Earticle

Although many tests for stabilization of the software have been done, vulnerability test for a system run by combination of the software of various products has not been conducted enough. This has led to increased threats and vulnerability of system. Especially, web-based software system, which is public, has inherent possibility of exposure to attacks and is likely to be seriously damaged by an accident. Consequently, comprehensive and systematic test plans and techniques are required. Moreover, it is necessary to establish a procedure for managing and handling the results of vulnerability test. This paper proposes vulnerability test plans and designs for implementing automated tools, both of which can be complied with on web-based software systems.

A large portion of the embedded system development process involves the integration of hardware and software. Unfortunately, communication across the hardware/software boundary is tedious and error-prone to create. This paper presents an automatic hardware/software interface generation system. As the front-end of hardware/software co-design frameworks, a system designer defines XML specifications for hardware functions. Our system generates hardware/software interfaces including Device Driver, Driver API, and Device Controller from these specifications. Embedded software designers can easily use hardware just like system libraries. Our system reduces the mistakes and errors that can be occurred when a software programmer directly connects software to hardware, and supports balancing labors between hardware developers and software programmers. Moreover, this system can be used as the back-end for a hardware/software co-design framework.

Hardware-Software co-simulation of a multiple image encryption technique shall be described in this paper. Our proposed multiple image encryption technique is based on the Latin Square Image Cipher (LSIC). First, a carrier image that is based on the Latin Square is generated by using 256-bits of length key. The XOR operation is applied between an input image and the Latin Square Image to generate an encrypted image. Then, the XOR operation is applied between the encrypted image and the second input image to encrypt the second image. This process is continues until the nth input image is encrypted. We achieved hardware co-simulation of the proposed multiple image encryption technique by using the Xilinx System Generator (XSG). This encryption technique is modeled using Simulink and XSG Block set and synthesized onto Virtex 2 pro FPGA device. We validated our proposed technique by using the hardware software co-simulation method.

Vehicle detector system based on image processing technology is a significant domain of ITS (Intelligent Transportation System) applications due to its advantages such as low installation cost and it does not obstruct traffic during the installation of vehicle detection systems on the road[1]. In this paper, we propose architecture for vehicle detection by using image processing. The architecture consists of two main parts such as an image processing part, using high speed FPGA, decision and calculation part using CPU. The CPU part takes care of total system control and synthetic decision of vehicle detection. The FPGA part assumes charge of input and output image using video encoder and decoder, image classification and image memory control.

Recently, bottom-up information systems (BUIS), developed according to the requirements of individual user departments, have become popular. However, effective management of BUIS projects is not enough, with many organizations having experienced integration challenges with such individual projects. BUIS projects are relatively small and limited in scope, as opposed to the large, complex systems developed through traditional top-down information system development projects. Due to these differences in characteristics, the control modes as well as the aspects to improve development performance in each type of project are also different. Therefore, it is difficult to apply the results of prior research on control in system development projects to improve BUIS project performance. The purpose of this study is to derive a new theory of control to improve BUIS project performance. The results contribute to the improvement of firm performance through effective control of BUIS projects in modern enterprises.

ISO/IES 25000 Series SQuaRE 는 사용 품질(quality in use), 제품 품질(product quality), 그리고 자료 품질(data quality)에 대한 세 모델로 구성되어 있다. 이 중에서 사용 품질 모델과 제품 품질 모델은 공히 시스템 또는 소프트웨어 제품의 품질 속성(quality characteristics)과 척도(measure)를 정의한다. 이 두 모델은 총 총 13개의 속성, 40개의 하위속성, 그리고 122 개의 척도를 정의하고 있다. 그러나 이렇게 방대하고 또한 많은 노력이 투자된 모델임에도 불구하고 (또는, 그렇기 때문에), SQuaRE 는 많은 문제점들을 내포하고 있다. 본 논문에서는 이러한 문제점들에 대해서 비판적으로 검토함으로써, 소프트웨어 제품 품질 모델이 갖추어야 할 특성이 무엇인가를 도출하고자 한다.

Technological innovations over the years have accentuated the workings in corporate- connected organizations and different application platforms. Hence, a unified management information system (MIS) that can utilize the Web and propel programming developments is required. Software agents, the latest developments in computer software technology, can be utilized to rapidly and effortlessly build integrated information systems. Consequently, 59 research papers on the use of software agents in MIS were identified from top 40 MIS journals published between 2007 and 2017. Then, we reviewed and classified all the research papers according to two categories: application fields and application categories. The application fields consisted of eight sub-groups: manufacturing, telecommunication systems, traffic and transportation management, information filtering and gathering, electronic commerce, business process management, entertainment, and medical care; whereas the application categories consisted of three sub-groups: multi-agent systems, personal assistants, and multi-agent simulation. The research papers were further divided into journal and year of publication, and journal and application field. The objective of our research was to understand the trend of the use software agent technology in MIS by examining the published research paper beside to add knowledge and content to the information system academic discipline.

The major concern of the study was to develop android - mobile application software for teaching web systems and technologies for the Bachelor of Science in Information Technology students of the College of Information & Communications Technology of Bulacan State University. It made use Instructional System Design (ISD) model, which consists of five phases: (1) analysis; (2) design; (3) development; (4) implementation; and (5) evaluation and revision. The topics included in the courseware were based on the scope of the course syllabus of IT393 - Web Systems and Technologies, enabling the students to learn principles of the subject in unique approach with seven conceptualized units. Significantly, the AMAS has the following advantages: (1) Learner Control; (2) Motivation; (3) Increased interaction; (4) Individualization; (5) Lesson Integrity; (6) Immediate feedback; and (7) Ease of record keeping. Its acceptability was assessed in five dimensions: (1) subject matter content; (2) Readability; (3) Instructional design; (4) Software Operation; and (5) Usability. Moreover, considering the advantages of the software and the acceptability of the android - mobile application software approach, it was recommended that this new mode of instruction be implemented in teaching web systems and technologies.

In this paper, we study the relationships among task-technology fit (TTF), performance, and information system (IS) continuance in the different levels of Software-as-a-service (SaaS) maturity. Two-hundred-and-seven survey responses from Korea were analyzed using partial least square. The results indicate that the more a user evaluates TTF, a user gets higher performance. The results also show that performance factors significantly influence SaaS continuance intention, which is moderated by SaaS maturity. This is important because research on IS use and performance primarily examine technologies that are novel or may not be fully mature at the time of implementation. Technology maturity warrants should be investigated in future studies.

무기체계 관련 어플리케이션과 국방 관련 기관에서 활용하는 정보시스템이 사이버 공격을 받을 경우 국가의 안보가 위험해지는 결과를 초래한다. 이러한 위험을 줄이기 위해 개발 단계에서부터 시큐어 코딩을 적용하거나, 발견된 취약점들을 체계적으로 관리하기 위한 노력이 지속적으로 행해지고 있다. 또한 다양한 분석 도구를 이용하여 취약점을 분석, 탐지하고 개발 단계에서 취약점을 제거하거나, 개발된 어플리케이션에서 취약점을 제거하기 위해 노력하고 있다. 그러나 취약점 분석 도구들은 미탐지, 오탐지, 과탐지를 발생시켜 정확한 취약점 탐지를 어렵게 한다. 본 논문에서는 이러한 문제점 해결방안으로 분석 대상이 되는 어플리케이션의 위험도를 평가하고 이를 기반으로 안전한 어플리케이션을 개발 및 관리할 수 있는 취약점 탐지기법을 새롭게 제안하였다.

Cyberattacks on information systems used by applications related to weapon system and organizations associated with national defense put national security at risk. To reduce these threats, continuous efforts such as applying secure coding from the development stage or managing detected vulnerabilities systematically are being made. It also analyzes and detects vulnerabilities by using various analysis tools, eliminates at the development stage, and removes from developed applications. However, vulnerability analysis tools cause problems such as undetected, false positives, and overdetected, making accurate vulnerability detection difficult. In this paper, we propose a new vulnerability detection method to solve these problems, which can assess the risk of certain applications and create and manage secured application with this data.

소프트웨어 재 사용 기법은 기존의 시스템을 개발하는데 사용된 다양한 형태의 정보와 지식을 다른 시스템 개발에 재적용함으로써 생산성을 향상할 수 있고 유지보 수를 쉽게 할 수 있다. 본 논문에서는 C 및 C++로 개발된 원시 코드를 대상으로 역공 학을 이용하여 재사용 가능한 부품을 수출하고 이 부품을 저장 및 검색, 합성하여 사 용할 수 있는 재사용 시스템 CSORUS(C and C++ SOurce ReUse System)를 설계 및 구현 하였다. 역공학을 이용하여 재사용 부품을 구축할 경우 실무 분야에서 적용되어 검증 받은 신뢰도가 높은 부품이므로 재사용 부품의 신뢰도와 새로운 시스템의 유지보수를 쉽게 할 수 있다면 장점이 있다.

Software reuse techniques make reapplication of various well-organized information knowledge to system development so that improve productivity and make it easy to maintain software. This paper describes the design and implementation of CSORUS(C and C++ SOurce ReUse System) which can extract reuse components using reverse engineering, and store, retrieve, merge them written with C of C++ programming language. The construction components using reverse engineering has advantage in quality assurance because they are reliable components already tested in real environments.

기존의 하드웨어로 구현되었던 멀티미디어 시스템들의 다수가 CPU의 성능이 향상됨에 따라 소프트웨어로 구현이 가능하게 되었다. 또한, MPEG(Moving Picture Expert Group)은 디지털 동영상 압축 부호화의 표준화 기구로 자리잡고 있으며 MPEG-1과 MPEG-2가 상용화되어 있다. 본 논문에서는 윈도우 95 환경 하에서 전용 하드웨어의 도움 없이 MPEG-1 동영상을 소프트웨어로 재생할 수 있는 소프트웨어 MPEG-1 재생 시스템의 개발에 대하여 소개한다.

The MPEG is the standard of coding moving pictures, and MPEG-1 and MPEG-2 are widely in use. And as the performance of CPU has improved, it is now possible to implement MPEG-1 in software only. This paper introduces the techniques of developing MPEG-1 playback system in software without using hardware on Windows 95 operating system. The implemented MPEG-1 playback system shows an acceptable performance.

본 논문에서는 현재의 IT 분야의 핵심 기술 중에 하나인 임베디드시스템을 하드웨어/소프트웨어 통합설계 방법론에 기초를 두고 구성하는 방법의 한 가지를 제안하였다. 제안한 방법에 기초하여 각 종 진보된 멀티미디어시스템을 구현할 수 있으리라 사료되며, 또한 이를 기반으로 좀 더 진보된 각종 디지털컨텐츠를 구현할 수 있으리라 전망되며, 특히 최근 대두되고 있는 모바일 컨텐츠 구현에 적용이 기대된다.

This paper presents a method of constructing the embedded systems based on hardware/software co-design approach that was key methodology. The proposed method was important technology enable to implement advanced multimedia systems and digital contents creating that are rapidly growing of the new information technology.

본 연구에서는 지하광산용 권양기의 유형에 따른 설계기법을 제시하였고 이를 검증하고자 광산현장에서 사용하고 있는 권양기의 사양과 본 연구의 설계안을 비교하였다. 그 결과, 드럼형 권양기는경우에 본 연구의 설계안은 광산현장의 권양기 소요동력을 양호하게 예측하였고 안전조건도 모두부합하였다. 마찰형 권양기의 경우에도 본 연구의 설계안은 모든 안전조건을 만족했지만 적용된안전조건이 다름으로 인해 광산에서 제시한 권양기 동력과 8%의 오차가 있었다. 제시된 설계기법을 기반으로 본 연구에서는 지하광산의 수갱운반용 권양시스템 설계를 위한 소프트웨어를 개발하였다. 개발된 소프트웨어는 누구나 손쉽게 지하광산용 권양기를 설계할 수 있도록 최적 로프의 선정과 설계안의 적합성 검토기능을 탑재하고 있다.

This study proposed a design technique based on the type of hoisting system in underground mines. The specifications of the hoists used at a mine site were compared with the hoist design of this study for verification. Consequently, the drum hoist design proposed in this study closely matched the power requirements at the mine site and fulfilled all the safety conditions. However, for the friction sheave hoist, although the design met the safety standards, an 8% deviation was observed in the suggested hoist power owing to variations in the rope safety standards. Based on this design technique, this study developed a design software for a shaft hoisting system in underground mines. The software included functions for selecting the optimal rope and reviewing the suitability of the design. Therefore, anyone can easily design a hoist system for an underground mine.

최근 항공 산업 경쟁이 심화함에 따라 항공기 인테리어 산업도 첨단 IT (information technology) 요소를 접목하는 등 빠르게 발전하고 있다. 국내에서는 보잉사와 협력하여 항공기용 디스플레이 시스템인 CDS (cabin display system)를 개발 중이며, 본 논문에서는 CDS의 원격 제어 소프트웨어인 CDS RCS (cabin display system remote control software)의 설계 및 구현의 내용을 다룬다. CDS RCS 는 ARINC-615A 표준을 응용하여 자체 개발한 항공기용 데이터로드 프로세스와, MQTT (message queuing telemetry transport) 프로토콜을 적용하여 개발하였다. 또한 CDS RCS는 기존의 CDS 제어 소프트웨어와 달리 MQTT client 형태로 설계되어 다른 MQTT client 장치들과 독립적으로 운용할 수 있다는 장점이 있으며, 개인 단말기에 쉽게 설치할 수 있는 안드로이드 기반으로 개발되어 승무원들의 편의성이 크게 향상될 것으로 기대된다.

In recent years, the aircraft interior industry has been rapidly evolving, incorporating advanced information technology (IT) elements as competition in the aviation industry intensifies. In Korea, a display system for aircraft, called cabin display system (CDS), is being developed in collaboration with Boeing. This paper discusses the design and implementation of cabin display system remote control software (CDS RCS), a remote control software for the CDS. CDS RCS was developed by applying the aircraft data load process developed in-house using the ARINC-615A standard, and the communication protocol between devices applies the MQTT protocol. Unlike existing CDS control software, CDS RCS is designed as an MQTT client and can operate independently of other MQTT clients. It is also developed for android-based devices, which can be easily installed on personal terminals, and is expected to greatly enhance the convenience of flight attendants.

차량에 무선 통신 기능이 탑재되기 시작하면서 무선 통신 기능의 취약점을 악용한 차량의 사이버 공격이 증가하고 있다. 이에 대응하기 위해 UNECE는 차량 제조사가 무선 통신 기능을 활용하여 차량에 탑재되는 소프트웨어를 안전하게 배포할 수 있도록 UN R156 규정을 제정하였다. 해당 규정은 차량의 소프트웨어를 안전하게 배포하는데 필요한 보안 요구사항을 명시하고 있으나 해당 요구사항을 개발 및 구현하는데 필요한 구성요소와 세부 기능에 대한 정보가 생략된 채 추상적인 요구사항만이 제시되어 있다. 따라서 본 논문에서는 체계적으로 보안 위협을 분석하는 방법인 위협모델링을 활용하여 안전한 SUMS를 구축하는데 필요한 상세 보안 요구사항을 도출한다. 이후 해당 요구사항을 바탕으로 SUMS에 대한 보안성 평가기준을 제안한다.

As wireless communication functions begin to be installed in vehicles, cyberattacks that exploit vulnerabilities in wireless communication functions are increasing. To respond to this, UNECE enacted the UN R156 regulation to safely distribute the software installed in the vehicle by using the wireless communication function. The regulations specify the requirements necessary to safely distribute the software for vehicles, but only the abstract requirements are presented without information on the components and detailed functions necessary to develop and implement the requirements. Therefore, in this paper, we propose a security evaluation standard that can evaluate whether a safe SUMS is built using threat modeling, a method for systematically analyzing security threats.