Abstract: Disclosed herein are a hardware security module, a device having the hardware security module, and a method for operating the device. The method for verifying integrity of executable code in a device includes dividing, by a Micro-Control Unit (MCU), executable code into multiple blocks, generating, by the MCU, hash values corresponding to the blocks resulting from the division, storing, by a Hardware Security Module (HSM), the generated hash values, calculating, by the MCU, at least one hash value, among hash values of the multiple blocks when the executable code boots, and comparing, by the HSM, the calculated hash value with a hash value corresponding to the calculated hash value, among the hash values stored in the HSM.

Abstract: Disclosed herein are an apparatus and method for authenticating an IoT device. The method, performed by the IoT device authentication apparatus, includes transmitting, by the IoT device authentication apparatus, a random number to the IoT device and encrypting, by the IoT device authentication apparatus, the random number using a previously registered first white-box cryptography value through a white-box cryptography method; generating, by the IoT device, a first device response value from a previously registered first device challenge value using a Physical Unclonable Function (PUF) and encrypting, by the IoT device, the random number, received from the IoT device authentication apparatus, using the first device response value; and performing, by the IoT device authentication apparatus, authentication of the IoT device by checking whether the random number encrypted using the white-box cryptography method matches the random number encrypted using the PUF, which is received from the IoT device.

Abstract: Disclosed herein are an apparatus and method for device authentication. The method for device authentication based on a certificate using a PUF, performed by an apparatus for device authentication based on a certificate using a PUF, includes acquiring previously stored first Challenge-Response-Pair (CRP) information corresponding to identification information received from a device that requests authentication and generating a certificate including a public key generated using the first CRP information; transmitting a message in which the certificate encrypted using the first response value of the first CRP information as a server secret key and the first challenge value of the first CRP information are included to the device; and authenticating the device by verifying an encrypted signature message received from the device through a secure channel.

Abstract: Disclosed herein are a hardware security module, a device having the hardware security module, and a method for operating the device. The method for verifying integrity of executable code in a device includes dividing, by a Micro-Control Unit (MCU), executable code into multiple blocks, generating, by the MCU, hash values corresponding to the blocks resulting from the division, storing, by a Hardware Security Module (HSM), the generated hash values, calculating, by the MCU, at least one hash value, among hash values of the multiple blocks when the executable code boots, and comparing, by the HSM, the calculated hash value with a hash value corresponding to the calculated hash value, among the hash values stored in the HSM.

Abstract: Disclosed herein are an apparatus and method for authenticating an IoT device. The method, performed by the IoT device authentication apparatus, includes transmitting, by the IoT device authentication apparatus, a random number to the IoT device and encrypting, by the IoT device authentication apparatus, the random number using a previously registered first white-box cryptography value through a white-box cryptography method; generating, by the IoT device, a first device response value from a previously registered first device challenge value using a Physical Unclonable Function (PUF) and encrypting, by the IoT device, the random number, received from the IoT device authentication apparatus, using the first device response value; and performing, by the IoT device authentication apparatus, authentication of the IoT device by checking whether the random number encrypted using the white-box cryptography method matches the random number encrypted using the PUF, which is received from the IoT device.

Abstract: A hot-work mold steel includes 0.37 to 0.46 wt % of carbon (C), 0.25 to 0.5 wt % of silicon (Si), 0.36 to 0.56 wt % of manganese (Mn), 2.0 to 5.0 wt % of chromium (Cr), 1.4 to 2.6 wt % of molybdenum (Mo), 0.4 to 0.8 wt % of vanadium (V), 0.0007 to 0.004 wt % of boron (B), 0.002 to 0.022 wt % of aluminum (Al), 0.001 to 0.09 wt % of titanium (Ti) and the remainder of iron (Fe) and inevitable impurities. The hot-work mold steel exhibits superior thermal conductivity, hardenability, durability, and nitriding characteristics, and increased resistance to heat check and melt-out. A die-casting mold made of the steel has improved thermal conductivity regardless of mold size and a prolonged life cycle and can improve the surface quality in manufactured parts.

Abstract: Disclosed herein is a method of operating an authentication server based on a Physical Unclonable Function (PUF), which includes transmitting a Challenge-Response Pair (CRP) update request message to a user device when a CRP update event occurs, receiving a CRP update response message from the user device in response to the CRP update request message, generating a secret key corresponding to the CRP update request message, decrypting the CRP update response message with the secret key, and updating a CRP corresponding to the secret key in a database using the decrypted CRP update response message.

Abstract: A secret information generation apparatus and a method for operating the secret information generation apparatus. The secret information generation apparatus includes a resistor-capacitor circuit, and a microcontroller unit including a first pin connected to an input terminal of the resistor-capacitor circuit and a second pin connected to an output terminal of the resistor-capacitor circuit, wherein the microcontroller unit is configured to transmit a digital value corresponding to a challenge to the resistor-capacitor circuit through the first pin, receive an output value of the resistor-capacitor circuit corresponding to the digital value through the second pin, convert the received value into a digital value using an analog-to-digital converter, extract one or more valid bits from the converted digital value, and then generate a response.

Abstract: A hot-work mold steel includes 0.37 to 0.46 wt % of carbon (C), 0.25 to 0.5 wt % of silicon (Si), 0.36 to 0.56 wt % of manganese (Mn), 2.0 to 5.0 wt % of chromium (Cr), 1.4 to 2.6 wt % of molybdenum (Mo), 0.4 to 0.8 wt % of vanadium (V), 0.0007 to 0.004 wt % of boron (B), 0.002 to 0.022 wt % of aluminum (Al), 0.001 to 0.09 wt % of titanium (Ti) and the remainder of iron (Fe) and inevitable impurities. The hot-work mold steel exhibits superior thermal conductivity, hardenability, durability, and nitriding characteristics, and increased resistance to heat check and melt-out. A die-casting mold made of the steel has improved thermal o conductivity regardless of mold size and a prolonged life cycle and can improve the surface quality in manufactured parts.

Abstract: A hot-work mold steel includes 0.37 to 0.46 wt % of carbon (C), 0.25 to 0.5 wt % of silicon (Si), 0.36 to 0.56 wt % of manganese (Mn), 2.0 to 5.0 wt % of chromium (Cr), 1.4 to 2.6 wt % of molybdenum (Mo), 0.4 to 0.8 wt % of vanadium (V), 0.0007 to 0.004 wt % of boron (B), 0.002 to 0.022 wt % of aluminum (Al), 0.001 to 0.09 wt % of titanium (Ti) and the remainder of iron (Fe) and inevitable impurities. The hot-work mold steel exhibits superior thermal conductivity, hardenability, durability, and nitriding characteristics, and increased resistance to heat check and melt-out. A die-casting mold made of the steel has improved thermal conductivity regardless of mold size and a prolonged life cycle and can improve the surface quality in manufactured parts.

Abstract: A hot-work mold steel includes 0.37 to 0.46 wt % of carbon (C), 0.25 to 0.5 wt % of silicon (Si), 0.36 to 0.56 wt % of manganese (Mn), 2.0 to 5.0 wt % of chromium (Cr), 1.4 to 2.6 wt % of molybdenum (Mo), 0.4 to 0.8 wt % of vanadium (V), 0.0007 to 0.004 wt % of boron (B), 0.002 to 0.022 wt % of aluminum (Al), 0.001 to 0.09 wt % of titanium (Ti) and the remainder of iron (Fe) and inevitable impurities. The hot-work mold steel exhibits superior thermal conductivity, hardenability, durability, and nitriding characteristics, and increased resistance to heat check and melt-out. A die-casting mold made of the steel has improved thermal conductivity regardless of mold size and a prolonged life cycle and can improve the surface quality in manufactured parts.

Abstract: Disclosed herein are a one-way data transmission apparatus, a one-way data reception apparatus, and a one-way data transmission/reception method using the apparatuses. The one-way data transmission/reception method uses a one-way data transmission apparatus and a one-way data reception apparatus, and includes receiving data from a high-security zone through a one-way path, generating tag information of the data, sending a message in which the tag information is added to the data to the one-way data reception apparatus, receiving the message from the one-way data transmission apparatus, checking the tag information of the message, and transmitting the data to a low-security zone.

Abstract: According to an embodiment, the described hot mold steel may be excellent in high thermal conductivity to decrease the temperature difference in materials at high temperature, thereby making heat-checking properties excellent. When the hot mold steel according to the present disclosure is used for die casting, the cooling rate of the product produced using the die casting is quick, thereby improving the physical properties of the produced product and shortening the cooling time to improve productivity. Furthermore, the hot mold steel may have excellent high temperature durability, such that the die casting produced using the hot mold steel may have characteristics of a long life cycle.

Abstract: Disclosed herein are a one-way data transmission apparatus, a one-way data reception apparatus, and a one-way data transmission/reception method using the apparatuses. The one-way data transmission/reception method uses a one-way data transmission apparatus and a one-way data reception apparatus, and includes receiving data from a high-security zone through a one-way path, generating tag information of the data, sending a message in which the tag information is added to the data to the one-way data reception apparatus, receiving the message from the one-way data transmission apparatus, checking the tag information of the message, and transmitting the data to a low-security zone.

Abstract: An abnormal traffic detection apparatus and method based on Modbus communication pattern learning is provided. The abnormal traffic detection apparatus based on the Modbus communication pattern learning previously detects and responds to abnormal traffic on a Modbus/TCP protocol. According to the present invention, a communication service between control systems can be stably provided by previously detecting the abnormal traffic capable of interfering with a stable operation of the control system. Particularly, since the effective abnormal traffic on the Modbus/TCP protocol can be previously detected, security of the control system can be increased by rapid detection and response with respect to security threats on the Intranet of the control system, and availability can be secured.

Abstract: Provided is a packet monitoring method for a communication packet transmitted and received between a server and a control device including receiving the communication packet transmitted and received between the server and the control device; determining whether the received communication packet is abnormal, based on a history table including control information on communication packets received before the received communication packet and control information on the received communication packet; and performing a security operation according to results of the determination.

Abstract: An apparatus and method for blocking abnormal communication are disclosed herein. The apparatus for blocking abnormal communication includes a packet collection unit, a packet analysis unit, and an access control unit. The packet collection unit collects a packet via a network device. The packet analysis unit generates a system rule, a communication flow rule, and a packet characteristic rule based on the packet from the packet collection unit. The access control unit determines whether to block the packet by determining whether the packet from the packet collection unit satisfies the system rule, the communication flow rule and the packet characteristic rule.

Abstract: A method for detecting an abnormal traffic on a control system protocol, includes: checking whether session information exists in a management table; adding a new entry to the management table; checking whether a transaction ID in a table entry is the same as that of the received MODBUS request message; and checking whether data and length thereof of the received MODBUS request message are the same as those in the table entry. Further, the method includes detecting an abnormal traffic; and updating the table entry with packet information of the MODBUS request message.

Abstract: An abnormal traffic detection apparatus and method based on Modbus communication pattern learning is provided. The abnormal traffic detection apparatus based on the Modbus communication pattern learning previously detects and responds to abnormal traffic on a Modbus/TCP protocol. According to the present invention, a communication service between control systems can be stably provided by previously detecting the abnormal traffic capable of interfering with a stable operation of the control system. Particularly, since the effective abnormal traffic on the Modbus/TCP protocol can be previously detected, security of the control system can be increased by rapid detection and response with respect to security threats on the Intranet of the control system, and availability can be secured.

Abstract: Provided are a system and method for detecting an abnormal behavior of a control system by analyzing flows of the control system. Flow information of the control network is collected, and flows are classified according to the collected flow information and a flow group is generated. An abnormal behavior of the control system is detected by analyzing flows of the generate flow group. That is, internal systems of the control network are grouped according to functions, and a situation of a system of a group performing the same function is managed to thus quickly detect an abnormal behavior of the control system.