐의 비율이 높아 많은 시간과 노력이 들어가게 되어 효율적으로 분석하는 방안이 요구되고 있다. 또한 전문가들은 정 · 오탐 분석을 할 때 결함이 발생한 라인의 소스코드만 보고 분석을 하는 경우는 드물다. 결함의 유형에 따라서 주변의 소스코드를 같이 분석하고 최종 분석 결과를 내리게 된다. 이러한 정적 분석 도구를 사용하여 전문가가 정 · 오탐을 판별하는 어려움을 해결하기 위해서 본 논문에서는 정적 분석 도구가 찾은 보안약점이 정탐인지 아닌지를 전문가가 아닌 인공지능을 통해 판별하는 방법을 제안한다. 또한 이러한 기계학습에 사용되는 학습 데이터(결함주변 소스코드)의 크기가 성능에 어떤 영향을 미치는지 실험을 통해 최적의 크기를 확인하였다. 이 결과를 통해 정적 분석 후 정 · 오탐을 분류하는 정적 분석 전문가의 업무에 도움을 줄 것으로 기대한다. The static analysis of the source code is to find the remaining security weaknesses for a wide range of source codes. The static analysis tool is used to check the result, and the static analysis expert performs spying and false detection analysis on the result. In this process, the amount of analysis is large and the rate of false positives is high, so a lot of time and effort is required, and a method of efficient analysis is required. In addition, it is rare for experts to analyze only the source code of the line where the defect occurred when performing positive/false detection analysis. Depending on the type of defect, the surrounding source code is analyzed together and the final analysis result is delivered. In order to solve the difficulty of experts discriminating positive and false positives using these static analysis tools, this paper proposes a method of determining whether or not the security weakness found by the static analysis tools is a spy detection through artificial intelligence rather than an expert. In addition, the optimal size was confirmed through an experiment to see how the size of the training data (source code around the defects) used for such machine learning affects the performance. This result is expected to help the static analysis expert"s job of classifying positive and false positives after static analysis.

터널 횡방향 지진해석 Part II: 동적해석을 통한 터널의 지진응답 예측 한국지반공학회논문집 제26권 제6호터널 횡방향 지진해석 Part II: 동적해석을 통한 터널의 지진응답 예측

박두희,신종호,윤세웅 한국지반공학회 2010 한국지반공학회논문집 Vol.26 No.6

Dynamic analyses of tunnels are widely performed in practice in Korea. Accurate performance of a dynamic analysis is very difficult, requiring appropriate application of lower and lateral boundary conditions, deconvolution, constitutive model, and selection of dynamic soil properties etc. Lack of a systematic guideline on how to perform the dynamic analysis makes it even more difficult to perform an analysis. In addition, dynamic analyses are not needed in most cases and pseudo-static analyses are more than adequate. However, they are performed without a clear understanding on the need for the dynamic analysis and differences between the two methods. In this study, firstly, a guideline for correctly performing a 2D dynamic analysis is developed. Secondly, the differences in the tunnel responses using dynamic and pseudo-static analyses are discussed and compared. The results show that the discrepancies between the dynamic and static analyses are not significant for most cases. It is therefore recommended that the dynamic analyses be performed at tunnel portal, very soft ground, or in cases where spatial variation of the ground motion needs to be considered in the seismic analysis of tunnels in transverse direction.

터널구조물의 내진해석

이인모,안대진 사단법인 한국터널지하공간학회 2001 한국터널지하공간학회논문집 Vol.3 No.4

Generally, it has been noted that underground structures have a consistent record of suffering much less damage thansurface facilities during earthquakes; but it is still necessar subject to earthquake loadings and to provide the appropriate m ethod for the seismic analysis of underground tunnelstructures since many types of underground structures have been and will be constructed in countries situated withinground tunnel structures are performed by using quasi-static analysis method and dynamic analysis method. Second, se ismic analyses in tunnel portals are performed by usingabove methods. The results of seismic analyses for the tunnel s tructure show that the tunnel structure conforms toground deformation and that seismic design by using the quasi-s tatic analysis method is more conservative than that byusing the dynamic analysis. The results of the dynamic FEM anal ysis for the tunnel structure show that the simplified 2-is can be adopted for seismic analysis. Finally, theresults of the dynamic FEM analysis in tunnel portals show that the force acting on the lining is largest near to thetunnel portal when an earthquake wave propagates parallel to tu nnel axis.

Reliability Improvement of Embedded Software in using Static Analysis

Young Bin Kim,Conan K.R. Ryu 한국정보통신학회 2017 2016 INTERNATIONAL CONFERENCE Vol.9 No.1

This paper discusses research on improving the reliability of embedded software using static analysis. Static analysis is a technique used to enhance the reliability of software by detecting errors in the source codes. This technique can be executed without running the software. In this study, a commercial static analysis program was utilized as the static analysis tool, with the topic of the analysis being embedded software in industrial machinery, which must meet specific safety standards. Results of experimentation showed that static analysis detected about 950 errors, of which the program was able to correct 890 errors approximately.

Fatigue Analysis of Vehicle Chassis Componet Considering Resonance Frequency

Lee, Sang Beom,Yim, Hong-Jae 한국공작기계학회 2004 한국생산제조학회지 Vol.13 No.6

The purpose of this paper is to assess the benefits of frequency domain fatigue analysis and compare it with more conventional time domain techniques. The multi-body dynamic analysis, FE analysis and fatigue life prediction technique are applied for the frequency domain fatigue analysis. To obtain the dynamic load history used in the frequency domain fatigue analysis, the computer simulations running over typical road profiles are carried out by utilizing vehicle dynamic model. The fatigue life estimation for the rear suspension system of small-sized passenger car is performed by using resonance durability analysis technique, and the estimation results are compared with the conventional quasi-static durability analysis results. For the pothole simulation, the percent changes of the fatigue life between the two durability analysis techniques don't exceed 10%. But, for the Belgian road simulation, because of the resonance effect, the fatigue life using the resonance durability analysis technique are much smaller estimated than the quasi-static durability analysis results.

Studying Higher Mode Effects on the Performance of Nonlinear Static Analysis Methods Considering Near-Fault Effects

S. F. Ghahari,H. R. Moradnejad,M. S. Rouhanimanesh,A. Sarvghad-Moghadam 대한토목학회 2013 KSCE JOURNAL OF CIVIL ENGINEERING Vol.17 No.2

Daily development in civil engineering arena and the importance of economical aspects in the design of structures have motivated the engineers to shift their approaches from designing upon strength to designing upon performance. This is of more importance regarding the forces induced by earthquakes which have unpredicted and random nature. However, it is not possible to design or assess exactly the structural performance against strong ground motion using analytical methods which are applied for static loads and therefore precise dynamic analysis methods are needed. Despite significant progress in the analytical methods and engineering software, using nonlinear time history analysis is very difficult for engineers and designers due to unpredictable nature of future ground motions as well as complicated behaviour of structures. Consequently, the substituting methods are presented upon nonlinear static analysis. Coefficient method and capacity spectrum method, presented by FEMA356 and ATC40, respectively, are of this kind that have been used in the recent years and modified by newer documents such as FEMA440. Despite acceptable results, neglecting some important items, such as higher mode effects which can be decisive in tall and specific structures, made offering other procedures like Modal Pushover Analysis (MPA). In this study, the performance abilities of nonlinear static methods are studied in order to assess the dynamic response of structures under both far- and near-fault earthquake records. For this purpose, two reinforced concrete frames of 5 and 15 stories are analyzed by a series of nonlinear static and dynamic analyses. Analysis results show that conventional nonlinear static analysis methods cannot estimate accurately the deformation demands of tall building structures,particularly in the higher stories, due to the effects of higher modes. Although MPA method has almost improved the results, yet it has not high accuracy regarding near-fault earthquake records.

Efficient seismic analysis of multi-story buildings

Lee, Dong Guen,Kim, Hee Cheul Techno-Press 1996 Structural Engineering and Mechanics, An Int'l Jou Vol.4 No.5

The equivalent static force procedure and the response spectrum analysis method are widely used for seismic analyses of multi-story buildings. The equivalent static force procedure is one of the most simple but less accurate method in predicting possible seismic response of a structure. The response spectrum analysis method provides more accurate results while it takes much longer computational time. In the response spectrum method, dynamic response of a multi-story building is obtained by combining modal responses through a proper procedure such as SRSS or CQC method. Since all of the analysis results are expressed in absolute values, structural engineers have difficulties to combine them with the results obtained from the static analysis. Design automation is interrupted at this stage because of the difficulty in the decision of the most critical design load. Pseudo-dynamic analysis method proposed in this study provides more accurate seismic analysis results than those of the equivalent static force procedure since the dynamic characteristics of a structure is considered. And the proposed method has an advantage in combination of the analysis results due to gravity loads and seismic loads since the direction of the forces can be considered.

아세안 해외직접투자 유입 동기유인에 관한 연구: 정태 및 동태적 분석

정재경,김석수,이성엽,정세희 한국무역통상학회 2022 무역통상학회지 Vol.22 No.1

We examined the motives for inward FDI(Foreign Direct Investment) in ASEAN using static and dynamic analyses. For static analyses, fixed-effect panel analysis and random-effect panel analysis were used through the Hausman test, and for dynamic analyses, System GMM, which uses the lag variable of the differential variable of the FDI as the instruments, was used. In ASEAN 8 developing countries except for Brunei and Singapore which are high-income countries, all of the market-seeking, resource-seeking, efficiency-seeking, and strategic asset-seeking motives have a positive relationship with inward FDI significantly. In dynamic model, two variables which are first lag variable of FDI and market size have a positive relationship with inward FDI significantly. However, resource-seeking and efficiency-seeking variables show a negatively significant relationship with inward FDI. The positive coefficient of two variables in the static analysis were changed to the negative coefficient in the dynamic analysis. Considering time in dynamic models, resource-seeking and efficiency-seeking variables showed different results over time. Unlike previous studies, our study not only used ICT export ratio as a proxy variable for the strategic self-seeking motive, but also conducted both the static analyses and the dynamic analyses on motives of inward FDI in ASEAN.