Sap Se

Sands Lab Inc.

Sap Ag

Seoul National University

Korea Kumho Petrochemical Co., Ltd.

Industry Academic Cooperation Foundation Hallym University

Transact in Memory, Inc.

Ki Hong Kim

Sung Heun Wi

Stefan A Baeuerle

Juchang Lee

Di Wu

Sang Kyun Cha

Kyu Hwan Kim

Chul Won Lee

Taehyung Lee

Yongsik Yoon

Beomsoo Kim

Myunggon Park

Jeong Hee Won

Wonyoung Kwak

Hyun Jong Lee

Min Jun Choi

Sung Eun Park

Christian Bensberg

Norman May

Alexander Boehm

Daniel Hutzel

Jaehyok Chong

Jane Jung Lee

Sang Il Song

Young Goo Cho

Sang Yong Hwang

Jeong Ae Han

Jin Uk Bae

Long Zhang

Zhi Qiao

Florian Scheid

Johannes Merx

Timm Falter

Steffen Geissinger

Andreas Kemmler

Chanho Jeong

Joo Young Yoon

Dong Hwan Kim

Jaeyun Noh

Bjoern Mielenhausen

Sangyong Hwang

Andreas Balzar

Hyun Kyung Sung

Dong Hoon Oh

Kai Morich

Sang Hyo Ryu

Chung Heon Jeong

Sung Jae Kim

Won Seok Kim

Boyung Lee

Taeyoung Jeong

Steffen Weinstock

Se Jun Jang

Junhee Woo

Gun Yong Sung

Ju Chang Lee

Armin Risch

Christoph Glania

Kisung Park

Young-Koo Lee

Jiyoung Yoo

Chang Gyun Kim

Md Mostofa Kamal Rasel

Provided is a cyber threat information processing method including obtaining disassembled code by dissembling an executable file, generating an instruction sequence based on a control flow according to a relationship between instructions in the disassembled code, converting the generated instruction sequence into a feature data set related to a cyber threat, and acquiring cyber threat information by learning the feature data set using an artificial intelligence (AI) model.

Cyber threat information processing apparatus, cyber threat information processing method, and storage medium storing cyber threat information processing program

In some embodiments, a method receives a statement graph for a procedure that is used to access data and determines a set of producer statements and a set of consumer statements in the statement graph. A producer statement produces a variable for a consumer statement, and the consumer statement consumes the variable from the producer statement. The method optimizes the statement graph to generate an optimized procedure by moving an operator from a consumer statement to a producer statement or by moving an operator from a producer statement to a consumer statement. The optimized procedure is output based on the optimized statement graph.

Operator movement optimization technique for procedures

Provided is a cyber threat information processing method including receiving a CTI analysis request for assembly code from a client; analyzing the assembly code to obtain analysis information of the CTI for the assembly code; generating a CTI query related to a file based on the analyzed CTI and delivering the CTI query to a natural language model; and providing natural language description information according to the CTI query obtained from the CTI for the assembly code and the natural language model.

A cyber threat information processing method, a cyber threat information processing apparatus, and a storage medium storing a program for processing cyber threat information may analyze and process an executable file and perform clustering to generate one or more malware clusters.

Provided is a cyber threat information processing method including receiving input of a file or information on the file from a user through at least one interface; processing cyber threat information related to the received or input file or the information on the file; providing the processed cyber threat information to the user through a user interface; and performing natural language processing on the processed cyber threat information.

Provided is a cyber threat information processing method including collecting a webpage and classifying data included in the webpage or data linked according to link depth, detecting whether the data included in the webpage or the linked data is malicious on a plurality of layers, the plurality of layers including at least two of antivirus-based malicious pattern detection, signature malicious pattern detection according to a certain rule, or malignancy detection according to an artificial intelligence (AI) algorithm for the data, and providing or storing record data of the webpage when the data is detected to be malicious as a result of the detection.

A computer implemented method can execute a first query plan for a query, obtain statistics for internal nodes of a first query tree representing the first query plan, receive a second query tree representing a second query plan for the query, search for a matching internal node of the first query tree for a selected internal node of the second query tree, and responsive to finding the matching internal node of the first query tree, apply the statistics for the matching internal node of the first query tree to the selected internal node of the second query tree for estimating cost of the second query plan during query optimization of the query. Related systems and software for implementing the method are also disclosed.

Runtime statistics feedback for query plan cost estimation

A cyber threat information processing apparatus, a cyber threat information processing method, and a storage medium storing software that processes cyber threat information. A cyber threat information processing method including converting an executable file in an input file into a code block of a certain format, determining similarity between the converted code block and previously classified malware and classifying malware in the executable file, extracting natural language included in an electronic document associated with the classified malware, and registering the extracted natural language in association with the classified malware, and providing information about malware related to requested search for the malware and natural language related to the malware as search result information when a user requests the search for the malware.

Technologies are described for facilitating data workload capture, workload replay, and comparing the performance of a plurality of database systems. A plurality of requests for database operations are received from one or more database clients. The requests for database operations are executed. For the plurality of requests for database operations, execution context information is generated for a plurality of execution contexts. For the plurality of requests for database operations, a plurality of performance measures are generated. The execution context information and the performance measures are stored in a workload capture store, such as a file. The workload capture file is useable to replay the captured workload at a second database system using at least a portion of the execution context information and at least a portion of the performance measures.

Database workload capture and replay

A purification device is provided. The purification device includes: an injection channel having an inlet provided on one end thereof; a purification channel and a discharge channel which branch off from the other end of the injection channel via a mesh part, and the remaining substance to be purified is discharged through the discharge channel; an ion-selective membrane contacting at least one side of the mesh part; and a buffer part arranged on the other side of the ion-selective membrane which is in contact with the mesh part, wherein the mesh part has an ion-selective coating layer formed on the surface thereof, and when an electric field is applied, an ion concentration polarization phenomenon occurs to the other end of the injection channel and to the adjacent portion of the mesh part, whereby an ion depletion zone is formed.

Device for purifying fluid using ion concentration polarization phenomenon and purification system

Implementations of the present disclosure include receiving a query, the query including an expression macro (EM), processing the query to provide a raw parse tree, the raw parse tree including an initial node representative of the EM, retrieving metadata corresponding to the EM, the metadata including a definition string, replacing the initial node with a node based on the definition string to provide a consumable parse tree, and executing the query within the database system using the consumable parse tree to provide a query result.

Dynamic query expressions

Implementations of the present disclosure include receiving, by a query processing server, a first query, the first query including a syntax indicating that precision loss is allowed, processing, by the query processing server, the first query to provide a first QEP, optimization of which would result in precision loss in a generated query result, determining that the syntax is provided, and in response, optimizing the first QEP to provide an optimized QEP, executing the optimized QEP to generate a query result that includes data stored within a database system, the query result having reduced accuracy relative to a query result that would be generated based on the first QEP, and providing the query result as output from the database system.

Selectively allowing query optimization in query processing

Methods and apparatus, including computer program products, are provided for a case join. In one aspect, there is provided method, which may include receiving a query for a predefined view that is configured to inhibit modification; detecting whether the predefined view includes a database table extended to include an additional column; and generating, in response to the query, a view based on a case join, when the predefined view includes the database table extended to include the additional column. Related apparatus, systems, methods, and articles are also described.

Case join decompositions

Growing community of inventors

Seoul, South Korea

Ki Hong Kim