检索结果-南通市图书馆

A Novel Transparent and Auditable Fog-Assisted Cloud Storage with Compensation Mechanism

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Tsinghua Science and Technology 2020年第1期25卷 28-43页

作者： Donghyun Kim junggab Son Daehee seo Yeojin Kim Hyobin Kim jung taek seo Department of Computer Science Kennesaw State UniversityMariettaGA 30060USA Department of Information Security Engineering Soonchunhyang UniversityAsan 31538South Korea

This paper introduces a new fog-assisted cloud storage which can achieve much higher throughput compared to the traditional cloud-only storage architecture by reducing the traffics toward the cloud storage. The fog-storage service providers are transparency to end-users and therefore, no modification on the end-user devices is necessary. This new system is featured with(1) a stronger audit scheme which is naturally coupled with the proposed architecture and does not suffer from the replay attack and(2) a transparent and efficient compensation mechanism for the fog-storage service providers. We provide rigorous theoretical analysis on the correctness and soundness of the proposed system. To the best of our knowledge, this is the first paper to discuss about a storage data audit scheme for fog-assisted cloud storage as well as the compensation mechanism for the service providers of the fog-storage service providers.

关键词： fog computing cloud computing network storage data audit merkle hash tree integer factorization payment transparency

Solar Power Plant Network Packet-Based Anomaly Detection System for Cybersecurity

维普期刊数据库

同方期刊数据库评论

在线全文

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2023年第10期77卷 757-779页

作者： Ju Hyeon Lee Jiho Shin jung taek seo Department of Information Security Gachon UniversitySeongnam13120Korea Police Science Institute Korean National Police UniversityAsan31539Korea Department of Computer Engineering Gachon UniversitySeongnam13120Korea

As energy-related problems continue to emerge,the need for stable energy supplies and issues regarding both environmental and safety require urgent *** energy is becoming increasingly important,with solar power accounting for the most significant proportion of *** the scale and importance of solar energy have increased,cyber threats against solar power plants have also ***,we need an anomaly detection system that effectively detects cyber threats to solar power ***,as mentioned earlier,the existing solar power plant anomaly detection system monitors only operating information such as power generation,making it difficult to detect *** address this issue,in this paper,we propose a network packet-based anomaly detection system for the Programmable Logic Controller(PLC)of the inverter,an essential system of photovoltaic plants,to detect cyber *** and vulnerabilities in solar power plants were analyzed to identify cyber threats in solar power *** analysis shows that Denial of Service(DoS)and Manin-the-Middle(MitM)attacks are primarily carried out on inverters,aiming to disrupt solar plant *** develop an anomaly detection system,we performed preprocessing,such as correlation analysis and normalization for PLC network packets data and trained various machine learning-based classification models on such *** Random Forest model showed the best performance with an accuracy of 97.36%.The proposed system can detect anomalies based on network packets,identify potential cyber threats that cannot be identified by the anomaly detection system currently in use in solar power plants,and enhance the security of solar plants.

关键词： Renewable energy solar power plant cyber threat cybersecurity anomaly detection machine learning network packet

Improving Method of Anomaly Detection Performance for Industrial IoT Environment

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第9期72卷 5377-5394页

作者： Junwon Kim Jiho Shin Ki-Woong Park jung taek seo Department of Information Security Engineering Gachon UniversitySeongnam13120Korea Police Science Institute Korea National Police UniversityAsan31539Korea SysCore Lab. Sejong UniversitySeoul05006Korea Department of Computer Engineering Gachon UniversitySeongnam13120Korea

Industrial Control System(ICS),which is based on Industrial IoT(IIoT),has an intelligent mobile environment that supports various mobility,but there is a limit to relying only on the physical security of the ICS *** to various threat factors that can disrupt the workflow of the IIoT,machine learning-based anomaly detection technologies are being presented;it is also essential to study for increasing detection performance to minimize model errors for promoting stable ICS *** this paper,we established the requirements for improving the anomaly detection performance in the IIoT-based ICS environment by analyzing the related *** that,we presented an improving method of the performance of a machine learning model specialized for IIoT-based ICS,which increases the detection rate by applying correlation coefficients and clustering;it provides a mechanism to predict thresholds on a ***,we adopted the HAI dataset environment that actively reflected the characteristics of IIoT-based ICS and demonstrated that performance could be improved through comparative experiments with the traditional method and our proposed *** presented method can further improve the performance of commonly applied error-based detection techniques and includes a primary method that can be enhanced over existing detection techniques by analyzing correlation coefficients between features to consider feedback between ICS *** can contribute to improving the performance of several detection models applied in ICS and other areas.

关键词： Industrial IoT industrial control system anomaly detection clustering algorithm correlation coefficient

Network Traffic Obfuscation System for IIoT-Cloud Control Systems

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2022年第9期72卷 4911-4929页

作者： Yangjae Lee Sung Hoon Baek jung taek seo Ki-Woong Park SysCore Lab. Sejong UniversitySeoul05006Korea Department of Computer System Engineering Jungwon UniversityChungcheongbuk-do28024Korea Department of Computer Engineering Gachon UniversityGyeonggi-do13120Korea

One of the latest technologies enabling remote control,operational efficiency upgrades,and real-time big-data monitoring in an industrial control system(ICS)is the IIoT-Cloud ICS,which integrates the Industrial Internet of Things(IIoT)and the cloud into the *** an ICS benefits from the application of IIoT and the cloud in terms of cost reduction,efficiency improvement,and real-time monitoring,the application of this technology to an ICS poses an unprecedented security risk by exposing its terminal devices to the outside *** adversary can collect information regarding senders,recipients,and prime-time slots through traffic analysis and use it as a linchpin for the next attack,posing a potential threat to the *** address this problem,we designed a network traffic obfuscation system(NTOS)for the IIoT-Cloud ICS,based on the requirements derived from the ICS characteristics and limitations of existing NTOS *** a strategy to solve this problem wherein a decrease in the traffic volume facilitates traffic analysis or reduces the packet transmission speed,we proposed an NTOS based on packet scrambling,wherein a packet is split into multiple pieces before transmission,thus obfuscating network *** minimize the ICS modification and downtime,the proposed NTOS was designed using an agentbased *** addition,for the ICS network traffic analyzer to operate normally in an environment wherein the NTOS is applied,a rule-based NTOS was adopted such that the actual traffic flow is known only to the device that is aware of the rule and is blocked for *** experimental results verified that the same time requested for response and level of difficulty of analysis were maintained by the application of an NTOS based on packet scrambling,even when the number of requests received by the server per second was *** network traffic analyzer of the ICS can capture the packet flow by using the pre-communicated NTOS *** addition,by designing an N

关键词： Cloud computing system moving-target defense container orchestration

Encrypted Cyberattack Detection System over Encrypted IoT Traffic Based onStatistical Intelligence

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2024年第11期141卷 1519-1549页

作者： Il Hwan Ji Ju Hyeon Lee Seungho Jeon jung taek seo Department of Information Security Gachon UniversitySeongnam13120Republic of Korea Department of Computer Engineering(Smart Security) Gachon UniversitySeongnam13120Republic of Korea

In the early days of IoT’s introduction, it was challenging to introduce encryption communication due to the lackof performance of each component, such as computing resources like CPUs and batteries, to encrypt and decryptdata. Because IoT is applied and utilized in many important fields, a cyberattack on IoT can result in astronomicalfinancial and human casualties. For this reason, the application of encrypted communication to IoT has beenrequired, and the application of encrypted communication to IoT has become possible due to improvements inthe computing performance of IoT devices and the development of lightweight cryptography. The applicationof encrypted communication in IoT has made it possible to use encrypted communication channels to launchcyberattacks. The approach of extracting evidence of an attack based on the primary information of a networkpacket is no longer valid because critical information, such as the payload in a network packet, is encrypted byencrypted communication. For this reason, technology that can detect cyberattacks over encrypted network trafficoccurring in IoT environments is required. Therefore, this research proposes an encrypted cyberattack detectionsystem for the IoT (ECDS-IoT) that derives valid features for cyberattack detection from the cryptographic networktraffic generated in the IoT environment and performs cyberattack detection based on the derived features. ECDS-IoT identifies identifiable information from encrypted traffic collected in IoT environments and extracts statistics-based features through statistical analysis of identifiable information. ECDS-IoT understands information aboutnormal data by learning only statistical features extracted from normal data. ECDS-IoT detects cyberattacks basedonly on the normal data information it has trained. To evaluate the cyberattack detection performance of theproposed ECDS-IoT in this research, ECDS-IoT used CICIoT2023, a dataset containing encrypted traffic generatedby normal and

关键词： IoT cybersecurity IoT encrypted traffic IoT cyberattack detection

IWTW:A Framework for IoWT Cyber Threat Analysis

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computer Modeling in Engineering & Sciences 2024年第11期141卷 1575-1622页

作者： GyuHyun Jeon Hojun Jin Ju Hyeon Lee Seungho Jeon jung taek seo Department of Information Security Gachon UniversitySeongnam13120Republic of Korea Department of Computer Engineering(Smart Security) Gachon UniversitySeongnam13120Republic of Korea

The Internet of Wearable Things(IoWT)or Wearable Internet of Things(WIoT)is a new paradigm that combines IoT and wearable *** in IoT technology have enabled the miniaturization of sensors embedded in wearable devices and the ability to communicate data and access real-time information over low-power mobile *** devices are highly interdependent with mobile ***,due to their limited processing power and bandwidth,IoWT devices are vulnerable to cyberattacks due to their low level of *** modeling and frameworks for analyzing cyber threats against existing IoT or low-power protocols have been actively *** threat analysis framework used in existing studies was limited to specific protocols and did not target IoWT *** addition,In the literature surveyed to date,no cyber threat analysis framework is targeting ***,the threat model presented in the existing research on cyber threat analysis and modeling for IoWT is specialized for specific *** addition,because it does not present standardized attack tactics and techniques,there is a limitation in that it is difficult to identify attacks *** this paper,we propose an Internet of Wearable Things threat analysis frameWork(IWTW)framework that can derive security threats through systematic analysis of IoWT attack cases and possible security threats and perform cyber threat analysis based on *** methodology for developing the IWTW framework consists of three steps:Analysis,Standardization,and *** attack cases and potential security threats are analyzed in the analysis *** the standardization stage,attack tactics and techniques derived from the analysis of attack cases and potential security threats are standardized,resulting in 3 attack categories,18 attack tactics,and 68 attack *** the compilation stage,standardized security threats are combined to develop the IWTW framework *** present four case st

关键词： Internet of wearable things wearable device threat framework security threat

Design the IoT Botnet Defense Process for Cybersecurity in Smart City

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Intelligent Automation & Soft Computing 2023年第9期37卷 2979-2997页

作者： Donghyun Kim Seungho Jeon Jiho Shin jung taek seo Department of Information Security Gachon UniversitySeongnam13120Korea Department of Smart Security Gachon UniversitySeongnam13120Korea Police Science Institute Korean National Police UniversityAsan31539Korea Department of Computer Engineering Gachon UniversitySeongnam13120Korea

The smart city comprises various infrastructures,including health-care,transportation,manufacturing,and energy.A smart city’s Internet of Things(IoT)environment constitutes a massive IoT environment encom-passing numerous *** many devices are installed,managing security for the entire IoT device ecosystem becomes challenging,and attack vectors accessible to attackers ***,these devices often have low power and specifications,lacking the same security features as general Information Technology(IT)systems,making them susceptible to *** vulnerability is particularly concerning in smart cities,where IoT devices are connected to essential support systems such as healthcare and *** can lead to significant human and property *** rep-resentative attack that exploits IoT device vulnerabilities is the Distributed Denial of Service(DDoS)attack by forming an IoT *** a smart city environment,the formation of IoT botnets can lead to extensive denial-of-service attacks,compromising the availability of services rendered by the ***,the same IoT devices are typically employed across various infrastructures within a smart city,making them potentially vulnerable to similar *** paper addresses this problem by designing a defense process to effectively respond to IoT botnet attacks in smart city *** proposed defense process leverages the defense techniques of the MITRE D3FEND framework to mitigate the propagation of IoT botnets and support rapid and integrated decision-making by security personnel,enabling an immediate response.

关键词： Smart city IoT botnet cybersecurity

Identifying and Verifying Vulnerabilities through PLC Network Protocol and Memory Structure Analysis

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Computers, Materials & Continua 2020年第10期65卷 53-67页

作者： Joo-Chan Lee Hyun-Pyo Choi Jang-Hoon Kim Jun-Won Kim Da-Un jung Ji-Ho Shin jung-taek seo Department of Information Security Engineering Soonchunhyang UniversityAsan31538Korea

Cyberattacks on the Industrial Control System(ICS)have recently been increasing,made more intelligent by advancing *** such,cybersecurity for such systems is attracting *** a core element of control devices,the Programmable Logic Controller(PLC)in an ICS carries out on-site control over the ICS.A cyberattack on the PLC will cause damages on the overall ICS,with Stuxnet and Duqu as the most representative ***,cybersecurity for PLCs is considered essential,and many researchers carry out a variety of analyses on the vulnerabilities of PLCs as part of preemptive efforts against *** this study,a vulnerability analysis was conducted on the XGB *** vulnerabilities were identified by analyzing the network protocols and memory structure of PLCs and were utilized to launch replay attack,memory modulation attack,and FTP/Web service account theft for the verification of the *** on the results,the attacks were proven to be able to cause the PLC to malfunction and disable it,and the identified vulnerabilities were defined.

关键词： Industrial control system programmable logic controller cybersecurity network protocol vulnerability

Topic Modeling Based Warning Prioritization from Change Sets of Software Repository

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Journal of Computer Science & Technology 2020年第6期35卷 1461-1479页

作者： jung-Been Lee taek Lee Hoh Peter In College of Informatics Korea UniversitySeoul 02841Korea College of Knowledge-Based Services Engineering Sungshin UniversitySeoul 02844Korea

Many existing warning prioritization techniques seek to reorder the static analysis warnings such that true positives are provided first. However, excessive amount of time is required therein to investigate and fix prioritized warnings because some are not actually true positives or are irrelevant to the code context and topic. In this paper, we propose a warning prioritization technique that reflects various latent topics from bug-related code blocks. Our main aim is to build a prioritization model that comprises separate warning priorities depending on the topic of the change sets to identify the number of true positive warnings. For the performance evaluation of the proposed model, we employ a performance metric called warning detection rate, widely used in many warning prioritization studies, and compare the proposed model with other competitive techniques. Additionally, the effectiveness of our model is verified via the application of our technique to eight industrial projects of a real global company.

关键词： automated static analysis topic modeling warning prioritization