Abstract: The present disclosure relates to a method and apparatus for electronic signature and, more particularly, to a method and apparatus for performing safe, post-quantum electronic signature using infinite continuity of a hash function and one-time key pairs. A method for electronic signature using a computing device according to one embodiment of the present disclosure comprises obtaining a message to be electronically signed; obtaining a plurality of public keys generated by a key generation algorithm, and based on the plurality of public keys, generating a signature verification value for the message, wherein the signature verification value includes at least one verification factor generated based on the different public keys or a value obtained by merging the different public keys.

Abstract: The present disclosure relates to a method and apparatus for electronic signature and, more particularly, to a method and apparatus for performing safe, post-quantum electronic signature using infinite continuity of a hash function and one-time key pairs. A method for electronic signature using a computing device according to one embodiment of the present disclosure comprises obtaining a message to be electronically signed; obtaining a plurality of public keys generated by a key generation algorithm, and based on the plurality of public keys, generating a signature verification value for the message, wherein the signature verification value includes at least one verification factor generated based on the different public keys or a value obtained by merging the different public keys.

Abstract: A communication network, and a method and device for identifying a node connected to the communication network are disclosed. According to an embodiment of the present disclosure, there is provided a communication network which performs communication using a voltage difference between wires constituting a communication bus, the communication network including: the wires; a first transceiver connected to the wires and including a first resistor across which a portion of a first power supply voltage is distributed; and a second transceiver connected to the wires and including a second resistor across which a portion of a second power supply voltage is distributed, wherein the first resistor has a different value from the second resistor.

Abstract: A system for providing autonomous driving safety map service according to an embodiment includes an autonomous vehicle which transmits anomaly information of an autonomous driving system acquired during the driving of the vehicle, and a server for providing safety map service, which receives the anomaly information of the autonomous driving system from one or more of the autonomous vehicles driving within a specific area, generates autonomous driving danger zone information based on one or more of the location of occurrence of the anomaly information or identification information of the autonomous vehicle, and provides the generated autonomous driving danger zone information in conjunction with a map of the specific area.

Abstract: A system for providing autonomous driving safety map service according to an embodiment includes an autonomous vehicle which transmits anomaly information of an autonomous driving system acquired during the driving of the vehicle, and a server for providing safety map service, which receives the anomaly information of the autonomous driving system from one or more of the autonomous vehicles driving within a specific area, generates autonomous driving danger zone information based on one or more of the location of occurrence of the anomaly information or identification information of the autonomous vehicle, and provides the generated autonomous driving danger zone information in conjunction with a map of the specific area.

Abstract: The present disclosure relates to a method and apparatus for electronic signature and, more particularly, to a method and apparatus for performing safe, post-quantum electronic signature using infinite continuity of a hash function and one-time key pairs. A method for electronic signature using a computing device according to one embodiment of the present disclosure comprises obtaining a message to be electronically signed; obtaining a plurality of public keys generated by a key generation algorithm, and based on the plurality of public keys, generating a signature verification value for the message, wherein the signature verification value includes at least one verification factor generated based on the different public keys or a value obtained by merging the different public keys.

Abstract: Disclosed herein are a server apparatus, a client apparatus, and a method for communication based on network address mutation. The method for communication based on network address mutation, performed by the server apparatus and the client apparatus, includes setting the external address of a network interface for receiving a packet from the client apparatus; setting the internal address of a hidden interface in order to forward the packet received through the network interface to the hidden interface; modifying the external address based on a preset network address mutation rule; and communicating with the client apparatus by forwarding the packet, received from the client apparatus based on the modified external address, to the hidden interface.

Abstract: Disclosed herein is an apparatus for enhancing network security, which includes an information collection unit for collecting information about states of hosts that form a network and information about connectivity in the network; an attack surface analysis unit for analyzing attack surfaces by creating an attack graph using the information about the states and the information about connectivity; a security-enhancing strategy establishment unit for establishing a security-enhancing strategy based on the attack graph; and a security-enhancing strategy implementation unit for delivering a measure based on the security-enhancing strategy to a corresponding host, thereby taking a security-enhancing measure.

Abstract: Disclosed herein are a decoy apparatus and a method for expanding a fake attack surface using a deception network. The method includes determining, by a protected server, whether a packet is a target to be processed when the packet is received; converting, by the protected server, the packet and transmitting, by the protected server, the converted packet to the decoy apparatus of the deception network when the packet is determined not to be such a target; receiving, by the protected server, a response packet from a decoy virtual machine included in the decoy apparatus as a reply to the converted packet; and modifying, by the protected server, the response packet and transmitting, by the protected server, the modified response packet to the source from which the packet was transmitted, in order to expand the fake attack surface.

Abstract: Disclosed are a method and apparatus for searching for an attack path. The apparatus generates an attack graph, generates an attack graph ontology, generates a semantic attack graph by imparting semantics to the attack graph on the basis of the attack graph ontology, and searches for the attack path on the basis of the semantic attack graph.

Abstract: Disclosed herein are a server apparatus, a client apparatus, and a method for communication based on network address mutation. The method for communication based on network address mutation, performed by the server apparatus and the client apparatus, includes setting the external address of a network interface for receiving a packet from the client apparatus; setting the internal address of a hidden interface in order to forward the packet received through the network interface to the hidden interface; modifying the external address based on a preset network address mutation rule; and communicating with the client apparatus by forwarding the packet, received from the client apparatus based on the modified external address, to the hidden interface.

Abstract: Disclosed herein is an apparatus for enhancing network security, which includes an information collection unit for collecting information about states of hosts that form a network and information about connectivity in the network; an attack surface analysis unit for analyzing attack surfaces by creating an attack graph using the information about the states and the information about connectivity; a security-enhancing strategy establishment unit for establishing a security-enhancing strategy based on the attack graph; and a security-enhancing strategy implementation unit for delivering a measure based on the security-enhancing strategy to a corresponding host, thereby taking a security-enhancing measure.

Abstract: Disclosed herein are an apparatus and method for generating and operating a dynamic Controller Area Network (CAN) Identifier (ID). The apparatus includes a priority ID generation unit for generating a priority ID that is a base ID, a dynamic ID generation unit for generating a dynamic ID that is dynamically changed, and a communication unit for transmitting/receiving a data frame in which a dynamic CAN ID including the priority ID and the dynamic ID is combined with data.