Earticle

The dramatic increase in cyberattacks targeting government agencies, critical infrastructure, and defense contractors has revealed the inefficiencies of traditional software development life-cycle (SDLC) models. Most SDLC models do not indicate security explicitly, hence secure software development practices need to be infused into each phase so as to limit the exploitation of security loopholes and safeguard the security of high‑security systems. This document puts forward SSDF‑HS, a secure software development framework for high‑security organizations. The comparative study of various hypothetical projects reveals that SSDF‑HS significantly decreases vulnerability density and mean time to remediate while also enhancing compliance scores. The mathematical risk‑reduction model illustrates the lowering of residual risk when security is integrated early (shift‑left). The framework assists high‑security organizations in writing software that is inherently secure and can withstand future threats.

Software-Defined Networks (SDN) need a reliable and robust control plane. To make the control plane available to the underlying network, the controller must be available all the time. To deal with failures, the switches of the failed controller are assigned to a slave controller. Hence, the slave controller is available in backup to the switches attached with a master controller. In this paper, we formulate the problem of switch migration to the slave controller as a 0/1 knapsack problem. Finally, we compared our scheme with the static method of switch migration. The results show the effectiveness of our proposed scheme.

In this paper, an Intent-based networking Framework is proposed leveraging the central controller intelligence premise of software-defined networking (SDN). The quality-of-service (QoS) is provisioned according to the application service request priorities by the SDN controller. To achieve this, in this paper, we use the Analytic hierarchy process (AHP) as a module on the SDN controller for intent-based routing. An AHP module employed at the SDN controller prioritizes the application objectives and overarching parameters to compute the route from source to destination. The AHP module at the SDN controller prioritizes the application service priorities, and the SDN controller will compute the route according to the intents from the AHP module. The controller will prioritize the intents of the applications according to the eigen priority vector obtained for that application service requests from the AHP module according to the criteria priority values.

This study aims to extensively analyze the performance of various Machine Learning (ML) techniques for predicting version to version change-proneness of source code Java files. 17 object-oriented metrics have been utilized in this work for predicting change-prone files using 31 ML techniques and the framework proposed has been implemented on various consecutive releases of two Java-based software projects available as plug-ins. 10-fold and inter-release validation methods have been employed to validate the models and statistical tests provide supplementary information regarding the reliability and significance of the results. The results of experiments conducted in this article indicate that the ML techniques perform differently under the different validation settings. The results also confirm the proficiency of the selected ML techniques in lieu of developing change-proneness prediction models which could aid the software engineers in the initial stages of software development for classifying change-prone Java files of a software, in turn aiding in the trend estimation of change-proneness over future versions.

본 논문에서는 위성영상처리 소프트웨어 및 시스템의 재사용성을 높이고, 개발기간 및 유지 관리 비용을 줄일 수 있는 알고리즘컴포넌트화를 통한 위성영상처리 프레임워크 및 시스템에 대한 구조를 제안한다. 기존 위성영상처리 소프트웨어 및 시스템은 특정데이터 및 기능에 국한되어 제한된 구조를 갖고 있다. 또한, 각각의 시스템들은 동일 및 유사한 영상처리 알고리즘이 사용되지만해당 알고리즘을 중복적으로 개발하는 문제점이 있다. 이와 같은 문제점을 해결하기 위해 위성영상처리 소프트웨어 프레임워크의요구사항을 분석하였다. 요구사항을 반영한 프레임워크 및 시스템 구조를 설계하였으며, 위성영상처리 프레임워크의 운영흐름도 함께 도출하였다.

This paper suggest meteorological satellite processing software’s structure that reduces time and efforts of modification/upgrade. This structure’s key feature is “algorithm component” that works within framework and eventually to a completeMeteorological satellite processing system. Most of existing Meteorological satellite system is designed around specificfunction and data sets which limits range of modification and upgrade. In addition, re-use of current algorithms becomedifficult although re-use of similar algorithm is the case in many occasions. This inefficiency can be resolved by designinga new framework as a result of detail analysis of collected requirements. A new framework and system architecture has beendesigned. In addition, operational flow of Satellite image processing framework has been described.

최근 Android OS가 차량 인포테인먼트 시스템인 Android Automotive OS(AAOS)로 확장되면서 이를 탑재한 차량이 빠르게 증가하고 있다. 그러나 이러한 변화는 OS의 취약점을 악용한 악성 앱 설치와 권한 탈취를 통한 CAN 패킷 주입 등의 보안 위협을 초래할 수 있다. 본 연구에서는 AAOS 기반 차량의 보안 강화를 위해 악성 앱과 악성 CAN 패킷을 동시에 탐지할 수 있는 클라우드 기반 통합 보안 소프트웨어 프레임워크를 설계하였다. 제안된 프레임워크는 시그니처 기반 및 기계학습 기반 탐지를 결합한 악성 앱 탐지 모듈과 CAN 패킷의 필드 값 패턴을 분 석하는 악성 CAN 패킷 탐지 모듈로 구성된다. 이 모듈들은 차량 인포테인먼트 시스템에 단일 에이전트로 설치되어 실시간 탐지를 수행하며, 클라우드 자원을 활용한 분산 처리를 통해 차량의 제한된 연산 자원 문제를 해결한다. 본 연구는 차량 내 악성 소프트웨어와 네트워크 공격에 대한 통합 탐지 체계를 제시함으로써 AAOS 탑재 차량의 보안 성 강화에 기여할 것으로 기대된다.

Recently, as Android OS evolves into Android Automotive OS (AAOS) for in-vehicle infotainment systems, the number of vehicles adopting this system is rapidly increasing. However, this shift introduces security vulnerabilities that can be exploited to install malicious apps or inject CAN packets through privilege escalation. This study designs a cloud-based integrated security software framework for AAOS-based vehicles that can simultaneously detect both malicious apps and CAN packets. The proposed framework consists of a malicious app detection module combining signature-based and machine learning-based detection approaches and a malicious CAN packet detection module that analyzes field value patterns in CAN packets. These modules operate as a single agent installed on the vehicle's infotainment system for real-time detection, while addressing the limited computational resources of vehicles through distributed processing with cloud computing. This research contributes to enhancing the security of AAOS-equipped vehicles by providing an integrated detection system for both in-vehicle malicious software and network attacks.

증강현실 게임의 빠른 개발을 위한 소프트웨어 프레임워크인 AR-Room을 제시한다. AR-Room은 핵심 증강현실 기 술의 컴포넌트들과 하드웨어 추상화 모듈들을 포함한다. 또한 콘텐츠 디자인을 위한 저작도구를 제공한다. AR-Room 환경에서 개발자는 증강현실 게임의 콘텐츠 시나리오와 소프트웨어 컴포넌트의 설정 정보를 제공하면 된다. 콘텐츠 시나리오는 이벤트-액션 모델로 명세되며 복잡한 동적 시나리오도 구현이 가능하다. AR-Room 개발환경에서 증강현실 응용 게임을 제작하였고 제작 절차가 단순화되었고 제작시간이 크게 줄어들었다.

This article describes a software framework called AR-Room for fast prototyping of augmented reality game applications. AR-Room consists of a lot of deployable components for core augmented reality technologies, modules for hardware abstraction, and an authoring toolkit for the rapid content design. On the AR-Room, application developers are only required to describe their content scenarios together with a configuration of software components. A content scenario is represented by a set of event-action pairs. Several augmented reality game applications are implemented on the AR-Room development environment to show how the framework can be efficiently used for the fast prototyping of applications.

국가첨단전략기술은 반도체, 이차전지, 방위산업, 첨단소재 등 국가 경쟁력과 직결되는 자산 으로, 기술 유출 위협이 심화됨에 따라 보안성 검증의 중요성이 높아지고 있다. 그러나 기존 대 응은 제도적 규제 중심에 머물러 실제 보안시스템 소프트웨어의 사전 검증 체계는 미흡하다. 본 연구는 이러한 한계를 극복하기 위해 보안시스템 소프트웨어 테스트 시나리오의 평가체계를 구 축하고, 델파이(Delphi)와 계층적분석기법(AHP)을 활용해 항목의 타당성과 상대적 중요도를 검 증하였다. 연구 결과, 상위 영역에서는 ‘시나리오 구조 타당성’과 ‘위협 기반 대응성’이 높은 중요 도를 보였으며, 세부 항목에서는 ‘시나리오 단계구성의 논리성’과 ‘위협 시나리오 구성의 현실성’ 이 핵심 요인으로 도출되었다. 이는 구조적 완성도와 위협 대응 현실성이 보안성 평가의 핵심 기 준임을 시사한다. 본 연구는 정량화된 평가체계를 제시함으로써 학술적 토대를 확장하고, 실무 적 활용 가능성과 정책적 기여 가능성을 동시에 확보한 점에서 실무적 의의가 있다.

National core strategic technologies, such as semiconductors, secondary batteries, defense systems, and advanced materials, face increasing risks of technology leakage, highlighting the need for reliable security verification. However, current measures remain regulationcentered and lack systematic pre-verification of protective software. This study proposes an evaluation framework for security system software test scenarios and validates its indicators using the Delphi method and Analytic Hierarchy Process (AHP). The results show that “Scenario Structural Validity” and “Threat-Response Effectiveness” are the most critical domains, while “Logical Structure of Scenario Phases” and “Realism of Threat Scenarios” emerged as key factors. These findings suggest that structural completeness and realistic threat modeling are essential criteria in security evaluations. By presenting a quantitative, weight-based framework, this study provides both academic contributions and practical implications for technology protection policy and practice.

In Korea, Usability evaluation is being applied in phases to all medical devices. Accordingly, medical device manufacturers are required to identify potential use errors during the design and development process and improve them to ensure the safety and effectiveness of their devices. While international standards such as IEC 62366-1,2 as well as certain guidelines from the Ministry of Food and Drug Safety (MFDS), provide references, further research is necessary to derive evaluation items that reflect the characteristics of each product. Therefore, this study proposes a usability evaluation method for portable electrocardiogram (ECG) analysis software, which is increasingly used due to the rise in aging populations and chronic disease patients. Based on the usage procedures of domestically approved products, Perception, Cognition, and Action (PCA) analysis was conducted, and heuristic evaluation items were derived using Jakob Nielsen’s ten usability heuristics. Subsequently, risk assessment was carried out based on the software safety classification criteria of IEC 62304, and final heuristic evaluation items were selected. The proposed heuristic evaluation items are expected to serve as a useful formative evaluation reference for manufacturers in designing and refining user interfaces of their products.

본 연구에서는 우리나라의 소프트웨어 교육과정 편성과 Computational Thinking에 대한 개념정립을 위하여 미국의 K12CS에서 제시한 컴퓨터교육 프레임워크를 분석함으로써 시사점을 도출하고자 하였다. 첫 번째로 우리 나라에서 Computational Thinking에 대한 용어를 컴퓨팅 사고력으로 사용하는 부분에 대해서 미국의 교육과정 에 제시된 개념과 비교하여 살펴보았으며, 컴퓨팅 사고력과 Computational Thinking은 문제 해결의 초점과 범위 가 다름을 살펴볼 수 있었다. 두 번째로, 우리나라의 소프트웨어 교육과정은 학교급 및 학년에 따른 위계가 고려 되지 않는다는 점을 고려하여 미국의 K12CS에서 제시하고 있는 핵심 역량을 토대로 재구성하여 교육과정 체계를 제시하였다.

In this study, we conducted to derive some implications by analyzing the computer education framework proposed by K12CS in the United States in order to organize the software curriculum and conceptualization of computational thinking in Korea. First, we discussed the use of the term Computational Thinking as a Computing Thinking in Korea and compare it with the concept presented in the US curriculum. we derived that Computing Thinking and Computational Thinking are different in the focus and scope of problem solving. Second, considering the fact that Korean software curriculum does not consider the hierarchy according to the school and the grade, we reconstructed the curriculum based on the core practices and concepts which were suggested by the organization of K-12 Computer Science in the United States.

RCS-e 사용자와 SMS 사용자간 메시지를 주고받기 위해서는 RCS-e 사용자가 메시지를 보내기 전 SMS 사 용자의 프레즌스 정보를 알 수 있어야 한다. 그러나 RCS-e 표준 규격 상으로는 SMS 사용자의 프레즌스 정보를 조회 할 수 없는 한계가 있다. 본 논문은 RCS-e 관련 서버 기능을 일부 수정하여 기존 RCS-e 클라이언트 기능의 수정 없 이 SMS 사용자의 프레즌스 정보를 RCS-e 사용자가 클라이언트를 통해 조회할 수 있는 소프트웨어 프레임워크를 제 안한다. 이를 위해 각 장비 간 호 처리 흐름을 정의하였으며 SMS 가입자에 대한 RCS-e 서비스 별 Tag 및 서비스 튜플을 정의하였다. 또한 성능 평가를 통해 제안하는 방법이 네트워크에 추가적인 부하를 주지 않는다는 것을 증명하 였다.

If RCS-e subscribers and SMS subscribers want to exchange instant messages between each other, RCS-e app should know the presence information of the SMS subscribers. However, a RCS-e specification does not have the way to identify the information. This paper propose a software framework that makes RCS-e app can identify the information without having to modify RCS-e app. It describes the call flows between network equipments to manage the information. Also, it defines RCS-e service tags and service tuple for SMS subscribers. Performance evaluation proves that the proposed framework does not add loads to the existing network.

현재 RCS-e(Rich Communication Service-e)는 복잡한 프로토콜과 닫힌 외부 인터페이스로 인해 일반 개발 자들이 쉽게 접근할 수 없는 실정이다. RCS-e 서비스를 보다 활성화 시키기 위해서는 일반 개발자들이 쉽게 자신의 앱에서 RCS-e 서비스를 이용할 수 있도록 프로토콜을 단순화하고 외부에서 쉽게 접근할 수 있도록 API(Application Program Interface)화 해야 한다. 본 논문은 RCS-e의 여러 기능 중 프레즌스 기능을 웹 인터페이스로 이용할 수 있 게 해주는 오픈 API 프레임워크를 제안한다. 이를 위해 각 노드들 간의 연관 관계를 나타낸 시스템 구성도를 설계하였 다. 프레즌스 기능 제공을 위한 오픈 API 프레임워크와 기존 노드들 간의 메시지 흐름도를 정의하였다. 그리고 오픈 API 프레임워크에서 웹 기반의 요청을 어떻게 RCS-e에서 사용되는 요청으로 변환하는지 예시를 들어 설명하였다. 성 능 평가에서는 오픈 API 프레임워크를 도입해도 기존 인프라의 성능에 영향을 끼치지 않는다는 것을 증명하였다.

Web developers have had difficulties in using Rich Communication Service-e(RCS-e) on their applications because of complicated protocols and closed interfaces. In order to vitalize the use of RCS-e, we need a RCS Application Program Interface(API) which has simple protocols and can be accessed easily. This paper presents the web-based Open API Framework for the RCS-e presence feature. A system architecture for the framework is defined. Call flows for the presence feature between the framework and other nodes are defined. Also, one of the call flows is illustrated to explain how to convert web-based requests to RCS-e requests. Finally, performance evaluation proves that the framework does not add any loads to the existing network infrastructure.

차세대 모바일 메시징 서비스인 RCS(Rich Communication Service)는 통신사업자가 독점적으로 제공하는 서 비스로 제3의 개발자가 해당 기능을 이용한 앱을 개발하기 어렵다. 이를 해결하기 위하여 몇몇 방법이 제시되어왔으나 실제로 응용 가능한 수준에는 못 미치는 실정이다. 본 논문은 제3의 개발자가 RCS 서비스를 이용한 앱을 쉽게 개발할 수 있도록 웹 인터페이스 기반의 RCS 소프트웨어 프레임워크인 WebRSF를 제안한다. WebRSF는 1대 1 대화 기능을 제공하기 위해 복잡한 RCS 프로토콜을 간단한 웹 기반 프로토콜 변환하여 RCS 기능을 제공한다. 이를 위해 WebRSF를 이용하는 클라이언트가 WebRSF와 메시지를 어떻게 주고받는지 정의하였고, WebRSF와 기존 RCS 노드 들과의 네트워크 구성도 및 메시지 흐름도를 명시하였다. 또한 성능 평가를 통해 WebRSF 클라이언트를 사용할 경우 RCS 클라이언트를 사용하는 것에 비하여 디바이스가 얼마나 부하를 더 받는지 성능 평가를 통해 실험해 보았으며 세 션 수립 시에는 17% 감소된, 세션 수립 후에는 25% 증가된 부하를 받는다는 것을 알 수 있었다.

The Rich Communication Service(RCS) is a next generation mobile messaging service. Since it has been developed and managed by a wireless service provider, 3rd party application developers cannot utilize the RCS features in their apps. A few studies have been proposed to solve this problem, even though they were not viable level of deployment. This paper presents a Web-based Rich Communication Service Software Framework(WebRSF) to help the 3rd party application developers adopt RCS features easily. WebRSF converts complicated RCS protocols to simple web-based protocols for providing the RCS 1-to-1 chat service to the 3rd parties. Communication protocols between WebRSF and its clients are defined in this paper. Also, a network configuration diagram and a message flow diagram are defined. Finally, performance evaluation between the WebRSF client and the RCS client are performed to simulate the load on clients’ devices. It shows that the WebRSF client has 17% less loads than the RCS client while initiating sessions, and has 25% more loads after initiating sessions.

국제 로밍에 대한 이용이 늘어남에 따라 방문망이 소유하는 MSISDN 대역을 로밍 사용자도 이용할 수 있도록 하는 기술에 대한 요구가 늘어나고 있다. 3GPP 표준 상으로는 사용자가 보유한 한 개의 IMSI당 하나의 MSISDN 밖에 할당할 수 없으므로, 여러 개의 MSISDN을 제공할 수 있도록 하는 연구가 진행되어 왔다. 본 논문에서는 XSCP 소프트웨어 프레임워크를 활용하여 다중 MSISDN을 제공하는 방법을 제안한다. 제안된 방법은 기존 HPLMN 코어망의 수정 없이 적용이 가능하므로 쉽게 적용할 수 있고, 추가된 MSISDN으로 호가 착신될 경우 기존의 방법보다 음성 베어러 경로를 더 효율적으로 만들어 전달 비용을 절감할 수 있다. 또한 총 전달 비용에 대하여 기존 방법과 제안된 방법을 비교하여 제안된 방법이 음성 트래픽 사용 시간이 길어질 수록 더 적은 비용이 든다는 것을 증명하였다.

As international roaming users increase, they have demanded to use additional MSISDNs that belong to a FPLMN where they visited. Since 3GPP standards only allow single MSISDN for single IMSI, several methods have been proposed to provide multiple MSISDNs for single IMSI. In this paper, we proposed an efficient XSCP software framework to provide multiple MSDSDNs. The proposed framework can be well adapted to any networks since it does not require HPLMN's core networks changes. Also, if mobile terminating calls were heading to the additional MSISDN, it can reduce the transmission cost by building a voice bearer path more efficiently. Furthermore, we demonstrated that the framework costs less than the standards as the call duration increases.

RCS-e(Rich Communication Service-e) 서비스를 활성화시키기 위해서는 스마트폰용 RCS-e 앱 뿐만 아니라 다양한 방법으로 RCS-e 서비스를 이용할 수 있어야 한다. 표준화 기구에서는 그 방안으로 API(Application Program Interface)를 제시하고 있으나 기능 요구사항만 정의했을 뿐 구현을 위한 구체적인 방안까지는 제시하지 못하고 있는 실정이다. 본 논문은 웹 인터페이스를 사용하여 RCS-e서비스를 이용할 수 있도록 해 주는 오픈 API 프레임워크를 제안한다. 이를 이용하면 RCS-e 서비스와 연동하는 웹 어플리케이션의 개발을 쉽고 빠르게 할 수 있다. 이를 위해 오픈 API 프레임워크 시스템 구성도를 설계하였고, 각 노드들이 RCS-e 세션 수립을 위해 어떻게 메시지를 주고받아야 하는지 정의하였다. 그리고 오픈 API 프레임워크와 기존 RCS 인프라와의 프로토콜 변환을 어떻게 해야 하는지 정의하고 예시를 들었다. 또한 성능 평가를 통해 오픈 API 프레임워크 도입 시 기존 네트워크 인프라의 성능에 영향을 미치지 않는다는 것을 증명하였다.

In order to vitalize the Rich Communication Service-e(RCS-e) service, RCS-e users need various ways to use RCS including RCS-e apps. A RCS standards organization has suggested Application Program Interface(API). Since it only dealt with functional requirements, it was not enough to implement the API. This paper suggests an open API framework that can utilize RCS-e through a web interface. By using the framework, web developers can implement various RCS-e-enabled web applications. A system architecture is defined for the framework. Call flows for establishing a RCS-e session between the framework and other nodes are defined. Also, rules and examples for translating protocols between them are provided. Finally, performance evaluation proves that the proposed framework does not add loads to the existing network infrastructure.

As robotic technology expands into various fields, robots need to execute some complicated tasks in diverse environments. However, the previous robotic software solutions were limited to independent systems. We can not adapt to diverse functionalities and environments. This makes it hard to provide rapid and effective services and leads to costs and losses in the development process. To overcome these problems, we propose a robot software framework with behavior trees based on ROS2. This framework simplifies complex robot behaviors through behavior trees and makes it easy to modify, extend, and reuse robot behaviors. Furthermore, ROS2 standardizes connections between software modules, enhances the robot's flexibility, and enables independent development and testing of software. Our framework aims to provide a foundation for high-quality robot service provision by supporting the modularity, reusability, independent development, and testing required by intelligent robots that need to provide services in various environments.

Mobile service providers allow their customers to use roaming services when they travel to other countries. In the standard mobile call setup procedures, multiple VPMN MSISDNs cannot be provided to the roamers. Also, call setup to the roamer is indirectly routed through the home network of the roamer, which results in the usage of expensive international carrier’s trunks. In this paper, we propose a software framework that provides multiple VPMN MSISDNs in a UMTS. The proposed framework solves the indirect routing problem and can be easily deployed to mobile operators since it does not modify standard telecommunication protocols.

Software effort and cost estimation has turned out to be the major challenge in IT industries. In this paper, different software effort and cost estimation techniques like algorithmic methods, expert judgment, analogy based estimation and soft computing methods and their various aspects are discussed. Software effort estimation is followed by cost assessment that is useful for both customers and developers. In this paper comparison between different approaches are discussed and proposed a hybrid technique for effort estimation using fuzzy logic and neural network. This will be useful to make better estimation results.

There have been quite a number of approaches for mobility management in IP networks to provide service continuity to mobile nodes traveling across heterogeneous wireless networks. One of the reasons making those existing approaches difficult to be applied into real network environment is that they commonly require significant functional updates on network devices including routers, control servers and mobile terminals. The complexity to manage huge mobility information and much overhead to exchange mobility control messages also became obstacles to deploy those approaches. Recently, software defined networking is being considered as a dynamic and scalable architecture which can resolve those limitations by decoupling network control and data forwarding functions, and enabling the network control to become directly programmable in a centralized manner. In this paper, we address some issues and possible solutions to introduce a well-known IP mobility management approach, PMIPv6, into software defined networks. A feasible MM framework is also proposed with consideration of efficiently utilizing the features and advantages of the software defined networking architecture.