정보유출 악성코드 분석을 통한 개선된 탐지 규칙 제작 연구

박원형,양경철,이동휘,김귀남 한국융합보안학회 2008 융합보안 논문지 Vol.8 No.4

최근 해킹 기법들은 기존보다 정교한 기술을 바탕으로 악성화 되어 그 피해 규모가 증가하고 있으며, 인터넷 사용자의 확대와 맞물려 그 위력은 커지고 있다. 특히 정보유출을 목적으로 제작한 해킹메일에 첨부된 악성코드의 피해가 급증하고 있다. 본 논문에서 이러한 정보유출형 악성코드를 효과적으로 분석, 탐지할 수 있는 기술에 관하여 연구한다. 또한 본 연구에서는 기존 악성코드의 탐지규칙과 해킹메일 악성코드 탐지규칙을 비교하였으며 이를 통해 해킹메일 악성코드 뿐 아니라 새로운 악성코드와 변종들에 대해서도 탐지할 수 있는 기술에 대해 설명한다. Not only the recent hacking techniques are becoming more malicious with the sophisticated technology but also its consequences are bringing more damages as the broadband Internet is growing rapidly. These may include invasion of information leakage, or identity theft over the internet. Its intent is very destructive which can result in invasion of information leakage, hacking, one of the most disturbing problems on the net. This thesis describes the technology of how you can effectively analyze and detect these kind of E-Mail malicious codes. This research explains how we can cope with malicious code more efficiently by detection method.

미래 자율주행 자동차 사고에서 시나리오 기반의 보안 윤리 모델 연구

박원형 한국융합보안학회 2018 융합보안 논문지 Vol.18 No.5

Along with the recent technological development, autonomous vehicles are being commercialized. but The accident of au tonomous driving car is becoming an issue, and safety problem of autonomous driving car is becoming a hot topic. Also There are currently no specific guidelines for clear laws and security ethics. These guidelines require a lot of information and experience. This study establishes basic guidelines based on cases of accidents from past to present. This study sugg ests security considerations through case study of security ethics in autonomous car accident. 최근 기술의 발전과 더불어 자율주행 자동차가 상용화가 되어 가고 있다. 하지만 자율주행 자동차에 대한 사고가 발생하고 있어 자율주행 자동차의 안전성 문제가 화두가 되고 있다. 또한, 현재 명확한 법률과 보안윤리에 대한 구체적인 가이드라인이 정해져 있지 않는 문제점이 있다. 이러한 가이드라인이 정해지려면 많은 정보와 경험이 필요하다. 본 연구는 과거에서 현재까 지 사고 사례를 바탕으로 기본적으로 시나리오 기반의 모델을 정한다. 본 연구는 미래 자율주행 자동사 사고 시 보안윤리에 대한 사고 시나리오 사례를 통한 보안 고려 요소에 대한 모델을 제안 한다.

Anterior Optic Pathway Compression Due to Internal Carotid Artery Aneurysms: Neurosurgical Management and Outcomes

박원형,박중철,Kyunghwa Han,안재성,권병덕 대한뇌졸중학회 2015 Journal of stroke Vol.17 No.3

Background and Purpose Compression of the anterior optic pathway results in visual deficits that can lead to the detection of unruptured aneurysms in the internal carotid artery (ICA). The general types of treatment modalities for aneurysms and visual deficits include surgery and endosaccular coiling. This study retrospectively analyzed and compared the resolution of visual deficits following surgery or endosaccular coiling. Methods We reviewed data on 33 patients with unruptured ICA aneurysms who presented with visual field deficits caused by mass effects over the anterior optic pathway. Statistical analyses were performed to identify the variables associated with the recovery of visual symptoms. Results Eighteen patients underwent aneurysm clipping, 2 underwent bypass surgery with endovascular trapping, and 2 underwent endovascular trapping without bypass surgery (group A). Ten patients received endosaccular coiling (group B). The visual outcomes included the following: in group A, 17 patients (73.9%) demonstrated improvement and 6 patients (26.1%) demonstrated no changes or worse outcomes; in group B, 2 patients (20.0%) demonstrated improvement and 8 patients (80.0%) demonstrated no changes or worse outcomes. Group A was associated with a higher rate of favorable outcome than group B (P=0.007). According to the multivariate analysis, treatment without endosaccular coiling (group A) was the only variable significantly associated with improvement of visual outcome (P=0.005; OR=28.523; 95% CI=2.683-303.171). Conclusions Treatment modality was the only predictor of improvement in visual deficits. Treatment without endosaccular coiling resulted in visual improvement significantly more often in comparison with endosaccular coiling.

비만에 대한 절식요법의 임상연구 고찰: 국내 한의학 연구 중심으로

박원형,차윤엽 한방비만학회 2016 한방비만학회지 Vol.16 No.1

Objectives: The aim of this study is to analyze methods and outcomes about fasting for obesity in korea medicine research. Methods: We searched the studies with key words of ‘obesity’ and ‘fasting or starvation’ in Korean database (Korean traditional knowledge portal, OASIS, KISS, KMBASE, DBPIA, RISS). Studies were analyzed for contents, evaluation methods and adverse effects. Results: Twenty-one studies were reviewed. Studies were published in 1983∼2015. 1. Studies can be classified into three types: comparative study on before and after, comparative study between groups, case study on other disease occurred during the fasting therapy period. 2. The most common step of fasting were 3 steps: reducing food intakes period (3∼5 days), fasting period (7∼10 days) and refeeding period (3∼5 days) and additional period-diet period (28 days). 3. The most common evaluation methods were body weight (BW), body fat mass (BFM), muscle weight (MW), fat free mass, body mass index, body fat percentage, etc. 4. BW, BFM, MW were reduced largely in fasting period. 5. The most common adverse effects were fatigue, nausea, headache, vomiting, insomnia, etc. Conclusions: As a result of the review papers, fasting therapy have positive effects for obesity. To verify the effectiveness of the fasting, more studies are needed such as randomized controlled trial.

중국 안티바이러스 제품 분석을 통한 정보유출 가능성 연구

박원형,Park, Wonhyung 한국정보통신학회 2021 한국정보통신학회논문지 Vol.25 No.10

Recently, controversy has been raised over the security and safety of Chinese-made network equipment (Huawei 5G), apps (TikTok, etc.). In particular, according to the results of the Ministry of Defense investigation in 2020, malicious codes were found in CCTVs made in China that were delivered as military surveillance equipment used as a coast guard system, and specific information was remotely transmitted to a Chinese server. The safety issues of these Chinese security products can be questioned as being systematically led by the state rather than by companies or individuals. In this paper, we perform network and process level analysis of 360 Total Security(360 TS), a Chinese antivirus software. In addition, it compares and analyzes the domestic cloud-based vaccine V3 Lite product. Through this, the safety of Chinese security solutions is checked and information leakage and risks are suggested. 최근, 중국산 네트워크 장비(화웨이 5G), 앱(틱톡 등) 및 각종 중국산 제품들에 대한 보안 안전성에 대한 논란이 제기되고 있으며, 중국 제품이나 소프트웨어를 사용하는 사람들의 정보를 수집하여 불법적인 사건들이 발생하고 있다. 특히, 2020년 국방부 조사결과에 따르면 해안 경계시스템으로 사용하는 군 감시 장비로 납품 받은 중국산 CCTV에서 악성코드가 발견되어 원격으로 중국 서버로 특정 정보가 전송되는 사고가 발생 하였다. 이러한 중국 보안 제품들의 안전성 문제는 기업이나 개인의 문제보다는 조직적으로 국가에서 주도하는 것을 의심해 볼 수 있다. 본 논문에서는 중국산 안티바이러스 소프트웨어인 360 Total Security(이하 360 TS)에 대한 네트워크 및 프로세스 수준의 분석을 수행한다. 또한, 국산 클라우드 기반 백신 V3 Lite제품과 비교 분석 한다. 이를 통해 중국 보안솔루션의 안전성을 점검하여 정보유출 및 위험성을 제시 한다.

마코브 체인을 이용한 Mass SQL Injection 웜 확산 예측에 관한 연구

박원형,김영진,이동휘,김귀남 한국융합보안학회 2008 융합보안 논문지 Vol.8 No.4

최근 웜에 의한 사이버 위협이 증가함에 따라 웜의 확산 특성을 분석하기 위한 전파 모델이 연구되고 있다. 대표적인 예로 수학적 모델링 기법인 Epidemic(SI), KM(Kermack-MeKendrick), Two-Factor, AAWP(Analytical Active Worm Propagation)등의 모델 기법들이 제시되었다. 하 지만, 기존 모델 방법들은 대부분 코드레드와 같은 네트워크를 대상으로 하는 랜덤 스캐닝 기법 에 대해서만 모델링이 가능하다. 또한 거시적인 분석만 가능하고 특정 위협에 대해 예측하는데 한계점을 가지고 있다. 따라서 본 논문에서는 과거의 위협 발생 데이터를 근거로 하여 Mass SQL Injection 같은 사이버위협에 적용 가능한 마코브 체인(markov chain) 기반 예측 방법을 제시한다. 이를 통하여 각 위협별 발생 확률 및 발생빈도를 예측할 수 있다. Recently, Worm epidemic models have been developed in response to the cyber threats posed by worms in order to analyze their propagation and predict their spread. Some of the most important ones involve mathematical model techniques such as Epidemic(SI), KM(Kermack-MeKendrick), Two- Factor and AAWP(Analytical Active Worm Propagation). However, most models have several inherent limitations. For instance, they target worms that employ random scanning in the network such as CodeRed worm and it was able to be applied to the specified threats. Therefore, we propose the probabilistic of worm propagation based on the Markov Chain, which can be applied to cyber threats such as Mass SQL Injection worm. Using the proposed method in this paper, we can predict the occurrence probability and occurrence frequency for each threats in the entire system.

해조류 분말을 첨가한 새로운 어묵의 제조 및 품질평가

박원형,김현대,안홍,김동수 경성대학교 공학기술연구소 2001 공학기술연구지 Vol.8 No.-

The study was undertaken to investigate the processing conditions of functional fish meat paste products(S-FMP) using seaweed powder such as sea-mustard, sea-tangle, laver, and seaweed fusiforme. The water activity, pH value, acid value, peroxide value and viable cell counts of fried fish meat paste products added with seaweed powder(S-FMP) were also determined. The sensory score was shown to be 9, which is extremely desirable value, for the quality of S-FMP containing 2% and 4% seaweed powder.

추나요법의 경항통 치료에 대한 임상적 고찰

박원형,오세춘,Park, Won-Hyung,Oh, Se-Choon 척추신경추나의학회 2005 대한추나의학회지 Vol.6 No.1

Objective : The study aims to find out the effects of Chuna treatment on neck pain. Methods: Out of 40 neck pain people, we divided 20 people in group A was treated Acupuncture and China, 20 people in group B was treated Acupuncture. We measured Visual Analog Scale(VAS) and symptom grade before and after treatment in each group's. Statistical analysis was performed by using SPSS program. Results : 1. Symptom grade III was the highest frequency before treatment in Group A and Group B. After treatment, grade 0 was The highest frequency in Group A But grade 0, II were the highest frequency in Group B. 2. Group A was Significantly decreased in VAS compared with Group B. Conclusion: These results suggest that Chuna treatment is useful on the patients of neck pain.

$H_2O_2$로 유발된 Neuro2A 신경세포고사에 대한 줄풀의 억제 효과

박원형,차윤엽,Park, Won-Hyung,Cha, Yun-Yeop 대한동의생리학회 2005 동의생리병리학회지 Vol.19 No.3

The purpose of this study was to examine the inhibition effect of Zizania latifolia that has been used heart disease, Diabetes Mellitus and Skin disease for a long time on apoptosis induced by $H_2O_2$ in Neuro2A cell. Neuro2A cells were cultivated in RPMI(GibcoBRL) with $5\%$, FBS and treated with $H_2O_2$, and Zizania latifolia. We measured the cell viability and analyzed DNA fragmentation. Activity of PARP, Cytochrome C, caspase-9, caspase-3, p53, p21, Bax and Bcl-2 in the cell was examined by using western blot. The cell viability in Zizania latifolia treatment (60ug/ml<) decreased significantly compared with that of none treatment. (p<0.001) Zizania latifolia increased cell viability about twice as much as that being injury by $H_2O_2$. (Zizania Latifolia 20ug/ml, $H_2O_2$ 200uM, P<0.001) DNA fragmentation developed by $H_2O_2$, but was not developed in Zizania latifolia treatment. PARP, Cytochrome C, caspase-9 and caspase-3 activated all by $H_2O_2$ but were not activated in Zizania latifolia treatment.. P53, P2l and Bu activated by $H_2O_2$, and Bcl-2 got into inactivation. But the opposite results appeared in Zizania latifolia treatment. In conclusion, these results suggest that Zizania latifolia inhibit the development of DNA fragmentation and apoptosis by $H_2O_2$ and the antioxidant action of Zizania latifolia is effective. More researches about effect of Zizania latifolia are considered to need.

중재인 선정과 법원의 역할에 관한 연구

박원형,김철호 한국중재학회 2010 중재연구 Vol.20 No.2

The expanded role of courts in arbitral procedures is said to have certain detrimental effects on the cost-effective approach to arbitration. This is the case when the court is appointing an arbitrator, pursuant to the specific domestic legal regime. The danger of decisions, especially those with expanded role of courts can create delays and hurdles. Even with contradictory viewpoints, the role of the court should complement the arbitral tribunal and not impede the functioning of arbitration independent of the judicial system. In this paper, two recent cases in Korean Supreme Court are reviewed, trying to find the proper implications on further arbitration practices especially in the stage of arbitrator appointment. Even though the proper appointment of arbitrators is essential to the existence of valid arbitration proceedings, appointment of arbitrators by the courts should constitute an administrative power, and not a judicial power. The cases reviewed make clear that the court must play a facilitative role in international commercial arbitration by assisting the parties in appointing the arbitral tribunal, the court intervention must be kept to a minimum.