Abstract: Various embodiments of the disclosure relate to an electronic device and relate to an electronic device including a housing formed through anodizing and a method for manufacturing the housing of the electronic device. According to an embodiment of the disclosure, there may be provided an electronic device including a housing at least partially including an electrically conductive material, where a surface of the electrically conductive material is formed of an oxide film layer having a plurality of cavities, where the plurality of cavities are colored in a first color and a second color, and where the first color and the second color are mixed when the second color is deposited on the first color.

Abstract: In an embodiment, a housing for an electronic device is colored through an anodizing process. The electronic device includes the housing, which includes a front plate; a rear plate facing away from the front plate; a side member surrounding a space between the front plate and the rear plate; and a support member which is disposed in the space. A portion of the housing is a conductive member formed of an electrically conductive material, which is divided into a first portion and a second portion which is electrically isolated from the first portion. The first portion is colored by a primary anodizing process with a first color, and the second portion is colored by a secondary anodizing process with a second color different from the first color.

Abstract: According to an embodiment, a housing of an electronic device comprises: a metal frame, wherein a surface of the metal frame has: a gloss value of 1 gloss unit (Gu) to 10 Gu, and a maximum height of a plurality of irregularities disposed on the surface in a range between 0.1 ?m to 2.3 ?m, and a maximum depth of valleys between the plurality of irregularities in a range between 0.1 ?m to 1.8 ?m, and a number of the plurality of irregularities per unit area of 1 cm2 in a range between 90 to 200.

Abstract: An electronic device according to various embodiments of the disclosure may include: a cover glass configured to protect a display; and a bracket, wherein the bracket includes: a first area in contact with the cover glass; and a second area extending from the first area, the first area includes a first surface layer to which a first texture and a first color are applied, the second area includes a second surface layer to which a second texture different from the first texture is applied, the first color is substantially the same color as the cover glass, and the first texture is substantially the same texture as the cover glass.

Abstract: According to various embodiments of the present disclosure, an electronic device may comprise a housing including a front plate and a rear plate and a display. At least one of the front plate or the rear plate may include a plate exposed to an outside. The plate may include a metal member including a first metal and an oxide layer formed on at least one surface of the metal member. The metal member may comprise a first portion including irregularities formed by at least one second metal included in a first solution, the at least one second metal being substituted for the a portion of the metal member, the at least one second metal being removed from the metal member by the first solution and a flat second portion etched by the first solution.

Abstract: Provided is a packet monitoring method for a communication packet transmitted and received between a server and a control device including receiving the communication packet transmitted and received between the server and the control device; determining whether the received communication packet is abnormal, based on a history table including control information on communication packets received before the received communication packet and control information on the received communication packet; and performing a security operation according to results of the determination.

Abstract: A method for detecting an abnormal traffic on a control system protocol, includes: checking whether session information exists in a management table; adding a new entry to the management table; checking whether a transaction ID in a table entry is the same as that of the received MODBUS request message; and checking whether data and length thereof of the received MODBUS request message are the same as those in the table entry. Further, the method includes detecting an abnormal traffic; and updating the table entry with packet information of the MODBUS request message.

Abstract: An apparatus for detecting an abnormality sign in a control system, the control system comprising control equipments, network equipments, security equipments or server equipments, the apparatus includes an information collection module configured to collect system information, network information, security event information or transaction information in interworking with a control equipments, network equipments, security equipments or server equipments. The apparatus includes storage module that stores the information collected by the information collection module. The apparatus includes an abnormality detection module configured to analyze a correlation between the collected information and a prescribed security policy to detect whether there is an abnormality sign in the control system.

Abstract: A method for detecting an abnormal traffic on a control system protocol, includes: checking whether session information exists in a management table; adding a new entry to the management table; checking whether a transaction ID in a table entry is the same as that of the received MODBUS request message; and checking whether data and length thereof of the received MODBUS request message are the same as those in the table entry. Further, the method includes detecting an abnormal traffic; and updating the table entry with packet information of the MODBUS request message.

Abstract: An apparatus for detecting an abnormality sign in a control system, the control system comprising control equipments, network equipments, security equipments or server equipments, the apparatus includes an information collection module configured to collect system information, network information, security event information or transaction information in interworking with a control equipments, network equipments, security equipments or server equipments. The apparatus includes storage module that stores the information collected by the information collection module. The apparatus includes an abnormality detection module configured to analyze a correlation between the collected information and a prescribed security policy to detect whether there is an abnormality sign in the control system.

Abstract: An apparatus for diagnosing malicious files includes a information transferring unit configured to receive information regarding a malicious file distributed in a management network and an execution file generated by assembling packets collected from the management network; an anti-virus engine configured to determine whether or not the execution file is malicious to generate information regarding a new malicious file; and a management unit configured to transfer the information regarding the malicious file and the information regarding the new malicious file to a terminal device on the management network through the information transferring unit.