Electronics and Telecommunications Research Institute

Seon-Gyoung Sohn

Yun-Kyung Lee

Young Ho Kim

Jeong Nyeo Kim

Kyeong Tae Kim

Jae Deok Lim

Jung-Chan Na

Byoung-Koo Kim

Ik Kyun Kim

Jeong-Nyeo Kim

Kyeong-Tae Kim

Jae-Deok Lim

Dong Ho Kang

Youngjun Heo

Young-Ho Kim

Chi Yoon Jeong

Beom Hwan Chang

Hyun-joo Kim

Byeong-Cheol Choi

Jong-Hyun Kim

Soo-Hyung Lee

Boo-Sun Jeon

Sung-Won Sohn

Won-Joo Park

Hyo-Chan Bang

Jae-Hoon Nah

Chi-Yoon Jeong

Jong-Soo Jang

Seoung-Hyeon Lee

Young-Jun Heo

Dong-Ho Kang

Beom-Hwan Chang

Geon-Lyang Kim

Jong-Ho Ryu

Display panel with graphical user interface

Disclosed herein are an apparatus and method for providing sensor data in a sensor device based on a blockchain. A method for providing sensor data in a sensor device based on a blockchain may include creating a device record using encrypted device identification information, registering the device record in the blockchain, creating an event record using event information collected from a sensor, registering the header of the event record, including information about a link to the device record, in the blockchain, and distributing the body of the event record, the body being linked to the header of the event record.

Apparatus and method for providing sensor data based on blockchain

Disclosed are an apparatus and a method for Internet of Things (IoT) device security. The method includes unifying a port in a first IoT device for communication, receiving, by the first IoT device, a packet from a second IoT device through the port, identifying whether the packet in the first IoT device is in a preset packet form, verifying content of the packet in the first IoT device when the packet is in the preset packet form, and opening the port for providing a service in the first IoT device when the verifying of the packet content is successful.

Apparatus and method for security of internet of things device

A communication method and an IoT device in a multi-MAC (Media Access Control)-operating environment. The communication method in the multi-MAC-operating environment, including synchronous MAC and asynchronous MAC, includes periodically transmitting, by the IoT device included in the multi-MAC-operating environment, a first message to a first device; determining, by the IoT device, whether to transmit a second message; transmitting, by the IoT device, a preamble packet to a second device, to which the second message is to be transmitted, when the second message is determined to be transmitted; and transmitting, by the IoT device, the second message to the second device.

Method for communicating in multi-MAC-operating environment and IoT apparatus

Disclosed herein are a one-way data transmission apparatus, a one-way data reception apparatus, and a one-way data transmission/reception method using the apparatuses. The one-way data transmission/reception method uses a one-way data transmission apparatus and a one-way data reception apparatus, and includes receiving data from a high-security zone through a one-way path, generating tag information of the data, sending a message in which the tag information is added to the data to the one-way data reception apparatus, receiving the message from the one-way data transmission apparatus, checking the tag information of the message, and transmitting the data to a low-security zone.

One-way data transmission apparatus, one-way data reception apparatus, and one-way data transmission/reception method using the same

A method for detecting an abnormal traffic on a control system protocol, includes: checking whether session information exists in a management table; adding a new entry to the management table; checking whether a transaction ID in a table entry is the same as that of the received MODBUS request message; and checking whether data and length thereof of the received MODBUS request message are the same as those in the table entry. Further, the method includes detecting an abnormal traffic; and updating the table entry with packet information of the MODBUS request message.

Method for detecting abnormal traffic on control system protocol

An apparatus for detecting an abnormality sign in a control system, the control system comprising control equipments, network equipments, security equipments or server equipments, the apparatus includes an information collection module configured to collect system information, network information, security event information or transaction information in interworking with a control equipments, network equipments, security equipments or server equipments. The apparatus includes storage module that stores the information collected by the information collection module. The apparatus includes an abnormality detection module configured to analyze a correlation between the collected information and a prescribed security policy to detect whether there is an abnormality sign in the control system.

Apparatus and method for detecting abnormality sign in control system

A network monitoring system includes: a traffic information generating apparatus for generating traffic information. Further, the network monitoring system includes a security event collecting apparatus for collecting the traffic information generated by the traffic information generating apparatus by referring to pre-stored traffic information, grouping the collected traffic information, and then extracting service information. Furthermore, the network monitoring system includes a service abnormal condition detecting apparatus for detecting a port number of a transport layer of service information extracted from the security event collecting apparatus and the occurrence frequency of the transport layer, determining the continuity of the port number and the uniformity of the occurrence frequency, and displaying a service abnormal condition.

Method and system for providing network monitoring, security event collection apparatus and service abnormality detection apparatus for network monitoring

An apparatus and method for visualizing a network condition related to a network security are provided. The apparatus includes a traffic feature extracting unit, a network condition displaying unit, and a traffic abnormal condition determining unit. The traffic feature extracting unit extracts information including source address, source port, destination address, and destination port from network traffics, selects two of the extracted information, and calculates unique dispersion degrees of two unselected information. The network condition displaying unit displays a two-dimensional cube expressed using the calculated unique dispersion degrees for the classified traffics. The traffic abnormal condition determining unit determines whether the traffics are in an abnormal condition or not based on the two-dimensional security cube.

Apparatus and method for visualizing network situation using security cube

Growing community of inventors

Daejeon, South Korea

Seon-Gyoung Sohn