Electronics and Telecommunications Research Institute

Dongyang Gangchul., Ltd.

Sang-Woo Park

E-Joong Yoon

Byung-Chul Bae

Byung-Joon Kim

Hyoung-Chun Kim

Jung-Hwan Moon

Man-Hee Lee

Deok-Jin Kim

Jung-Hee Lee

Jin-Woo Park

Jong-Moon Lee

Dae-Seon Park

Chul-Woo Lee

Sang-Wook Lee

Young-Han Choi

Hyo-Won Kim

Jung-Hyung Park

Jae-Woo Han

Bon-Seok Koo

Eung-Ki Park

Sung-Ryoul Lee

Hye-Ryoun Chung

Young-Jae Maeng

Jin-Ha Hwang

Jong-Hu Lee

Byoung-Jin Han

Hyun-Dong Park

Do-Bong Park

Kae-Hee Oh

A method and apparatus for quantifying the vulnerability of a system. The apparatus includes a vulnerability calculation unit, a target organization security level calculation unit, a network separation status calculation unit, an interim calculation unit, and a final score calculation unit. The vulnerability calculation unit converts each of the vulnerability identification results of the system into a vulnerability score. The target organization security level calculation unit calculates a target organization security level score based on a technology-field security level score and a management-field security level score. The network separation status calculation unit converts the status of the separation of the local network of the system into a network separation score. The interim calculation unit calculates an interim score. The final score calculation unit quantifies the vulnerability of the system by finally calculating a composite score using the interim score and a simulated intrusion success level.

Device for quantifying vulnerability of system and method therefor

An apparatus and method for verifying the integrity of firmware of an embedded system is provided. The apparatus for verifying the integrity of firmware of an embedded system includes a target integrity code obtainment unit for obtaining a target integrity code of firmware of the embedded system. A source integrity code obtainment unit obtains a source integrity code of source firmware. An integrity determination unit determines whether integrity of the firmware of the embedded system is maintained, by using the target integrity code and the source integrity code.

Apparatus and method for verifying integrity of firmware of embedded system

A method and an apparatus for authorizing online financial transactions are provided. The apparatus for authorizing online financial transactions includes: randomly selecting, using an apparatus for authorizing online financial transactions, a portion of main transaction information corresponding to a user and combining the selected information to create authorization information; converting the authorization information into a form displayed to the user through a specific process; providing the main transaction information and the converted authorization information to the user; receiving user select information, which is recognized by the user and is part of the main transaction information, and the converted authorization information provided to the user; and comparing the user select information with the authorization information and determining whether the user recognizes the authorization information based on the comparison results.

Apparatus and method for authorization of online financial transaction

A referer verification apparatus and method for controlling web traffic having malicious code are provided. In the referer verification method, whether a referer is present in a Hypertext Transfer Protocol (HTTP) packet is determined. If it is determined that the referer is present in the HTTP packet, Uniform Resource Locators (URLs) are extracted from a referer web page corresponding to the referer. The referer is verified based on a URL corresponding to a referer verification request received from a server and the extracted URLs. A Completely Automated Public Test to tell Computers and Humans Apart (CAPTCHA) verification procedure conducted by a user is performed based on results of the verification of the referer.

Referer verification apparatus and method

A system and method for detecting network intrusion by using a network processor are provided. The intrusion detection system includes: a first intrusion detector, configured to use a first network processor to perform intrusion detection on layer 3 and layer 4 of a protocol field among information included in a packet header of a packet transmitted to the intrusion detection system, and when no intrusion is detected, classify the packets according to stream and transmit the classified packets to a second intrusion detector; and a second intrusion detector, configured to use a second network processor to perform intrusion detection through deep packet inspection (DPI) for the packet payload of the packets transmitted from the first intrusion detector. Thereby, intrusion detection for high-speed packets can be performed in a network environment.

Two-stage intrusion detection system for high-speed packet processing using network processor and method thereof

An apparatus and method for preventing falsification of a client screen is provided, in which a web server dynamically generates URIs and provides them to clients, thus preventing the falsification of client screens due to a web injection attack or a memory hacking attack. The apparatus includes a random web generation unit for converting an identical web page into random URIs that are randomly generated, at a request of a plurality of clients, generating different random web sources, and providing the different random web sources to the respective clients. A web falsification determination unit compares display web source eigenvalues respectively generated by the clients with respect to any one of the random web sources with a generative web source eigenvalue for the one of the random web sources, thus determining whether screens corresponding to the random web sources displayed on the respective clients have been falsified.

Apparatus and method for preventing falsification of client screen

A mobile terminal having security diagnosis functionality and a method of making a diagnosis on the security of the mobile terminal are provided. The mobile terminal includes a system check unit, an interface unit, a blacklist check unit, and a security diagnosis unit. The system check unit collects the basic information of the mobile terminal by performing a system check on the mobile terminal. The interface unit provides the basic information of the mobile terminal to a user and receives a control command from the user. The blacklist check unit checks whether at least one application installed in the mobile terminal is present in a blacklist registered on a server. The security diagnosis unit checks whether an abnormality has occurred in the corresponding application based on results of the comparison between the basic information of the mobile terminal with preset abnormality detection reference information and the control command.

Mobile terminal having security diagnosis functionality and method of making diagnosis on security of mobile terminal

Disclosed is a reinforcement frame for a display panel using aluminum alloy extrusion members and an apparatus and a method for manufacturing the same, wherein, while a number of unitary aluminum alloy extrusion members abut one another, a welding head is used to cause the abutting portions to undergo friction resulting from high-speed rotation so that the members are melted and welded to one another by the resulting frictional heat.

Reinforcement frame for a display panel using extruded aluminum alloy and apparatus and method for manufacturing the same

Growing community of inventors

Daejeon, South Korea

Sang-Woo Park