Electronics and Telecommunications Research Institute

Tae Ghyoon Kim

Do Hoon Lee

Young Han Choi

Hyoung Chun Kim

Cheol Won Lee

Hyung Geun Oh

Eungki Park

Seok Jin Choi

SoonJwa Hong

Jin Seok Yang

Kyeong-Ho Kim

Moonsu Jang

Joonsoo Kim

An apparatus and a method for providing real-time cybersecurity training. The apparatus for providing real-time cybersecurity training includes a trainee interface unit for communicating with an access device of a trainee who participates in real-time cybersecurity training for a control system, a virtual environment provision unit for providing a virtual environment that includes at least one of a virtual network environment and a virtual system environment corresponding to the real-time cybersecurity training, and a target facility representation unit for displaying the state of a target facility, which is a physical facility that needs to be protected, and the state of a control device of the control system depending on the real-time cybersecurity training.

Apparatus and method for providing real-time cybersecurity training in control system field

Provided are a system and method for detecting a malicious script. The system includes a script decomposition module for decomposing a web page into scripts, a static analysis module for statically analyzing the decomposed scripts in the form of a document file, a dynamic analysis module for dynamically executing and analyzing the decomposed scripts, and a comparison module for comparing an analysis result of the static analysis module and an analysis result of the dynamic analysis module to determine whether the decomposed scripts are malicious scripts. The system and method can recognize a hidden dangerous hypertext markup language (HTML) tag irrespective of an obfuscation technique for hiding a malicious script in a web page and thus can cope with an unknown obfuscation technique.

System and method for detecting malicious script

A system and method for managing a network by value-based estimation is provided. A network device requesting communication is defined as an active point and a network device receiving a request for communication is defined as a passive point. A value of a network device is determined according to the number of active points connected to the corresponding network device, and a value of a network device that is in a path of communication between network devices is determined based on a value of a network device passing through the corresponding network device. When a policy for changing a network environment is transferred in a state where the values of the network devices have been estimated, a policy conflict test is performed on the basis of the estimated values of the network devices, thereby determining application of the policy in due consideration of the values and significance of the network devices.

System and method for managing network by value-based estimation

A method and apparatus for digital forensics are provided. The apparatus for digital forensics includes a page file extractor for extracting a page file stored in a target storage medium, a stored-page feature extractor for extracting features of pages stored in the extracted page file, a page classifier for comparing the extracted features of the pages with at least one predetermined classification criterion and classifying the pages according to the comparison results, and a digital forensics unit for performing digital forensics according to the classified pages. According to the method and apparatus, it is possible to perform digital forensics using only information of a page file.

Method and apparatus for digital forensics

Provided are a fuzzing system and method of a distributed computing environment (DCE) remote procedure call (RPC) object. The fuzzing system includes a file manager, a random data generator, a RPC packet, and a packet injector. The file manager obtains necessary information by parsing and analyzing an idl file for a target object for fuzzing and a file having information about a Named Pipe file. The random data generator generates a random value using a system clock as a factor. The RPC packet creator embodies protocols used for RPC communication by functions and generating a RPC packet for RPC communication. The packet injector inserts the necessary information and the random value into the generated RPC packet and transmits the generated RPC packet to the target object for fuzzing.

Growing community of inventors

Daejeon, South Korea

Tae Ghyoon Kim