Earticle

소프트웨어 공급망은 복잡한 의존성 구조로 인해 단일 취약점이 광범위한 피해로 확산될 수 있으며, 2024년 XZ Utils 사건은 이러한 위험성을 극명하게 보여준 사례다. 특히 LLM(Large Language Model)의 환각 현상은 존재하지 않는 패키지를 제안해 악성 패키지 설치로 이어질 수 있는 새로운 형태의 공급망 위협으로 부상하고 있다. 본 연구는 이러한 문제를 해결하기 위해 PyPI 조회와 캐시를 결합한 환각 패키지 검증 프레임워크(Package Hallucination Verification, PHV)를 제안한다. 제안 기법은 wheel 파일 분석을 통해 하위 패키지까지 탐지 범위를 확장하였으며, One-Shot 프롬프트 엔지니어링을 적용하여 90% 이상의 검증 정확도를 달성하고, 캐시를 활용하여 API 호출량을 94% 절감하였다. 또한 SBOM(Software Bill of Materials)을 자동 생성해 검증 과정의 재현성과 추적 가능성을 보장하였다. 실험 결과, PHV는 종래 연구 대비 정확도 측면에서 25%의 개선된 성능을 보였으며, AI 시대의 공급망 보안을 강화하는 데 효과적 대안임을 입증한다.

The software supply chain's complex dependency structure enables a single vulnerability to escalate into large-scale damage, as clearly demonstrated by the 2024 XZ Utils incident. In particular, hallucinations generated by Large Language Models (LLMs) have emerged as a new class of supply chain threats, as they may suggest non-existent packages that lead to the inadvertent installation of malicious artifacts. To mitigate this risk, this study proposes a Package Hallucination Verification (PHV) framework that integrates PyPI querying with a cache-based validation mechanism. The proposed approach expands detection coverage to sub-packages through wheel file analysis, achieves over 90% verification accuracy via One-Shot prompt engineering, and reduces API invocation overhead by 94% through effective caching. Furthermore, the framework enhances reproducibility by automatically generating a Software Bill of Materials (SBOM) for each verification process. Experimental results show that PHV has improved performance by 25% in terms of accuracy compared to conventional studies, demonstrating it as an effective alternative to strengthening supply chain security in the AI-driven development landscape.

In this paper, the QFD(quality function deployment) technique is used to acquire the quality requirements of package software which is sold in a commercial software shop. To select the principal quality characteristics of package software, an user survey was conducted for a quality model developed based on the international standards and the previous research. The software user is divided into three groups：the general user, the expert, and the developer. The method of QFD is applied to choose the software quality attributes which have strong correlation with the selected quality characteristics.

The certification of software products can provide a greater level of acceptance and feeling of security to customers of these products. This paper presents a certification method for the quality of package software. First of all, the evaluation criteria are derived from ISO/IEC 9126 and 12119 standards, and then the evaluation module are designed considering the measurement scale type. The results can be applied to construct the certification scheme of software product quality for the commercial purpose.

The certification of software products can provide a greater level of acceptance and feeling of security to customers of these products. This paper presents a certification method for the quality of package software. First of all, the evaluation criteria are derived from IS0/1EC 9126 and 12119 standards, and then the evaluation module are designed considering the measurement scale type. The results can be applied to construct the certification scheme of software product quality for the commercial purpose.

Software business is kind of high value-added industry. Especially resource-poor countries, like Korea, IT business is the backbone of the Blue Ocean industries. Korea is an IT powerhouse but unfortunately, software filed very weak of global competitive power. So this paper using Kano Model and QFD for analyze customer feedback and technical balance for software develop company. The Kano Model of customer satisfaction classifies product attributes based on how they are perceived by customers and their effect on customer satisfaction. These classifications are useful for guiding design decisions in that they indicate when good is good enough, and when more is better. This research shows how to using Kano model and QFD and how to propose an advise effective method for the develop company. Small venture companies required make user friendly design and reflect customer's needs when create their commercial software. Also Kano Model and QFD proposed how to classified technical characteristics into Kano's elements and how to use the classified results in new software creating process. A lot of small venture company have various valuable skill for programming filed, but they have weak point about skill for customer-side strategies. Therefore, throughout this study for the reorganization of these software market for domestic company to offer a variety of market analysis and strategy.

Drawing upon Kano’s three factor model of customer satisfaction, this research investigates the differentiated influences of beliefs on negative and positive attitudes that lead to the intention of using the upgraded version of package software. Particularly, we are interested in MS-Office that takes up the status of de facto standard in the office automation software market but has rarely attracted the attention of academia. Our focus is on how users come to move to the new upgraded version of the package software that they are almost accustomed to use through previous versions. We find that result demonstrability enhance all the three beliefs (i.e., basic, performance, and excitement factors), meanwhile trialability and social influence demonstrate the mixed-up impacts on these three beliefs. We also found that all these three factors lead to both the negative and positive attitudes unexpectedly from our hypotheses. Meanwhile, we found that positive aspect route starting from compatibility to relative advantage to positive attitude has dominant influence on use intention than the negative aspect does.

Deep geological repositories for high-level radioactive waste require comprehensive long-term safety assessments involving numerical simulations of safety-relevant processes. Managing uncertainty across all parts of such a simulation framework is challenging, as general-purpose uncertainty management toolboxes typically lack either the variety of methods or the integration capabilities to simultaneously accommodate all components of the long-term safety assessment framework. Under these circumstances, developing bespoke uncertainty-management software based on up-to-date methods and well-maintained libraries but tailored specifically for the task at hand becomes more efficient than creating various plugins and converters for general-purpose tools. This paper discusses the experience of developing the MOUSE software package to illustrate this path from a model-independent software to the uncertainty-management instrument tailored for the purposes of the numerical safety assessment framework.

The need for a PSA (Probabilistic Safety Assessment) for a multi-unit at a site is growing after the Fukushima accident. Many countries have been studying issues regarding a multi-unit PSA. One of these issues is the problem of many combinations of accident sequences in a multi-unit PSA. This paper deals with the methodology and software to quantify a PSA scenarios for a multi-unit site. Two approaches are developed to quantify a multi-unit PSA. One is to use a minimal cut set approach, and the other is to use a Monte Carlo approach.

패키지 소프트웨어는 그 특성상 동일한 유형에 속하는 다수의 제품 중에서 구매자가 적합하다고 판단되는 제품을 식별한 수 있어야 한다. 패키지 소프트웨어 제품에 대한 구매자의 선택 능력은 객관적인 품질 시험 절차와 방법을 통해 정해진 기준에 부합되는가를 판단할 수 있는 체계를 갖추고 있는가에 달려 있다. 이러한 체계를 구축하기 위해 패키지 소프트웨어에 적용할 수 있는 표준으로서 <ISO/IEC 14598-4 : 구매자를 위한 품질평가 프로세스>와 <ISO/IEC 12119 정보기술-소프트웨어 패키지-품진 요구사항 및 시험>이 있다. 본 연구에서는 이러한 표준을 기반으로 패키지 소프트웨어에 대한 품질시험 프로세스를 구축하고 시험 메트릭과 적용 방법을 개발함으로써 구매자가 효과적으로 자신의 요구에 맞는 패키지 소프트웨어론 선택할 수 있는 체계를 구축하였다.

Package software should have the feature that enables purchasers to discriminate a product suitable for them among a number of software belonging to the similar kind of product. Purchaser's ability to choose a package software depends on whether they can judge that a package software conforms to the relevant standard through an objective quality test process and method or not. There are the standards that can be applicable to the quality evaluation of package software, such as <ISO/IEC 14598-4 : Qualify Evaluation Process for Acquirers> and <ISO/IEC 12119 : Information Technology-software package-Qualify Requirements & Test>. This study developed a system with which purchasers can effectively select a package software suitable for their needs, building quality test process for package software and developing test metric and application method.

Microarray technology is an interdisciplinary technique that promises a revolutionary progress toward better health and improved quality of life. The paper focuses on the development of an efficient software package, equipped with already well-known methods; also some new methods are proposed that will allow the processing and analysis of thousands of genes on microarray images. The microarray analysis software package (called SmartArray), newly proposed in this paper verifies, through microarray analysis, dramatic changes in the mRNA, protein, and activity level in the rat retina during light deprivation, which have been demonstrated in previous biological experiments. The analysis results demonstrate that SmartArray can successfully find many changes in gene expression levels in each subarray and classify them according to their significance.

The main objectives of this paper are as follows: 1) identifying th procedural characteristics of application software package acquisition and, 2) analyzing the relationship between those characteristics and MIS performance. Three stages and thirty core tasks of the application software package acquisition process were identified after reviewing relevant literature. The model specifying the relationship between procedural characteristics of application software package acquisition and MIS performance was established and 12 hypotheses were derived. Data were collected form 41 Korean companies and hypotheses were tested empirically.

영세한 국내 소프트웨어 개발 업체들의 인지도 향상과 소프트웨어 산업의 자발적인 품질 개선 노력 유도를 위해 소프트웨어 품질 인증 사업이 2001년 1월부로 가동되었다. 소프트웨어 품질 인증을 위해서는 소프트웨어 품질을 시험.평가하기 위한 여러 기술들이 필요하다. 본 논문에서는 다양한 소프트웨어 품질 시험.평가 기술들 중 시험.평가 방법 측면에서 현재까지 연구되어 적용되고 있는 현황을 중심으로 기술하고자 한다.

다양한 산업 공정에서 배관은 각 단위공정 사이의 연결 매개체의 역할을 하며, 내부의 유동에 있어 필수적인 장치이다. 따라서 배관의 최적설계는 안전과 비용의 측면에서 매우 중요한 문제이며, 설계 시 필수적인 사항은 배관 내 압력강하 및 유속, 배관 지름 등을 결정하는 일이다. 본 연구에서는 배관 지름 및 유속이 정해졌을 때 발생하는 압력강하, 배관의 압력강하 및 유속이 정해졌을 때의 배관 지름, 배관 지름 및 압력강하가 정해졌을 때의 유속을 결정하는 소프트웨어를 개발하였다. 배관 내 유동을 단일 상 흐름, 균질 2 상 유동, 분리 2 상 유동으로 구분하였으며 이에 따라 적절한 계산 모델을 적용하였다. 파이프의 재질 및 상대 거칠기, 유체의 물성치, 마찰계수의 계산을 위한 시스템 라이브러리를 구축하여 사용자의 입력을 최소화하였다. 배관 재질에 따른 가격 라이브러리를 구축하여 단위 길이당 배관 투자 비용의 산출을 가능하도록 구성하였다. 이러한 모든 기능은 사용자 편의를 위한 그래픽 사용자 인터페이스를 이용한 통합 환경에서 구현할 수 있으며, C# 언어를 개발 언어로 사용하였다. 소프트웨어의 정확도를 문헌 자료와 실 수행 과제의 예제를 통하여 검증하였으며 단일 상의 경우 1% 미만, 2 상의 경우 최고 8.8% 정도의 차이를 보였으며, 이에 따라 개발된 소프트웨어가 실제 공정의 계산에 유용하게 쓰일 수 있음을 알 수 있었다.

In various industrial processes, piping serves as a link between unit processes and is an essential installation for internal flow. Therefore, the optimum design of the piping system is very important in terms of safety and cost, which requires the estimation of the pressure drop, flow rate, pipe size, etc. in the piping system. In this study, we developed a software that determines pressure drop, flow rate, and pipe size when any two of these design variables are known. We categorized the flows into single phase, homogeneous two phase, and separated two phase flows, and applied suitable calculation models accordingly. We also constructed a system library for the calculation of the pipe material, relative roughness, fluid property, and friction coefficients to minimize user input. We further created a costing library according to the piping material for the calculation of the investment cost of the pipe per unit length. We implemented all these functions in an integrated environment using a graphical user interface for user convenience, and C # programming language. Finally, we verified the accuracy of the software using literature data and examples from an industrial process with obtained deviations of 1% and 8.8% for the single phase and two-phase models.

We have developed a software package for the analysis of electric field distribution in human body. It includes the graphical finite element mesh generator, linear system of equations solver using sparse matrix and vector technique, and post-processor for the display of the results. This software package can be used in various research areas of biomedical engineering where we inject current or apply voltage to human body. The software package was developed on Macintosh II computer and the size of the model is only limited by the main memory.

The IMAPRO sotfware package was mainly focused to provide an algorithm which is capable of displaying various color composite images on IBM PC, VGA(Video Graphic Array) card with no special hardware. It displays the false color images using a low-cost eight-bit place refresh buffer. This produces similar quality to the one obtained from image board with three eight-bit plane. Also, it provides user friendly menu driven method for the user who are not familier with technical knowladge of image processing. It may prove useful for universities, institute and private company where expensive hardware is not available.

A software package CARDS for general purpose robot design, control, and simulation has been developed and is presented here. CARDS (Computer Aided Robot Design and Simulation) consists of a collection of standardized subroutine modules that carry out typical kineamatic, dynamic, and control computations so that the user only needs to write a main program that further defines a particular robot configuration and the task to be performed. It provides users a complete simulation environment, so that it will be a valuable engineering tool for mechanical designers as well as electric control designers.

The simulation algorithm for all kinds of robots with arbitrary degrees of freedom which are combined with revolute joints or prismatic joints, or combinations was studied and implemented. This simulation package is composed of trajectory planning routine, control routine, kinematics routine using Newton-Raphson method, dynamics based on Newton-Euler method with four-bar linkage analysis, input routine and output routine.

패키지 소프트웨어의 품질시험을 통해 패키지 소프트웨어 구매자들의 요구에 부합되는 소프트웨어를 선택할 수 있도록 지원할 수 있다. 지금까지 일반적인 SI 소프트웨어에 대한 품질평가 방법론이나 평가 기법, 평가 도구 등이 개발된 사례가 있으나 패키지 소프트웨어의 경우에는 아직까지 국내에서 활용할 수 있는 구체적인 체계가 구축되어 있지 않은 실정이다. 패키지 소프트웨어는 하나의 소프트웨어 유형에 대해 다수의 제품이 개발되어 경쟁하게 되는 만큼 그 소프트웨어들 중에서 요구에 맞는 소프트웨어를 선택하기 어려우므로 이를 지원한 수 있는 방법의 개발이 중요한 의미를 가지고 있다. 본 연구에서는 패키지 소프트웨어 시험을 위한 표준인 ISO/IEC 12119를 기반으로 소프트웨어 패키지를 시험하여 결과를 산출한 수 있는 시험모듈과 품질검사표를 개발하여 패키지 소프트웨어 시험에 적용할 수 있도록 하였다.

오늘날 수많은 패키지 소프트웨어들이 제품화되어 출시되고 있다. 하나의 소프트웨어 유형에 대해 다수의 제품이 사용자의 선택을 기다리고 있다. 따라서, 개발 업체는 다수 사용자의 요구를 충족하는 소프트웨어를 개발하기 위해 사용자의 요구사항을 정확히 파악하여 제품에 반영할 수 있도록 해야 할 것이며 사용자는 다수의 제품 중에서 자신이 소프트웨어를 사용하려는 목적과 용도에 적합한 소프트웨어를 선택할 수 있어야 한다. 사용자가 이러한 선택을 할 때 적용할 수 있는 표준으로서 ISO/IEC 12119 정보기술 - 소프트웨어 패키지 - 품질 요구사항 및 시험이 있다. 본 연구에서는 ISO/IEC 12119를 적용하여 소프트웨어 패키지를 시험하고 최종적으로 결과를 판정할 수 있는 체계를 구축하였다.

본 논문에서는 인터넷을 이용한 디지탈 논리회로 설계 및 모의실험실습을 위한 교육용 소프트웨어 패키지(DVLab)를 개발하였다. 개발된 패키지는 디지탈 조합/순차회로는 물론 마이크로콘트롤러 응용회로까지 설계하고 시뮬레이션할 수 있는 모듈, 브레드보드 시뮬레이터 모듈, 실험항목별 이론 강의를 위한 모듈, 보고서 작성 및 보고서 자동검사 모듈 등을 포함하고 있다. 개발된 모든 모듈들은 독립적인 응용 프로그램으로 뿐만 아니라 인터넷을 이용한 사용이 가능하며, 특히 시뮬레이터 모듈의 경우 실시간 클럭 제공, 설계회로도 상에서 직접 소자의 출력값 확인, 논리값 변화 기록 기능, 설계회로 복사 방지 기능, 다양한 논리회로 소자뿐만 아니라 LED, buzzer등과 같은 시각적, 청각적 소자 제공 등의 특징을 가진다. 또한 개발된 교육용 패키지를 이용한 디지탈 논리회로 실험실습 과목의 학습 모형을 제시하였다.

In this paper, we developed the internet-based educational software package (DVLab) for design and virtual experiment of the digital logic circuits. The DVLab consists of the LogicSim module for design and simulation of digital combinational/sequantial logic circuits, micro-controller application circuits and the BreadBoard module for virtual experiment and the Theory module for lecture and the Report/ReportChecker module and some other utility modules. All developed modules can be run as application programs as well as applets in the Internet. The LogicSim and the BreadBoard support real time clock function, output verification function on the designed circuits, trace function of logic values, copy-protection function of designed circuits and provide various devices including logic gates, TTLs, LED, buzzer, and micro-controller. The educational model of digital logic circuit design and experiment using the DVLab is also presented in this paper.