Earticle

본 연구는 최근 발생한 SK텔레콤 유심 정보 해킹 사건을 계기로 기업 내부망 접근에 사용되는 가상사설망(VPN) 취약점이 악용될 가능성과 이에 따른 안전한 원격 접속 방식에 대한 우려를 배경으로 한다. 특히 이동통신 기반 인증절차가 무력화될 경우 VPN을 비롯한 다양한 보안 채널이 동시에 위협받을 수 있다는 점이 부각되고 있다. 그러나, 본 연구는 VPN을 공격 경 로로만 인식하는 기존 시각에서 벗어나 다양한 사용자 환경에서 효율적이면서도 안전한 보안 채널 구축 수단으로 재조명한다. 이를 위해 구현 방식별 실제 실험 환경을 통해 구축 난이도, 운용 편의성, 확장성의 차이를 비교하여 다양한 네트워크 환경에 서 적합한 보안채널 구축 방안을 제시하는 것을 목적으로 한다.

This study is motivated by the recent SK Telecom USIM data hacking incident, which highlighted the potential exploitation of vulnerabilities in Virtual Private Networks (VPNs) used for enterprise intranet access, and raised concerns over the safety of remote access methods. In particular, if mobile network-based authentication procedures are neutralized, multiple secure communication channels, including VPNs, may simultaneously be exposed to threats. Rather than viewing VPNs merely as attack vectors, this study sheds new light on them as efficient and secure means of constructing security channels across diverse user environments. To this end, the study aims to propose strategies for building suitable secure communication channels for various network environments by experimentally comparing implementation methods in terms of deployment difficulty, operational convenience, and scalability.

현재 국내에서는 다양한 신용카드 간편결제 프로토콜이 제시되고 있다. 제시되는 프로토콜의 특징은 사용자 인증을 위해 공인인증서 대신 패스워드를 사용하고, ActiveX를 통해 별도의 보안모듈을 설치할 필요가 없다는 것이다. 본 논문에서는 표준화된 보안 프로토콜인 SSL(Secure Socket Layer)과 패스워드 인증을 이용하여 두 개의 새로운 간편결제 프로토콜을 제안한다. 첫 번째는 온라인 쇼핑몰과 PG(Payment Gateway)가 다른 경우로써 국외의 페이팔(PayPal)을 이용한 간편결제와 유사하고, 두 번째는 온라인 쇼핑몰과 PG가 같은 경우로써 국외의 아마존(Amazon)에서 제공하는 결제방식과 유사하다. 제안되는 두 개의 프로토콜 모두 온라인 쇼핑 시, 쇼핑과정과는 독립된 별도의 사전등록절차를 요구하지 않고 쇼핑과정에서 자연스럽게 등록 및 결제를 처리할 수 있다. 또한 로그인 패스워드와는 다른 결제 패스워드를 입력하도록 하여 안전성을 향상시켰다. 본 논문에서 제시한 프로토콜은 현재 다양한 업체에서 제시하는 간편결제 프로토콜을 보다 더 정확하게 이해하고, 그 안전성을 분석하는데 도움이 될 것이다.

Recently, a plenty of credit card payment protocols have been proposed in Korea. Several features of proposed protocols include: using passwords for user authentication in stead of official certificate for authenticity, and no need to download additional security module via ActiveX into user's devices. In this paper, we suggest two new credit card payment protocols that use both SSL(Security Socket Layer) as a standardized secure transaction protocol and password authentication to perform online shopping and payment. The first one is for the case where online shopping mall is different from PG(Payment Gateway) and can be compared to PayPal-based payment methods, and the second one is for the case where online shopping mall is the same as PG and thus can be compared to Amazon-like methods. Two proposed protocols do not require users to perform any pre-registration process which is separate from an underlying shopping process, instead users can perform both shopping and payment into a single process in a convenient way. Also, users are asked to input a distinct payment password, which increases the level of security in the payment protocols. We believe that two proposed protocols can help readers to better understand the recent payment protocols that are suggested by various vendors, and to analyze the security of their payment protocols.

SSL(Secure Socket Layer) 과 TLS(Transport Layer Security)는 네트워크 통신환경에서 주고받는 데이터를 보호하기 위해서 암호화를 해주는 통신 규약으로 널리 사용되고 있다. 그러나 이 통신 규약들의 설계 결함과 실제 구현에서의 오류로 인해서 보안 이슈가 끊이지 않고 있으며 특히 많은 서버들이 이를 이용하고 있기 때문에 보안취약점으로 인해 심각한 피해를 일으킬 수 있다. 본 논문에서는 서버의 SSL과 TLS 보안 취약점을 자동으로 빠르게 탐지하고 주기적으로 검사할 수 있는 시스템을 개발하였다. 본 연구에서 개발한 취약점 스캐닝 시스템은 기존의 취약점 검사 툴에 비하여 주요 SSL과 TLS 관련 취약점을 내부 네트워크에서 빠르게 검사하여 탐지하는 것이 가능하며 검사 스케쥴링 및 시각화 기능을 제공한다. 개발한 취약점 스캐닝 시스템을 이용하여 네이버 망에서 실제 운용되고 있는 서버에서 SSL과 TLS 관련 취약점들을 탐지하여 그 결과를 분석하였다. 네이버 주요 서비스 및 관계사 도메인 213개에 대해 검사를 수행하여 각 도메인 당 평균 4.2개, 즉 총 816개의 취약점이 발견되었다. 7개 이상의 취약점이 발견된 도메인 21개 중 일반 사용자들이 직접 사용하는 도메인은 없었으나 46개의 도메인에서 2016년도 보안 취약점에 노출되어 있었다. 본 논문에서 개발한 취약점 검사 시스템을 이용해서 네이버 망의 서버에서 발견된 보안 취약점들을 빠르게 대응하여 패치를 수행할 수 있었다.

SSL (Secure Socket Layer) and TLS (Transport Layer Security) are widely used protocols for secure and encrypted communication over a computer network. However, there have been reported several security vulnerabilities of SSL/TLS over the years. The vulnerabilities can let an adversary carry out critical attacks on SSL/TLS enabled servers. In this paper, we have developed a system which can periodically scan SSL/TLS vulnerabilities on internal network servers and quickly detects, reports and visualizes the vulnerabilities. We have evaluated the system on working servers of Naver services and analyzed detected vulnerabilities. 816 vulnerabilities are found on 213 internal server domains (4.2 vulnerabilities on average) and most vulnerable servers are not opened to public. However, 46 server domains have old vulnerabilites which were found 2016. We could patch and response to SSL/TLS vulnerabilites of servers by leveraging the proposed system.

사물인터넷은 다양한 기기들이 서로 연결되어 효율적인 에너지 소모와 높은 보안을 유지하기 위해 경량의 메시징 프로토콜인 MQTT와 암호화 프로토콜인 SSL/TLS를 사용한다. SSL/TLS의 cipher suite 협상 단계에서 기기에 고정된 cipher suites로부터 선호도가 가장 높은 cipher suite를 선택한다. 선택된 cipher suite는 해당 통신 중에 필수적으로 제공받아야 하는 무결성, 기밀성을 제공하지만 필요 이상으로 높은 강도의 보안성을 제공할 수 있다. 이러한 한계는 에너지를 필요 이상으로 소비하게 만들 수 있으므로 본 논문에서는 SSL/TLS를 사용한 기기들의 에너지 효율성을 향상시키는 퍼지 기반 cipher suite 결정 기법을 제안한다. 실험을 통해 제안 기법은 기존 기법보다 에너지 효율성이 평균 36.03% 향상되었다.

The Internet of Things (IoT) is an infrastructure of physical objects that could be connected to the Internet. Most of these are low performance to ensure a reasonable cost for the smart physical objects. Thus, these devices usually use a lightweight messaging protocol: message queue telemetry transport with SSL/TLS. Cipher suites in device are fixed by default and selected based on preference in SSL/TLS. However, the selected cipher suite provides high security level more than expected. This limitation causes energy waste and overhead of devices. In order to counter this problem, we proposed fuzzy logic based cipher suite decision method to improve energy efficiency. Our proposed method saved 36.03% energy.

디도스 공격은 예전부터 있어 왔었던 고전적인 공격방법으로 기업 인터넷서비스를 마비시키는 가장 쉬운 방법 중에 하나 로 오늘날까지도 지속적으로 이용되어 지고 있다. 지금까지 디도스 공격에 대해서는 많은 분석이 이루어 졌으며 다양한 디도 스 대응 장비들이 출시되어 기업의 인터넷서비스를 디도스로 부터 보호하고 있다. 하지만 데이터 보안의 이유로 인터넷서비스 에 SSL 통신 사용이 대중화되고 있으며 이를 이용한 디도스 공격에 대한 우려도 증가하고 있다. 본 논문에서는 SSL 디도스 공격 사례를 분석하고 이를 기 운영중이었던 디도스 대응 시스템 및 SSL 가속기에서 효과적으로 대응할 수 있는 방안에 대해 제시한다.

DDoS attacks are one of the easiest ways to paralyze corporate Internet services as a classic attack method that has existed for a long time, and are still being used today. So far, many analyses have been conducted on DDoS attacks, and various DDoS defense system has been released to protect corporate Internet services from DDoS. However, the use of SSL communication in Internet services is becoming popular for data security reasons, and concerns about DDoS attacks using it are also increasing. In the paper, we analyze cases of SSL DDoS attacks and defense ways to effectively defense to DDoS defense system and SSL accelerator that were previously in operation.

본 논문에서는 홈 게이트웨이를 이용하는 가입자들을 관리하기 위해 SSL을 이용한 웹 기반 홈 게이트웨이 관리 시스템을 설계하였다. SNMP를 탑재한 홈 게이트웨이의 시스템 분석, 성능 분석, 장애 분석 등을 파악하기 위해 MIB 오브젝트를 추출하여 가공한다. 시스템 분석은 홈 게이트웨이의 기본적인 구성 정보를 제공하고, 성능 분석은 장비의 실시간 트래픽 정보와 상태를 나타내며, 장애 분석은 예외 상황에 대한 장애로그 및 Trap 메시지를 통하여 장애를 통보 받는다. 또한 SSL(Secure Socket Layer)을 이용하여 서버와 클라이언트 사이의 통신 회선의 보안을 강화함으로써 관리 시스템의 안정성을 증가시켰다.

In this paper, we have designed the Web_based Home Gateway Management System using SSL, which can manage subscribers using Home Gateway device in home networking technology. To manage Home Gateway devices with SNMP, management elements are classified into system. performance. fault functional area based on MIB objects from Home Gateway devices MIB. System analysis provides configuration information of each Home Gateway, and Performance analysis provides device's traffic information and state. And fault analysis provides fault logging for the unexpected events and trap message from devices. HGMS uses SSL (Secure Socket Layer) to enforce the security of communication which is between server and client, and it improved the stability of HGMS.

MSP(Management Service Provider) 사업을 위해서는 네트워크 관리 시스템은 로컬 네트워크뿐만 아니라 다른 네트워크를 통합적으로 관리하기 위해 관리 서버들 간에 정보를 주고받는다. 이때 사용되는 통신 회선은 여러 사용자가 사용하는 공유 회선이므로 제3자가 회선을 통해 전달되는 정보를 훔쳐볼 수 있다. 정보 중에는 관리자나 장비들의 중요한 정보가 포함되어 있기 때문에 이들 정보에 대한 보호가 필요하다. 일반적으로 통신 회선의 보안을 위하여 SSL(Secure Socket Layer)을 많이 사용하는데 네트워크 관리 시스템에서도 서버와 클라이언트 간에 통신이나 관리 서버들의 통신에 SSL을 사용하여 정보를 보호하고자 한다.

Network management system exchanges information between management servers to manage other network as well as local network for MSP(Management Service Provider) business. Because communication line that is used here is communication line that several users use, other user can steal a important information that are passed through communication line. For these information include important information of administrator or equipments, These information should be protected. Usually it is use much SSL to security of communication and it wish to protect information using SSL in communication between management servers' or communication between server and client at network management system to use much SSL for security of communication.

월드 와이드 웹(WWW)의 발달로 인터넷을 기반으로 하는 전자상거래(Electronic Commerce) 이용 등 전세계적으로 네트워크의 사용이 늘어나게 되었고, 더불어 네트워크에 대한 보안과 암호화의 문제가 이슈로 떠오르고 있다. 하지만 신뢰감 부족으로 인하여 인터넷을 통한 제품 구매를 선호하지 않는다. 따라서 본 논문에서는 이러한 문제점을 개선하기 위해 웹서버와 클라이언트사이에 SSL(Secure Socket Layer)을 사용하는 전자상거래 시스템을 구현하여 보았다. 이것은 전자화폐의 지불과정이나, 거래자의 인증과정에 앞서서 수행되므로, 아직 보안상 불완전한 거래에 사용자들로 하여금 신뢰를 줄 수 있다.

현재 가장 널리 사용되고 있는 보안 프로토콜인 SSL(Secure Sockets Layer)은 배터리 내장 무선 디 바이스에서 사용하기에는 프로토콜 자체가 무겁고, 인증서에서 RSA와 같은 PKI(Public Key Infrastructure) 기반 알고리즘을 사용할 경우, 클라이언트와 서버간의 보안 연결 확립에 오랜 시간이 걸린다. 본 논문에서는 기존 SSL handshake 프로토콜을 수정한 경량화 버전을 연구한다. 이는 저 메모리, 저 전력의 무선 디바이스와 무선네트워크 환경에서 사용하기에 적합하게 설계 되었다. 기존의 클라이언 트에 부하를 가중시키던 연산을 서버 측으로 옮김으로써 클라이언트는 pre_master secret을 생성하거 나 서버의 공개키로 이 값을 암호화 하는 과정과 master secret을 생성하는 과정을 제거시키고, 서버 에서 생성한 master secret을 복호화 하는 과정만을 담당하도록 하였다. 또한 이미 생성한 session에 대해 서버가 그 정보를 저장하고 있는 동안 session 재사용을 통하여 보다 빠른 시간 내에 무선 디바 이스와 서버간의 보안 연결이 가능하도록 설계 하였다.

Currently the most popular secure protocol is SSL(Secure Sockets Layer), but it has some negative aspects: First, it imposes a heavier burden on handheld wireless devices, and when a certificate uses PKI(Public Key Infrastructure) e.g. RSA algorithms, it takes a long time to establish a secure connection between client and server. This paper proposes a lightweight protocol based on the SSL protocol, which is more suitable for handheld wireless devices operating under low-capabilities, low-bandwidth and error-prone wireless links. The new lightweight SSL protocol has designed the SSL to reduce the client computational load, leaving the computational intensive operation on the server side. The client does not need to generate and encrypt the pre_master secret nor calculate the master secret. The only operation the client needs to perform is to decrypt the master secret it has received from the server. Moreover it is able to reduce the response time between client and server using SSL session reuse. It is more suitable to securely connect handheld wireless devices and servers.

The purpose of this study is to seek how to improve KSL curriculum through the analysis of SSL curriculum. This study compared SSL and KSL curriculums in terms of education system, policy, language assessment, purposes and learner groups, operation cases, and teacher education. Some of the findings are as follows: 1) Swedish curriculum system is relatively simple compared with the Korean counterpart; 2) for policy, the Swedish national test is administered every three years in elementary and secondary schools, which gives learners a motivation to learn Swedish; 3) for purposes and learner groups, SSL curriculum is focused on the functions of language learning rather than culture and social identity compared with KSL curriculum; 4) for assessment, SSL specified the contents and levels of evaluation depending on grades while KSL curriculum does not have a complete assessment. and 5) for teacher education, the two countries recognized the necessity of professionalism in teaching: Sweden started new curriculum since 2011, where 4-5 year SSL teacher programs for youths have been operated, but KSL teacher education mainly targeted programs for adults and qualified teachers.

This trip is the second one to South America, since I made the first trip in 1997, when the 15th World Congress of the ISLLSS was held in Buenos Aires, Argentina. The 14th World Congress was hosted to Seoul in 1994, where around 2,000 gathered from all around the world. As the General Secretary of the Organizing Committee of the Seoul Congress, I had to take care of the biggest congress in the history of the Society with six different languages including Russian. The 15th World Congress was open with a minute of silence to the late Professor Kim Chi-sun, who took over the presidency of the Society in 1994 but passed away in 1996. As the chairperson of the second plenary session, I proceeded the session in German, after I consulted with Professor Wolfgang Däubler. At the Executive Committee Meeting, which was convened before the opening of the 20th World Congress in Santiago de Chile, the Organizing Committee reported that around 750 people from 47 countries registered themselves. The Executive Committee made the following statutory appointments, all by acclamation and all for the term 2012-2015: ⅰ. Secretary General: Giuseppe Casale (Italy/ILO); ⅱ. Treasurer: Stefano Bellomo, Italy ⅲ. Auditor: Stein Evju, Norway, (reconducted) ⅳ. Vice-presidents: Ms. Martine Le Friant (France), Ms Marylyn Christianson (South Africa), Messrs Miroslav Belina (Czech Republic), Kwang-Taek Lee (Korea), Emilio Morgado(Chile) At the closing of the Congress Professor Adrián Goldin of Argentina was to take over the presidency of the Society from Professor Michal Sewerynski of Poland. Dr. Giuseppe Casale of Italy took over the mission of Secretary General from Arturo Bronstein, who had served the post for 11 years. I reported at the Committee the preparation of the 9th Asian Regional Congress. The general report on Theme Ⅰ“The effectiveness of Labour Law and the role of the Labour Inspection”was made by Dr. Giuseppe Casale, Director, Labour Administration and Inspection Programme of ILO. He urged that there is a need to focus on certain issues, such as the priority areas for a country’s action, in terms of achieving an effective labour inspection system: Drawing up national policies and programmes, Lifelong learning, Cooperation with public and private institutions with regard to the inspectorate’s operations, Strengthening relations with worker and employer representatives, Improve administrative procedures and provide an incentive to enhance the deterrent effect of sanctions, Improve international collaboration, Information and communication technologies. The general report on Theme Ⅱ “Sexual and Moral Harassment in the Workplace” was made by two young male professors Sergio Gamonal C. of University Adolfo Ibáñez and Jose Luis Ugarte C. of University Diego Portales. The Chilean professors emphasized that since the seventies, working systems have been emphasizing the defense of human rights or fundamental rights of workers. The labor doctrine refers to Enterprise Citizenship or Nonspecific Labour Rights. They cited Kahn-Freund “the relation between the employer and an isolated worker is typically a relation between a power‘s titular and someone without any power (…) It is originated by an act of submission and produces a situation of subordination, despite the fact that it can be disguised by a juridical fiction known as the <labour contract>. The principal aim of Labour Law has always been –and we can say, will be- to constitute a counter balance to equilibrate the inequality of negotiating power inherent to the labour relation.” After the general report and the panel discussion, I made a presetation on the situation in Korea: The term “sexual harassment” had not been found in the positive legislation, until the Framework Act on Women Development(WDFA) was enacted on December 30, 1995. The judicial court began to use the term “sexual harassment” on February 10, 1998, when the Supreme Court sent the case back to the Seoul Appellate Court repealing its decision after two and half years on theory of the compensation of the mental damages. Sixteen months after the Supreme Court’s decision, the Seoul Appellate Court on June 25, 1999 held that the defendant’s conduct of sexual harassment constituted unlawful act and ordered the defendant to pay a 5 mill. won(USD 4,644) in damages. Korea is characterized for tackling the sexual harassment not only from the viewpoint of working environment of workplace, but also from the general feminism and further from the human rights. The Government ressorts for the prevention, dispute settlement and punishment of the sexual harassment are the Ministry of Gender Equality and Family(MOGEF), the Ministry of Employment and Labor(MOEL) and the National Human Rights Commission(NHRC). The general report on Theme Ⅲ “Strike as a Fundamental Right and Its Risks of Conflicting with other Fundamental Rights of the Citizens” was made by Professor Bernd Waas, Goethe University Frankfurt, Germany. He conclued that the constitutions of many States have explicitly recognised the right to strike. In others, it is not explicit but implied. In several States it is not possible to speak of a right but only of a freedom to strike. However, the issue is not whether the right to strike exists, but whether there are limits on the modality of engaging in industrial conflict. Some time ago the following was observed: “The problems most frequently arising in connection with the right to strike are: the imposition of compulsory arbitration by decision of the authorities or at the initiative of one of the parties; the imposition of penal sanctions for organizing or participating in unlawful strikes; the requirement of an excessively large majority of votes to be able to call a strike; the ban on strikes by public servants who do not exercise authority in the name of the State; the power forcibly to requisition striking workers and, in many countries, the ban on strikes in certain non-essential services”.

현재 구성 되어있는 방범 CCTV시스템에서 네트워크를 통하여 전송되는 구간에 도청이나 해킹이 발생하게 된다면 카메라로부터 전달되는 정보의 보호에 매우 취약하다. 이러한 문제점을 해결하기 위하여 본 논문에서는 SSL/VPN 터널링 기법을 이용하여 CCTV에서 영상정보를 보호하기 위한 SSL 통신메카니즘을 제안하고, 제안한 방법을 기본으로한 보안 시스템의 설계 및 구축에 관하여 기술한다. 관제센터단에서 사용할 VPN Server는 Linux System O/S 인 Fedora 8 버전에서 개발하였으며, 현장단에서 사용될 VPN Client는 ARM9 기반의 프로세서를 탑재한 임베디드 보드상에서 구현한다. 시스템 소프트웨어 구현을 위한 라이브로리는 OpenSSL과 PPTP와 PPP를 사용하였다.

If there are some problems such as hacking and revealing of personal information in the existing the CCTV system which is transmitted through the network system, the protection of information passed from the camera is very vulnerable. To resolve these problems, this paper first presents SSL communication protocol for protection image data based on SSL/VPN tunnelling technique, and then the design and implementation of the CCTV security system is described based on the proposed protocol. A VPN Server has been implemented in software on the Linux System, which will be added the control center of the proposed security system. Also, VPN Client which will be used in the setup-box has been implemented on embedded boards with ARM9-based processor. The libraries such as OpenSSL, PPTP, and PPP are used for implementing system software.

The recent years have witnessed the fast growth of mobile e-commerce in the world, and this model has become the most popular one among all the e-commerce models. However, compared with the traditional e-commerce models, the mobile e-commerce is less secure as the carriers, including smart phones, PDA, or handheld computers, can hardly reach the same high level of security as personal computers. The network gap caused by different network operators also causes the network delay when the users are doing cross-platform internet browsing. To solve these problems, a new scheme to reduce network delay and improve security level has been put forward. This scheme proposes to install a “routing box” in user’s home at first. When the smart equipment is to be connected to the Internet, it shall log in on the equipment to be connected to the nearest cloud server which will send the connection request and connect the user to his/her aimed website quickly. Through SSL + WPKI protocol, the user’s log-in information and other forms of information can be safely transmitted. The visiting history can be stored in cache in different levels via cloud server. Therefore, when the relevant information is visited again, the user request can be sent to his/her smart equipment through the nearest cloud server, which can resolve the network gap caused by cross-platform visiting. Such a scheme has been proved effective in local area network by test.

With the popularity of the Internet and improvement of information technology, digital information sharing increasingly becomes the trend. More and more universities pay attention to the digital campus, and the construction of digital library has become the focus of digital campus. A set of manageable, authenticated and secure solutions are needed for remote access to make the campus network be a transit point for the outside users. The VPN (Virtual Private Network) remote access solution of university library digital resources was proposed, two main ways to achieve the VPN were introduced, the realization of remote access to digital library resources based on SSL (Secure Sockets Layer) VPN system was elaborated. These measures can provide remote access to outside users, and can greatly improve the utilization of digital library resources.

This paper analyzes the technology of cloud computing and the challenges that occur when connection is established through the Internet and public devices. Devices used for connection to the secured network very often don’t meet the security levels of the network that they connect to. To ensure that the connection is secured even from a public device and through the Internet major role is played by older technology, VPN. Therefore, we will present the security measures taken to secure the remote connection and the challenges faced to meet such a level, benefits, reliability, performance and latency of an enterprise network. These issues must be solved appropriately to ensure the confidentiality and integrity of data and information, as well as overall corporate network security. Obtained analysis in this work also presents the evolution of the cloud related to VPN, addressing the general security risks associated when using devices via VPN to access to an enterprise internal network. Furthermore, we analyze SSL VPN security risks in this context.

Electronic commerce, commonly known as eCommerce is trade in products using the internet. Security at the e-commerce becomes more and more important. Electronic transaction security is a challenging task because of the insecure communication channel. In this paper, we proposed a new algorithm to make an e commerce transaction more secure. In this work we are using AES to encrypt data and this data is embedded to image edges to perform Stenography in this paper target on compress the time of encryption and decryption adopting parallel processing on which AES will be applied freely. In the results show the comparison between our work and previous work and we found that parallel processing and multi threading on the AES algorithm our results are quite improved, our proposed algorithm is taking much less time in encrypt and embedding or decrypt and extraction.

본 논문에서는 색 정보 분석기법을 이용한 효율적인 CCTV 영상 보안 시스템의 설계 및 구현에 관하여 기 술한다. 기존의 방법에서는 주로 압축 알고리듬과 암호화 기법을 이용하여 데이터 처리 비용을 절감하였다. 그러나 본 논문에는 데이터의 절대량을 감소시키기 위하여 영상 데이터의 중복 요소 제거를 위한 색 정보 분석 기법을 제안 한다. 또한 SSL/VPN 터널링 기법을 이용하여 CCTV 영상 보안 시스템의 성능을 향상 시키는 방법을 제안한다. 본 논문에서 제안하는 방법을 사용하면 대용량 정보의 효율적인 처리 및 보안 문제를 해결할 수 있으며, 구현 결과를 통 하여 처리 대상이 되는 영상 데이터가 대폭 감소됨을 확인하였다.

This paper describes the design and implementation of an efficient image security system for CCTV using the analysis technique of color informations. In conventional approaches, the compression and encryption techniques are mainly used for reducing the data size of the original images while the analysis technique of color information is first proposed, which eliminates the overlapping part of the original image data in our approach. In addition, security-enhanced CCTV image security system is presented using SSL/VPN tunneling technique. When we use the method proposed in this paper, an efficient image processing is enable for a mount of information, and also security problem is enhanced. Through the implementation results, the proposed method showed that the original image information are dramatically reduced.

Home network service industry, the driving force for future national development and new changes, may be deemed to comprehend tremendous potential of future development, however as home network services proliferate and various types of home network services emerge, home network services are growing vulnerable to cyber attacks, becoming significant source of social and economic instability in our society, and thus necessary is user authentication to prevent occurrence of infiltration upon home network service and exposure of user information. The system proposed in this paper offers authority or control over an approach to licensed users for diverse devices used in Home Network, preventing unlicensed users from inappropriate approach. In relation to communications of security certification for each device, reduction in added resources and high security can be both met through a security token generated using OTP, which is reasonably applicable to low-efficiency instruments that compose a home network.