[국문 번역문] 공적 가치, 사적 기반 그리고 IoT

Deirdre K. Mulligan,Kenneth A. Bamberger,이성엽(번역자) 서울대학교 공익산업법센터 2016 경제규제와 법 Vol.9 No.1

2015년 7월, 두 명의 연구자는 지프 체로키의 대쉬보드 연결시스템을 무선으로 해킹하여 그 차량의 통제권을 확보하였다. 이 사건으로 인해 피아트 크라이슬러 차량 140만여대가 리콜되었는데 이는 보안과 관련된 최초의 리콜 사태였다. 또한 다른 연구자들은 자동차를 원격 조정할 수 있다는 것을 보여주었다. 그리고 가을에는 GM이 수백만 대의 차량의 보안 취약성을 개선하기 위한 원격 업데이트 프로그램을 사용하기 시작하였다. 이러한 몇몇 사건들은 자동차, 소위 연결된 차량 그리고 IoT에 있어 보안 이슈의 중요성을 보여주고 있으며, 또한 생산, 그리고 운행 중인 차에서 보안취약성의 관리에 대한 관심을 유도하는 규제규조의 중요성을 강조하게 하였다. 특히, 이에 대한 관심을 어떻게 유도할 것인지 그리고 운행 중인 차에서 발견된 보안취약성을 어떻게 관리할 것인지에 대한 평가의 중요성을 보여주었다. 특히, 그것은 취약성을 개선하여 안전과 보안을 지원하기 위한 원격업데이트 시스템의 발전의 중요성을 보여주었다. 원격업데이트 시스템은 IoT 보안 그리 고 거기에 의존하는 인간의 건강과 안전에 필수적이다. 오늘날 연결된 차량은 1억 개 이상의 소프트웨어 코드를 가지고 있고 코드의 기초는 증가하고 있다. 이 코드는 규제의무의 이행에 있어 중요한 역할을 하고 있고 자동차의 안전과 보안시스템에 결정적 역할을 한다. 센서와 알고리듬은 에어백 배치, 안전벨트 착용, 미끄럼방지 시스템, 잠금방지제동시스템을 작동시키고 조절한다. 또한 에어백과 안전벨트 행위를 알리기 위해 사람의 크기, 무게, 위치를 확인해 준다. 자동차 안전에서 소프트웨어는 코드가 지배하는 안전시스템을 만드는 것은 물론 생명을 구하는데 중요한 보안에서의 역할이 증가하고 있다. 자동차 코드 예컨대 지프 해커에 의해 개발된 코드의 취약성을 드러내는 것이 자동차 안전 및 보안의 미래에서 필수적인 역할을 한다. 원격업데이트 시스템의 설계는 거버넌스, 다양한 공적, 사적 가치 간의 균형과 관련되어 있다. 자동차안전과 보안을 강화하는 시스템을 개발하는 것은 경쟁하는 보안의 비전간의 선택과 그리고 그 과정에서 다른 가치를 어떻게 보호할 것인지를 결정하는 것과 관련되어 있다. 사이버보안 목표의 연결 그리고 다른 가치 간의 균형을 가져가는 방안은 관련 공적, 사적 이해관계자들이 포함되는 대중적인 참여과정 속에서 만들어져야 한다. 이 연구는 IoT와 원격업데이트기능을 강화하는데 중요한 역할을 하는 국가교통안전청과 같은 규제기관이 사이버보안과 안전위험을 대비하는 정책의제를 설정하기 위해 필요한 원리를 검토한다. 자동차 산업에서 원격보안과 안전의 업데이트 기능의 중요성을 설명하고 그 발전의 장애물에 대해서 설명한다. 원격업데이트 기능, 수리권과 프라이버시를 포함하는 소비자 보호, 경쟁간 상호작용에 의해 나타나는 도전에 대해 검토한다. 이러한 도전의 관점에서 원격업데이트, 자동차 사이버보안에서 있어 규제접근방법에 대한 원리를 제안한다. 그 원리들은 사이버보안 전문성의 발전과 관련 이해관계자간 공유된 사이버보안 목표를 증진시키고 경쟁과 프라이버시 같은 다른 가치가 원격업데이트 기술의 설계에 반영될 수 있도록 하는 것이다. 결론적으로 우리는 자동차 사이버보안을 개선하기 위한 기존의 노력에 대한 개혁을 제안한다.

Public Values, Private Infrastructure and the Internet of Things

Deirdre K. Mulligan,Kenneth A. Bamberger 서울대학교 공익산업법센터 2016 경제규제와 법 Vol.9 No.1

In July 2015, two researchers gained control of a Jeep Cherokee by hacking wirelessly into its dashboard connectivity system. The resulting recall of over 1.4 million Fiat Chrysler vehicles marked the first-ever security-related automobile recall. In its wake, other researchers demonstrated the capacity for remote takeovers of automobiles. By September, it became public that GM had initiated a quiet over-the-air (OTA) update program to fix security vulnerabilities in millions of their vehicles. These incidents reveal the critical security issues of modern automobiles, so-called “connected cars,” and other Internet of Things (IoT) devices, and underscore the importance of regulatory structures that incentivize greater attention to security during production, and the management of security vulnerabilities discovered after connected devices are in circulation. In particular, it highlights the importance of incentivizing the development of OTA update systems to support safety and security critical updates to patch vulnerabilities. OTA update systems are essential to IoT security and the health and safety of humans who rely upon it. Today’s connected cars can have more than a 100 million lines of software code, and this code base is growing. This code plays a significant role in compliance with regulatory obligations, and a crucial role in automotive safety and security systems. Embedded sensors and algorithms trigger and modulate airbag deployment, seatbelt engagement, anti-skid systems, and anti-lock breaks, identify the size, weight, and position of people to inform airbag and seatbelt behavior, and inform parking assistance systems, anti-skid and anti-lock break systems, among others. Software’s role in automotive safety is growing making the assumptions and calibrations of the code governing critical safety systems, as well as its security, increasingly important to saving lives. Addressing the vulnerabilities in automotive code — such as the ones exploited by the Jeep hackers — and specifically the capacity for remote exploits, are an essential element of the future of automotive safety and security. The design of OTA update systems implicates crucial issues of governance, and the balance of a variety of values - both public and private. Developing systems intended to ensure automotive safety and security involves both choosing among competing visions of security, and determining how to protect other values in the process. The articulation of cybersecurity goals, and the way they are balanced against other values, must occur in a public participatory process beforehand that includes relevant public and private stakeholders. This paper sets forth principles that should inform the agenda of regulatory agencies such as the National Highway Transportation (NHTSA) that play an essential role in ensuring that the IoT, and specifically the OTA update functionality it requires, responds to relevant cybersecurity and safety risks while attending to other public values. It explains the importance of OTA security and safety update functionality in the automotive industry, and barriers to its development. It explores challenges posed by the interaction between OTA update functionality, consumer protections — including repair rights and privacy — and competition. It proposes a set of principles to guide the regulatory approach to OTA updates, and automobile cybersecurity, in light of these challenges. The principles promote the development of cybersecurity expertise and shared cybersecurity objectives across relevant stakeholders, and ensure that respect for other values, such as competition and privacy is built into the design of OTA update technology. In conclusion, we suggest reforms to existing efforts to improve automotive cybersecurity.

혈청 농도가 다제내성 억제제 BIBW 22 의 nucleoside 수송에 미치는 영향

이동권(Dong Kwon Rhee),(Hong Xing Chen),(Uwe Bamberger),(Yung Chi Cheng) 한국응용약물학회 1995 Biomolecules & Therapeutics(구 응용약물학회지) Vol.3 No.2

Some multidrug resistance inhibitors have been known to be influenced by the serum concentration. In this study, effect of serum concentration on inhibition of nucleoside transport by BIBW22, a new multidrug resistance inhibitor derived from dipyridamole (DPM), was studied. When 5% or 100% (v/v) of fetal bovine serum (FBS) was contained in the culture, DPM dose for which nucleoside transport was inhibited by 50% (ID_(50)) was 0.42μM or 1.17μM, respectively. BIBW22 also showed the same trend as DPM did in response to increase of FBS concentration. However, ID_(50) value for DPM in the absence or presence of human plasma was 0.007μM or 1.02μM respectively showing 145times increase of ID_(50) value. ID_(50) value for BIBW22 in the presence of human plasma was 0.028μM showing only 5times increase in ID_(50) value. This result suggests that potency of BIBW22 was much less affected by the plasma concentration and BIBW22 could be a good candidate for a clinical use in multidrug resistance treatment.

Measurement of heavy-quark jet photoproduction at HERA

Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A. N.,Barbagli, G.,Bari, G. Springer-Verlag 2011 The European physical journal. C, Particles and fi Vol.71 No.5

Inclusive-jet photoproduction at HERA and determination of α_s

ZEUS Collaboration,Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A.N.,Bar North Holland 2012 Nuclear physics, B Vol.864 No.1

Inclusive-jet cross sections have been measured in the reaction ep->e+jet+X for photon virtuality Q<SUP>2</SUP><1 GeV<SUP>2</SUP> and γp centre-of-mass energies in the region 142<W<SUB>γ</SUB><SUB>p</SUB><293 GeV with the ZEUS detector at HERA using an integrated luminosity of 300 pb<SUP>-1</SUP>. Jets were identified using the k<SUB>T</SUB>, anti-k<SUB>T</SUB> or SIScone jet algorithms in the laboratory frame. Single-differential cross sections are presented as functions of the jet transverse energy, E<SUB>T</SUB><SUP>jet</SUP>, and pseudorapidity, η<SUP>jet</SUP>, for jets with E<SUB>T</SUB><SUP>jet</SUP>>17 GeV and -1<η<SUP>jet</SUP><2.5. In addition, measurements of double-differential inclusive-jet cross sections are presented as functions of E<SUB>T</SUB><SUP>jet</SUP> in different regions of η<SUP>jet</SUP>. Next-to-leading-order QCD calculations give a good description of the measurements, except for jets with low E<SUB>T</SUB><SUP>jet</SUP> and high η<SUP>jet</SUP>. The influence of non-perturbative effects not related to hadronisation was studied. Measurements of the ratios of cross sections using different jet algorithms are also presented; the measured ratios are well described by calculations including up to O(α<SUB>s</SUB><SUP>2</SUP>) terms. Values of α<SUB>s</SUB>(M<SUB>Z</SUB>) were extracted from the measurements and the energy-scale dependence of the coupling was determined. The value of α<SUB>s</SUB>(M<SUB>Z</SUB>) extracted from the measurements based on the k<SUB>T</SUB> jet algorithm is α<SUB>s</SUB>(M<SUB>Z</SUB>)=0.1206<SUB>-0.0022</SUB><SUP>+0.0023</SUP>(exp.)<SUB>-0.0035</SUB><SUP>+0.0042</SUP>(th.); the results from the anti-k<SUB>T</SUB> and SIScone algorithms are compatible with this value and have a similar precision.

Measurement of the t dependence in exclusive photoproduction of @?(1S) mesons at HERA

ZEUS Collaboration,Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A.N.,Bar North-Holland Pub. Co 2012 Physics letters: B Vol.708 No.1

The exclusive photoproduction reaction γp→@?(1S)p has been studied with the ZEUS detector in ep collisions at HERA using an integrated luminosity of 468 pb<SUP>-1</SUP>. The measurement covers the kinematic range 60<W<220 GeV and Q<SUP>2</SUP><1 GeV<SUP>2</SUP>, where W is the photon-proton centre-of-mass energy and Q<SUP>2</SUP> is the photon virtuality. The exponential slope, b, of the t dependence of the cross section, where t is the squared four-momentum transfer at the proton vertex, has been measured, yielding b=4.3<SUB>-1.3</SUB><SUP>+2.0</SUP>(stat.)<SUB>-0.6</SUB><SUP>+0.5</SUP>(syst.) GeV<SUP>-2</SUP>. This constitutes the first measurement of the t dependence of the γp→@?(1S)p cross section.

Exclusive electroproduction of two pions at HERA

Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Ashery, D.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A. N.,Barbagli, Springer-Verlag 2012 The European physical journal. C, Particles and fi Vol.72 No.1

Scaled momentum distributions for $ K_S^0 $ KS and $ \Lambda /\bar{\Lambda } $ in DIS at HERA

Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A. N.,Barbagli, G.,Bari, G. Springer-Verlag 2012 Journal of high energy physics Vol.2012 No.3

Measurement of inelastic J/ψ and ψ′ photoproduction at HERA

Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Arslan, O.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A. N.,Barbagli, Springer-Verlag 2013 Journal of high energy physics Vol.2013 No.2

Measurement of the energy dependence of the total photon-proton cross section at HERA

ZEUS Collaboration,Abramowicz, H.,Abt, I.,Adamczyk, L.,Adamus, M.,Aggarwal, R.,Antonelli, S.,Antonioli, P.,Antonov, A.,Arneodo, M.,Aushev, V.,Aushev, Y.,Bachynska, O.,Bamberger, A.,Barakbaev, A.N.,Bar North-Holland Pub. Co 2011 Physics letters: B Vol.697 No.3

The energy dependence of the photon-proton total cross section, σ<SUB>tot</SUB><SUP>γ</SUP><SUP>p</SUP>, was determined from e<SUP>+</SUP>p scattering data collected with the ZEUS detector at HERA at three values of the center-of-mass energy, W, of the γp system in the range 194<W<296 GeV. This is the first determination of the W dependence of σ<SUB>tot</SUB><SUP>γ</SUP><SUP>p</SUP> from a single experiment at high W. Parameterizing σ<SUB>tot</SUB><SUP>γ</SUP><SUP>p</SUP>≃W<SUP>2ε</SUP>, ε=0.111+/-0.009(stat.)+/-0.036(syst.) was obtained.