기계학습을 이용한 네트워크 전장정보 수집

한규석(Kyu Seok Han),김태규(Taekyu Kim),심신우(Shinwoo Shim),전성구(Sung Goo Jun),윤지원(Jiwon Yoon) 한국정보과학회 2018 정보과학회논문지 Vol.45 No.10

최근 IoT(Internet Of Things) 및 ICT(Information and Communications Technologies) 기술이 집약된 다양한 시스템이 개발로 인해 다양한 기기들이 네트워크에 연결되면서 각기 다른 리소스와 기능을 갖는 기기들에 따른 다양한 운영체제가 등장하게 되었다. 해킹 보안에 대한 관심이 높아지면서 각 기기들에 대해 탑재된 운영체제의 취약점 분석과 이에 따른 실제적인 공격 기법에 대한 연구가 진행되었으며, 이에 따라 기기의 운영체제의 종류와 세부적인 버전 그리고 중점적으로 강화되어 있는 기능(API)이 보안에 있어 중요한 정보로 대두되고 있다. 사이버 전에서 이러한 정보 수집을 관제하는 것은 사이버 위협의 전초이기 때문에 이러한 스캐닝을 네트워크 트래픽 관제하는 방안은 끊임없이 연구되어 왔으며, 이 관제를 피하기 위해 정보수집자는 은밀하게 포트 정보를 수집하기 위한 대책을 맞서 준비하는 실정이다. 본 논문에서는 네트워크 관제시스템에서 중요하게 여기지 않는 네트워크 기본 명령어들과 기계학습을 이용한 분석을 통해서 상대에 대한 정보를 얻어 낼 수 있는 스캐닝에 대해서 다루게 된다. Recently, various systems based on Internet of Things (IOT) and Information and Communications Technologies(ICT) have been developed. Today, assorted devices are connected to a network, and various operating systems according to devices having different resources and functions have appeared. With the increased need for in hacking security, researches on the vulnerability analysis of the operating system installed on each device and the actual attack technique have been carried out. Accordingly, the type and detailed version of the operating system of the device, Function (API) is emerging as important information in security. Since the control of this information gathering in the cyber warfare is the first stage of the cyber threat, many studies have been conducted on mehods for controlling the network traffic while scanning. In order to bypass this control of the network, information collectors prepare countermeasures to secretly collect port information. In this paper, we deal with a scanning method that can acquire information about opponents through network basic commands which are not important in the network control system.

효율적인 네트워크 고립을 위한 공격기법에 대한 연구

한규석(Kyu Seok Han),윤지원(Jiwon Yoon),김태규(Taekyu Kim),박영우(Young Woo Park),한정규(Jungkyu Han) 한국정보과학회 2018 정보과학회논문지 Vol.45 No.5

최근 많은 기기와 사물들이 사물인터넷(Internet of Thing)기술을 이용해 네트워크에 접속하고 있다. 작은 규모를 대상으로 하는 지역 인터넷(Local Area Network: 이하 LAN)망에서도 많은 기기들이 연결되어 네트워크 토폴로지의 복잡성은 매우 커지고 있다. 이런 작은 규모의 네트워크가 모인 대규모 네트워크도 전국단위로 확장 되고 있는 추세이다. 대규모 네트워크 안에서 집중형 혹은 분산형으로 데이터가 모이거나 퍼져나가는 흐름이 만들어지고 있다. 이 흐름은 각종 산업에 유용하게 이용되고 있다. 특히, 국가기반산업에 혹하는 금융, 통신, 군(軍), 발전 시설은 전국단위 인터넷망을 이용해서 상황을 관제하고 긴급한 상황에 대처할 수 있는 데이터의 흐름을 유지하고 있다. 이런 환경을 갖고 있는 네트워크 상황에서 관제나 데이터 수집 및 저장 혹은 데이터 처리를 하고 있는 중요한 기기(Node)나 이 기기를 포함한 작은범위의 네트워크(LAN)가 전체 네트워크에서 분리 및 고립된다면, 굉장한 혼란을 초래하게 될 것이다. 이 논문에서는 대규모 네트워크에서 중요 LAN혹은 Node를 고립시키는 기법에 대해서 다루게 된다. Many devices and objects have recently been connected to the network using the Internet of Thing technology. In a local area network (LAN) network for small scale, many devices are connected and the complexity of the network topology is greatly increased. Large-scale networks of such small-scale networks are also expanding nationwide. he flow of gathering and spreading data in a concentrated or distributed manner within a large network is being made. This is useful for various industries, financial, telecommunications, military, and power generation facilities in statebased industries use the nationwide Internet network to control and maintain a stream of data that can cope with emergency situations. In a network environment that has such a circumstance, if a critical device (node) or a small range of network (LAN) that is involved in the control, data collection, storage, or data processing is isolated and isolated from the entire network. This paper discusses techniques for isolating critical LANs or Nodes in large networks.

재생 냉각용 연소기의 최적 브레이징 조건

남대근(Dae-Geun Nam),홍석호(Seok-Ho Hong),한규석(Kyu-Seok Han) 한국항공우주학회 2003 韓國航空宇宙學會誌 Vol.31 No.7

표면 마취제의 기능 향상을 위하여 개발된 Lipo-MLA(Liposome Encapsulated Mixed Local Anesthetics)의 평가

박성식,한규석,백운이 대한마취과학회 2001 Korean Journal of Anesthesiology Vol.40 No.3

Background: This study investigated the effect of topical analgesic effects of a liposome encapsulated mixture of local anesthetics (lipo-MLA) compared with EMLA. Methods: 3% lipo-MLA (0.5% tetracaine base, 2.5% lidocaine base) and 5% lipo-MLA (1% tetracaine base, 4% lidocaine base) were encapsulated into liposomal vesicles made with egg yolk phosphatidy1-choline, cholesterol and phosphatidyldioleoyl. 3% lipo-MLA and EMLA were applied to volunteers' forearms bilaterally with and without an occlusive dressing. The topical anesthetic effects of the lipo-MLA and EMLA as a control were evaluated by the pinprick test in 28 adult volunteers after 60 minutes of application. The analgesic influence of the concentration of local anesthetics was also compared with 3% and 5% lipo-MLA under a non-occlusive dressing. Results: Analgesic effects of the 3% lipo-MLA were similar with EMLA under an occlusive dressing for 60 minutes. In addition, analgesic effects of the 3% lipo-MLA under a non-occlusive dressing were more potent than EMLA. Lipo-MLA under a non-occlusive dressing showed more potent analgesic effect than lipo-MLA under an occlusive dressing. 5% lipo-MLA was more potent than 3% lipo-MLA under a non-occlusive dressing. Conclusions: Lipo-MLA has more potent analgesic effects than EMLA without an occlusive dressing and 5% lipo-MLA is more potent than 3% lipo-MLA. Therefore, lipo-MLA appeared to be an impoved topical analgesic formulation which provides a more potent and convenient topical application. (Korean J Anesthesiol 2001; 40: 420~426)

Vein of Galen 기형 환아에서 중재적 방사선하 혈관내 색전술시의 마취관리 경험

박성식,임동건,한규석,홍정길,김용선 대한마취과학회 2001 Korean Journal of Anesthesiology Vol.41 No.3

Anesthetic Management during Interventional Neuroradiologic Embolization of a Vein of Galen Malformation - A case report - Kyu Seok Han, M.D., Sung Sik Park, M.D., Dong Gun Lim, M.D. Yong Sun Kim, M.D.^*, and Jung Gil Hong, M.D. Department of Anesthesiology and ^*Diagnostic Radiology, School of Medicine, Kyungpook National University, Daegu, Korea The vein of Galen malformation is a midline intracranial arteriovenous fistula with aneurysmal dilatation of the vein of Galen. This abnormality, though rare, is associated with a bleak prognosis and significant mortality. However, significant advancements have been made in understanding the path-ophysiology of this abnormality, and improvements in both interventional neuroradiologic embolization and microneurosurgical techniques have contributed to a better outcome. In neuroradiologic embolization, children are likely to become agitated and confused and thereby jeopardize the entire procedure. For this reason, this procedure is performed with the children under general anesthesia. We experienced a case of neuroradiologic embolization under general anesthesia with propofol. The patient was 9-year-old boy who weighed 29 kg. He was healthy and had no other abnormalities in our preoperative evaluation. Throughout the entire procedure, especially before and after closure of the fistula, hemo-dynamic changes and unexpected events did not appear. (Korean J Anesthesiol 2001; 41: 388~392)

Trp-P-1 과 2-AF 에 대한 산채류 생즙의 항돌연변이 효과

이해금,정의호,함승시,한규석 한국식품위생안전성학회 1992 한국식품위생안전성학회지 Vol.7 No.4

On the mutagenicity induced by 3-amino-l,4-dimethyl-5-H-pyrido[4,3-b]indol (Trp-P-1) and 2-aminotluorene (2-AF), the antimutagenic effects of edible muntain herb juices were examined by the Ames assay using Salmornella typhimurium TA98 and TA100. Juices prepared from araria bud, small water dropwort, mugwort, roots of bellflower and sedum didn't have mutagenicity. Most of sample juices showed the antimutagenicity. Fspeaslly, juices Prepared from aralia bud, small water dropwort and mugwort were found to possess strong antimumgenic effects. Sedum was moderafly effective and root of bellflower had little effect on mutagenicity caused by Trp-P1 and 2-AF. The experimental results with TA98 were similar to those with TA100 in the antimutagenicity test of edible mountain hems juices. In this study, anlimutagenicity on Trp-P-1 was more effective than that on 2-AF.