Abstract: Disclosed herein are image-based object recognition method and system by and in which a learning server performs image-based object recognition based on the learning of environment variable data. The image-based object recognition method includes: receiving an image acquired through at least one camera, and segmenting the image on a per-frame basis; primarily learning labeling results for one or more objects in the image segmented on a per-frame basis; performing primary reasoning by performing object detection in the image through a model obtained as a result of the primary learning; performing data labeling based on the results of the primary reasoning, and performing secondary learning with weights allocated to respective boxes obtained by the primary reasoning and estimated as object regions; and finally detecting one or more objects in the image through a model generated as a result of the secondary learning.

Abstract: Disclosed herein are image-based object recognition method and system by and in which a learning server performs image-based object recognition based on the learning of environment variable data. The image-based object recognition method includes: receiving an image acquired through at least one camera, and segmenting the image on a per-frame basis; primarily learning labeling results for one or more objects in the image segmented on a per-frame basis; performing primary reasoning by performing object detection in the image through a model obtained as a result of the primary learning; performing data labeling based on the results of the primary reasoning, and performing secondary learning with weights allocated to respective boxes obtained by the primary reasoning and estimated as object regions; and finally detecting one or more objects in the image through a model generated as a result of the secondary learning.

Abstract: A network access control system and a method are disclosed. In a step of generating a transmission control protocol (TCP) session between a terminal and a gateway (or a server), the TCP session is authenticated, and whether or not to generate the TCP session is determined on the basis of a result of the authentication, thereby preventing, in advance, a target application within the terminal from bypassing control of an access control application and transmitting a data packet to a destination network through an authorized tunnel.

Abstract: A network access control device generates, in a tunnel-based access control network environment, a tunnel that connects a terminal application to the gateway of a destination network, on the basis of a tunnel between the terminal application and a gateway and a tunnel between gateways, thereby enabling safe transmission of a data packet from the terminal application to a destination node. It can include: a memory for storing a tunnel policy, a tunnel routing policy, and a tunnel table; and a control unit which generates tunnel information and data flow information on the basis of the tunnel policy, the tunnel routing policy, and the tunnel table according to a network access request of the terminal, and which transmits the generated tunnel information and data flow information to the terminal and the gateway of each network so that a tunnel between the terminal and the destination network is generated.

Abstract: A network access control system and a method are disclosed. In a step of generating a transmission control protocol (TCP) session between a terminal and a gateway (or a server), the TCP session is authenticated, and whether or not to generate the TCP session is determined on the basis of a result of the authentication, thereby preventing, in advance, a target application within the terminal from bypassing control of an access control application and transmitting a data packet to a destination network through an authorized tunnel.

Abstract: A node includes: a communication circuit; a processor operatively connected to the communication circuit; and a memory operatively connected to the processor and storing a target application and an access control application, wherein the memory stores instructions that when executed by the processor, cause the node to: detect a network access event of the target application to a destination network through the access control application, identify whether a tunnel corresponding to identification information of the target application and the destination network and authorized by an external server exists, transmit a data packet of the target application through the authorized tunnel using the communication circuit, when the authorized tunnel exists, and drop the data packet of the target application, when the authorized tunnel does not exist.

Abstract: A node includes: a communication circuit; a processor operatively connected to the communication circuit; and a memory operatively connected to the processor and storing a target application and an access control application, wherein the memory stores instructions that when executed by the processor, cause the node to: detect a network access event of the target application to a destination network through the access control application, identify whether a tunnel corresponding to identification information of the target application and the destination network and authorized by an external server exists, transmit a data packet of the target application through the authorized tunnel using the communication circuit, when the authorized tunnel exists, and drop the data packet of the target application, when the authorized tunnel does not exist.

Abstract: A node includes: a communication circuit; a processor operatively connected to the communication circuit; and a memory operatively connected to the processor and storing a target application and an access control application, wherein the memory stores instructions that when executed by the processor, cause the node to: detect a network access event of the target application to a destination network through the access control application, identify whether a tunnel corresponding to identification information of the target application and the destination network and authorized by an external server exists, transmit a data packet of the target application through the authorized tunnel using the communication circuit, when the authorized tunnel exists, and drop the data packet of the target application, when the authorized tunnel does not exist.

Abstract: A node includes: a communication circuit; a processor operatively connected to the communication circuit; and a memory operatively connected to the processor and storing a target application and an access control application, wherein the memory stores instructions that when executed by the processor, cause the node to: detect a network access event of the target application to a destination network through the access control application, identify whether a tunnel corresponding to identification information of the target application and the destination network and authorized by an external server exists, transmit a data packet of the target application through the authorized tunnel using the communication circuit, when the authorized tunnel exists, and drop the data packet of the target application, when the authorized tunnel does not exist.

Abstract: An insole for shoes having a plurality of protrusions, each of the protrusions having a ventilation hole formed through its center. A protrusion is connected with a thin support portion protruding from the insole and having a downwardly increasing diameter, so that the protrusions are integrally molded with the insole. The support portions can have a frustoconical shape. In order to prevent the insole from being easily deviated from the shoe, a pad having double-faced tape and a plurality of lugs is provided.