Earticle

The advancement of ICT (Information and Communication Technology) is driving the development of various industrial technologies, as well as services in communication, transportation, logistics, and aviation. Urban Air Mobility (UAM) is expected not only to alleviate traffic congestion caused by ground traffic but also to provide rapid air cargo and passenger transportation services. Unlike general aviation services, Urban Air Mobility is intended for low-altitude flight operations. To provide seamless communication and reduce the impact of shadow areas, UAM can utilize existing commercial mobile communication base stations, leveraging the mobile communication network to achieve cost-effective infrastructure deployment. However, UAM is exposed to potential threats such as flight interference, obstruction from the ground, cyber threats including exposure, interception, and falsification of aviation information. The current UAM operating system's components (aircraft, pilots, control systems, vertiports, etc.) are vulnerable to unauthorized or illicit use, revealing weaknesses in the safe operation of urban air mobility systems. The operation of UAM using unauthorized objects poses potential threats like flight interference, obstruction, interception, falsification, and hijacking of aviation-related information (CSNi) from the ground. The reality is that the lack of mutual authentication among the components of the current UAM operating system—aircraft, control systems (ATC), vertiports, and their respective operators—exposes vulnerabilities to unauthorized use and security breaches. Therefore, this paper proposes an authentication structure capable of responding to potential cyber threats by enhancing the authenticity and security of the system through mutual authentication based on Public Key Infrastructure (PKI). This approach aims to prevent unauthorized use and control access to objects, thereby increasing resilience against replay attacks and other security threats.

The development of Information and Communication Technology (ICT) is converging with the aviation industry, evolving into various aviation services. The aviation industry now provides new forms of aviation services through the integration of advanced ICT technology. Consequently, it faces new cyber threats in the aviation sector, raising concerns about cybersecurity threats in the aviation industry. Typically, cyber threats have mainly targeted unauthorized access and administrator password theft for ground-based airline IT infrastructure and systems, malicious leaks, and theft of user information from airline users. Additionally, service denial attacks (DoS) that impair availability or disrupt system operations, and attacks that compromise the integrity of transmitted data, were common types of attacks. However, as in-flight network technology and services change, providing limited wireless network services, integrating and interconnecting in-flight systems based on TCP/IP, potential cybersecurity threats and vulnerabilities are exposed. In other words, as wireless network services are easily accessible within the aircraft, with passengers having easy access to the provided wireless networks, potential cyber threats to aircraft systems are increasing. This study is based on verified vulnerabilities observed in actual aircraft. It aims to analyze potential cyber threats that could occur in-flight, intentionally or unintentionally compromising the resilience of in-flight systems and causing service denial attacks.

융합망에 사용되는 D-MAC 프로토콜은 사물간 무선링크를 연결하기 위해 설계된 프로토콜이다. 이 프로토 콜은 이웃 노드 가운데 로컬 데이터 교환과 수집을 위해 제공되고, 싱크로부터 센서 노드로 제어패킷과 관심 패킷이 분배된다. 본 논문에서는 융합망의 D-MAC 보안 인증 적용 여부에 따른 전력소모 효율성에 대해 분석하였다. 인증 기법이 MAC 통신에 적용될 경우, 인증처리 유무에 따라 프리앰블의 에너지 소비 여부가 연관이 된다. 인증이 적용 될 경우 서비스 공격에 대응하여 에너지 소비가 감소된다. 향후 보안 인증기법에 관련한 연구를 수행할 계획이다.

D-MAC protocol is used convergence network, which is designed to connect wireless link between things. This protocol is supported to local data exchange and aggregation among neighbor nodes, and distributed control packet from sink to sensor node. In this paper, we analysis about efficiency of power consumption according to whether or not security authentication of D-MAC in convergence network. If authentication scheme is applied to MAC communication, it is related to power consumption of preamble whether or not with and without authentication process. It is reduced to energy consumption against denial attack of service, when it is applied to authentication. Future work will take the effort to deal with security authentication scheme.

B-MAC 프로토콜은 WSN을 위해 설계된 적용적인 프리엠블 샘플링 기법을 사용하는 잘 알려진 MAC 프로 토콜이다. 이 논문에서 우리는 B-MAC 보안 취약성에 관해 살펴보았으며, 슬립 거부 공격의 취약성과 재연공격 문제 에 따른 B-MAC 프로토콜의 각 단계에 소비되는 전력을 분석하였다. 연구결과로부터 일반적인 B-MAC 통신을 위한 신뢰성, 효율성, 보안을 제공하는 전력에 효율적인 인증 기법의 필요성에 대해 고찰하였다. 이 연구는 B-MAC에서 전력소비와 가능한 서비스 거부 공격 취약점에 대한 사례연구이다.

Berkley Media Access Control (B-MAC) protocol is one of the well-known MAC protocols, which uses adaptive preamble sampling scheme and is designed for wireless sensor networks (WSN). In this paper, we are reviewed about security vulnerability in B-MAC, and analyzed the power which is consumed at each stage of B-MAC protocol according to vulnerability of denial of sleep(DoS) and replay problem. From our analytical results, it can be considered the need of power efficient authentication scheme which provides the reliability, efficiency, and security for a general B-MAC communication. This is the case study of possible DoS vulnerability and its power consumption in B-MAC

MANET에서 효율적인 데이터 전송을 위해서는 기존의 유선 네트워크에서 사용하는 라우팅 프로토콜을 그대로 사용할 수 없다. 왜냐하면 이동 노드로만 구성되어 있어 네트워크 토폴로지가 동적으로 변화하기 때문이다. 따라서 각 이동 노드들이 라우터 기능을 수행해야만 한다. 이러한 특성 때문에 MANET에는 DoS와 같은 다양한 라우팅 공격이 존재하고 있다. 본 논문에서는 자원을 소모시켜 네트워크를 마비시키는 플러딩 공격 탐지 성능을 향상시키기 위한 협력기반 탐지 기법을 제안하였다. 전체 네트워크의 트래픽 양과 노드의 수를 고려하여 기준값을 적응적으로 계산함에 따라정확한 공격 탐지가 이루어지도록 하였다. 그리고 모든 이동 노드가 협력적 탐지를 수행하기 위하여 NHT라는 테이블을 이용하였으며, 트래픽의 중앙 감시를 위하여 클러스터 구조를 적용하였다.

Routing protocol using in the existing wire network cannot be used as it is for efficient data transmission in MANET. Because it consists of only mobile nodes, network topology is changing dynamically. Therefore, each mobile node must perform router functions. Variety of routing attack like DoS in MANET is present owing to these characteristic. In this paper, we proposed cooperative-based detection method to improve detection performance of flooding attack which paralyzes network by consuming resource. Accurate attack detection is done as per calculated adaptively threshold value considered the amount of all network traffic and the number of nodes. All the mobile nodes used a table called NHT to perform collaborative detection and apply cluster structure to the center surveillance of traffic.

최근 스마트폰 사용자의 급증, 다양한 모바일 서비스 증가에 따라 3G WCDMA망과 같은 이동통신망이 폐쇄적 서비스 구조에서 개방형 서비스 구조로 변경되었다. 누구나 이동통신망에 접근할 수 있는 개방형 구조에서 각 이동통신사는 다양한 보안 장비를 도입하여 공격/비정상 트래픽 으로부터 자사의 모바일 망을 보호하고 있다. 그러나, 이러한 보안 장비를 우회하여 서비스 거부, 무선자원 고갈, 비정상 과금 유발 등 이동통신망의 장애를 유발할 수 있는 다양한 공격/비정상 트래픽이 외부 인터넷으로부터 유입되고 있다. 본 논문에서는 외부 인터넷으로부터 유입되는 비정상 트래픽으로 인한 3G 모바일 망의 보안 위협에 대해 설명하고, 그 예를 제시한다.

최근 스마트폰 사용자의 급증, 다양한 모바일 서비스 증가에 따라 3G WCDMA망과 같은 이동통신망이 폐쇄적 서비스 구조에서 개방형 서비스 구조로 변경되었다. 누구나 이동통신망에 접근할 수 있는 개방형 구조에서는 DoS 공격 트래픽 등 이동통신망의 장애를 유발할 수 있는 다양한 공격/비정상 트래픽이 유입되고 될 수 있다. 그러나, 기존의 IP기반 트래픽 분석 및 탐지 기법은 GTP(GPRS Tunneling Protocol) 등 3G 모바일 망에 특화된 프로토콜을 사용하는 이동통신망에 적용하기 어려운 실정이다. 본 논문에서는 국내 상용 서비스 3G 모바일 망에 존재하는 다양한 보안 위협에 대해 설명하고, 이를 탐지하고 차단하기 위한 대응 프레임워크를 제안하다.

본 연구는 건강음식집착증의 선별 도구인 뒤셀도르프 건강음식집착척도(DOS)를 국내 실정에 맞게 타당화하기 위해 시행되었다. 원저자의 동의를 얻어 한국어로 번안한 DOS를 만성질환이나 특정 음식 알레르기로 식단조절을 하고 있지 않은 20-40대 성인 535명에게 실시하고 탐색적 요인분석(n=300)과 확인적 요인분석(n=235)을 실시하였다. 그 결과 ‘건강음식 섭취로 인한 일상의 문제’와 ‘건강음식 섭취에 대한 관심’이 하위요인으로 도출되었고, 2요인 모델에 대한 적합도가 양호하였다. 또한 유사 개념을 측정하는 척도인 역기능적 섭식태도 검사(EAT-26), 강박증상 질문 척도(OCI-R), 질병태도 척도(IAS)와의 상관분석을 통해 수렴 및 변별 타당도를 검증하였다. K-DOS의 전체 문항 내적일치도 및 하위척도의 내적일치도, 반분신뢰도 지수가 양호하여 신뢰도가 확보되었다. 마지막으로 본 연구의 의의와 한계점을 알아보고 추후 연구를 제안하였다.

In this study, the Dusseldorf Orthorexia Scale(DOS), a tool for screening orthorexia nervosa, was validated according to the domestic situation. A questionnaire was administered to 535 adults who were in their 20s and 40s and were not currently dieting due to chronic diseases or specific food allergies. The scale was translated into Korean with the consent of the author, and then, an exploratory factor analysis (n=300) and a confirmatory factor analysis (n=235) were performed to examine the factor structure and model fit. As a result of the factor analysis, two sub-factors of ‘daily life problems caused by healthy nutrition preoccupation’ and ‘concern of healthy nutrition' were derived, and the fit of the two-factor model was good. In addition, convergence and discriminatory validity were verified through correlation analysis using the dysfunctional Eating Attitude Test(EAT-26), the Obsessive Compulsive Inventory(OCI-R), and the illness attitude test(IAS), which are measures that assess the related construct. Reliability was ensured as the internal consistency of all items in K-DOS and the internal consistency of subscales as well as split-half reliability were good. Finally, the significance and limitations of this study were investigated, and further studies were suggested.

Denial of Service attacks (DoS) are considered to be a major threat against today’s communication networks. Recently, a novel networking paradigm that provides enhanced programming abilities has been proposed to attain an efficient control and management in future networks. In this work, we take the advantage of software-defined networking (SDN) to minimize the false positive rate of DoS attack detection systems. Our system combines flow-based and packet-based approaches to minimize the false positive rate (FPR). The experimental results conducted on NSL-KDD dataset have shown the effectiveness of our proposed approach, which successfully minimized the FPR as low as 0.3%.

The popularity of the Internet introduces many network-enabled services that can be accessed by the user. But the adversaries are trying to deny these critical services to the user through Denial of Service (DoS) attacks. Presently, dealing with DoS attack which targets the application layer using slow traffic rate is one of the key challenges faced by the service providers. In this paper, a deep classification model using flow data is proposed to detect slow DoS attack on HTTP. The classifier is evaluated using CICIDS2017 dataset. The results obtained show that the classifier can obtain 99.61% accuracy.

Feature selection or reduction is a significant process for intrusion detection system (IDS) in finding optimal features. Irrelevant features present in the dataset increase load on computing resources and affect the performance of the system. The present study proposes a feature reduction method based on the combination of filter-based feature reduction algorithms, namely Information Gain Ratio (IGR), Correlation (CR), and ReliefF (ReF). The system initially obtains feature subsets for each classifier based on average weight and further Subset Combination Strategy (SCS) is applied. The proposed feature reduction method results in 24 reduced features for CICIDS 2017 DoS dataset. The proposed method shows an improved performance compared to the current state-of-the-art systems on CICIDS 2017 dataset. The proposed method has also been tested and compared with the current state-of-the-art systems on KDD Cup 99 dataset.

Recently, LoRa protocol has attracted attention in LPWA(Low Power Wide-Area) technology area. Also the DoS attack is increasing on the RPL network. Therefore the goal of this paper is a study of a DoS attack scenario on LoRaWAN. Through this study, it is expected to be helpful to have an effective response.

The RFID system is very useful in various fields such as the distribution industry and the management of the material, etc. However, the RFID system suffers from various attacks since it does not have a complete authentication protocol. Therefore, this paper propose the authentication protocol that used key server to resist various attacks including DoS(Denial of Service) attack. For easy implementation, the proposed protocol also uses CRC, RN16 generation function existing in EPCglobal class 1 gen2 protocol. This paper performed security analysis to prove that the proposed protocol is resistant to various attacks. The analytical results showed that the proposed protocol offered a secure RFID system.

This study investigated the influence of alloying elements on the elastic modulus variation of titanium alloys and conducted theoretical density calculations, yielding the following conclusions. In Ti-M (M=Zr, Ag, Au, and Cu) alloys, the Md value ranges from 2.89325 to 11.1530, and the Bo value ranges from 2.30180 to 3.22978. Ti-Zr alloys are most suitable as optimal dental implant materials in terms of electronic structural stability and strength. Ti–Au and Ti–Ag primarily contribute to biocompatibility, corrosion resistance, and antibacterial performance, while offering less benefit for mechanical strengthening. Ti-Cu, while having low structural stability, exhibits excellent antibacterial functionality and is therefore worthy of consideration as a supplementary alloying element. The physical properties of ‑titanium–based Ti–M binary alloys have been examined, and future research will focus on extending the study to ternary and quaternary titanium alloy systems.

본 논문은 오픈소스 기반의 5G 가상 환경을 구축하고, 인증 절차에서 발생할 수 있는 재전송 기반 DoS 공격의 가능성을 분석하였다. 실험은 구성된 DoS 공격 시나리오를 UERANSIM과 Open5GS를 활용하여 재연하였다. AMF 및 UDM의 자원 소모와 인증 지연 시간을 측정하였다. 실험 결과, 다수의 인증 요청은 시스템 부하와 UE 인증 시간을 지연시켰으며, SUCI 보호 방식에 따라 연산 자원 소모에 차이가 있음을 확인하였다. 이를 통해 5G 환경에서도 DoS 공격이 실현 가능함을 검증하였다.

Low-Rate Denial of Service (LDoS) attacks raise an increasingly frequent and significant threat to performancecritical and sensitive networks. Due to their slowly evolving nature, it is challenging –but crucial– to detect such attacks during their early phases in order to mitigate their impact on network performance, e.g. Quality of Service (QoS), in longterm operation. To this end, this paper investigates the prediction of QoS via a modified version of the Recurrent Trend Predictive Neural Network (rTPNN) and the use of the prediction towards detracting LDoS attacks. The presented rTPNN-based QoS predictor is evaluated and compared against benchmark models for five scenarios using an open-access dataset. The results have shown that the modified rTPNN model can predict QoS with under 2% SMAPE, and the QoS prediction is a promising approach for developing LDoS attack detectors in future works.

한국에서는 시범운영을 거쳐 2021년 7월 1일부터 자치경찰제도가 본격적으로 시행 되었고 한국형 자치경찰제도의 핵심에는 시·도자치경찰위원회가 있는 것으로 평가된 다. 자치경찰위원회는 합의제 행정기관으로 시·도지사 소속으로 설치되며 자치경찰사 무에 대해 시·도경찰청장을 지휘·감독하게 되었다. 자치경찰제도의 성패를 좌우할 시· 도자치경찰위원회의 중요성을 고려할 때, 이들의 구성과 운영에 대한 객관적 분석은 매 우 절실하다. 이를 위해 18개 시·도자치경찰위원회 위원 126명에 대한 기초자료와 시· 도 조례 등을 수집해 분석해 보았다. 주요 연구결과는 다음과 같다. 먼저, 시·도자치경 찰위원회 위원들은 남성, 그리고 50대·60대 연령 중심으로 구성되어 있었다. 남성 위원 이 101명(80.16%)이었고, 50·60대 이상 위원은 112명(88.89%)으로 나타났다. 다음으로, 시·도자치경찰위원회 위원은 교수(30.95%), 법조인(24.60%), 경찰(23.31%) 자격을 중 심으로 구성되어 있었고 이들이 차지하는 비중은 약 80%에 이르렀다. 다음으로, 성별 과 연령, 그리고 자격에 있어서의 편향성은 위원들의 지위에서 더욱 두드러졌다. 위원 장과 상임위원의 경우 여성과 40대는 전무한 것으로, 상임위원의 경우 경찰 자격 보유 자가 82%로 나타났다. 다음으로, 시·도자치경찰위원회 구성에 참여하는 다양한 추천 (지명)기관들은 남성, 50·60대, 전문가를 중심으로 스스로의 이해관계를 반영한 추천(지명)을 하였고 이로 인해 위원 구성의 다양성에 크게 기여하지 못한 것으로 나타났 다. 마지막으로, 시·도자치경찰위원회 회의는 정기회의의 정례화 수준이 저조했고, 회 의 내용의 공정성과 중립성을 담보하기 위한 제도적 조치 수준도 취약한 것으로 나타 났다. 이러한 연구결과를 바탕으로 시·도자치경찰위원회의 성공적 운영을 위한 주요 전 략들에 대해 살펴보았다.

In Korea, after a pilot operation, the autonomous police system was implemented on July 1, 2021. It is evaluated that Cities/Dos Autonomous Police Authorities(C/D APAs) are at the core of the Korean-style autonomous police system. The Autonomous Police Authority was established under the authority of the City/Do governor as as administrative agency under a consensus system, and was to direct and supervise the head of the Metropolitan Police Agency for autonomous police affairs. Considering the importance of C/D APAs in determining the success and failure of the autonomous police system, an objective analysis of their composition and operation in very urgent. To this end, basic demographic data and city/do ordinances were collected and analyzed for 126 members of 18 C/D APAs. The main research results are as follows. First, the members of the C/D APAs were composed mainly of men and those in their 50s and 60s. 101 members(80.16%) were male, and 112 members(88.89%) were members in their 50s and 60s. Second, the members consisted of professors(30.95%), lawyers(24.60%), and police officers(23.31%), and their proportion reached about 80%. Third, the concentration in gender, age, and qualifications was more pronounced in the position of the members. In the case of the chairperson and standing members, there were no women or 40s, and 82% of standing members had police qualifications. Forth, various recommendation(nomination) organizations participating in the composition of the C/D APAs made recommendations(nominations) reflecting their interests, centered on men, 50 and 60, and experts, and this did not significantly contribute to the diversity of authority members. Finally, it was found that the level of regularization of the regular meetings was low for the C/D APA meetings, and the level of institutional measures to ensure fairness and neutrality of the meeting contents was also found to be weak. Based on these research results, some strategies for the successful operation of C/D APAs were reviewed.

이 논문은 선어말어미 ‘-돗-’에 대한 기존의 연구 성과 및 아직 해결되지 않은 쟁점들을 정리하는 것을 목적으로 한다. 2장에서는 선어말어미 ‘-돗-’의 의미 기능 및 형태에 대한 기존의 연구사를 정리하였다. 선어말어미 ‘-돗-’의 의미 기능에 대해서는 대체로 ‘강조’와 ‘감동’ 또는 ‘감탄’을 표시한다는 데에 의견을 같이하고 있는데, 다만 ‘강조’와 ‘감동, 감탄’의 본질이나 차이를 좀 더 상세히 밝히는 것이 남은 과제이다. 선어말어미 ‘-돗-’의 이형태는 ‘-돗/롯-’, ‘-도/로-’, ‘-옷-’, ‘-ㅅ-’으로 정리되고 있으나, ‘-돗/롯-’, ‘-옷-’에서 ‘ㅅ’을 분리하는 문제 등이 여전히 논란이 되고 있다. 3장에서는 ‘ㅅ’의 분리 가능성에 대하여 전기 중세국어 시기까지는 ‘ㅅ’이 독자적인 선어말어미였을 개연성이 있지만 최소한 15세기 이후로는 ‘-돗/롯-, -옷-’에서 ‘ㅅ’을 분리하기 어렵다는 점을 보였다. 또한 3장에서는 ‘-노소-, -도소-’를 별도의 선어말어미로 인정하는 문제, 1인칭 문장에서 ‘-리로-’와 선어말어미 ‘-오-’의 결합이 제약을 보이는 문제, 선어말어미 ‘-돗-’의 이형태들이 수의적으로 교체하는 듯 보이는 ‘공존형’의 문제를 다루었다.

The aim of this paper is to summarize the research results and issues about the pre-final ending ‘-dos-’. In chapter 2, I show the research results on the meaning and the allomorphs of the pre-final ending ‘-dos-’. Generally it is agreed that the pre-final ending ‘-dos-’ represents ‘emphasis’, ‘impression’ and ‘exclamation’, even though we still have the problem that the semantic differences among ‘emphasis’, ‘impression’ and ‘exclamation’ should be explained more clearly. As for the allomorphs of the pre-final ending ‘-dos-’, it is common that ‘-dos/ros-’, ‘-do/ro-’, ‘-os-’ and ‘-s-’ show complementary distribution. However the issue is that the ‘s’ of ‘-dos/ros-’ and ‘-os-’ can be isolated or not. In chapter 3, I show that the ‘s’ ‘-dos/ros-’ and ‘-os-’ could not be isolated in late medieval Korean even though it might have been an independent morpheme until early medieval Korean, and ‘-noso-’ and ‘-doso-’ could not be identified as the allomorphs of ‘-dos-’. Also I address the combination restriction of ‘-riro-’ and the pre-final ending ‘-o-’ which represents the subject is the first person, that is the speaker, and the issue of coexistent forms, which the allomorphs of ‘-dos-’ show optional alternation instead of complementary distribution.