웹쉘 수집 및 분석을 통한 머신러닝기반 방어시스템 제안 연구

김기환,신용태 한국인터넷정보학회 2022 인터넷정보학회논문지 Vol.23 No.4

Recently, with the development of information and communication infrastructure, the number of Internet access devices is rapidly increasing. Smartphones, laptops, computers, and even IoT devices are receiving information and communication services through Internet access. Since most of the device operating environment consists of web (WEB), it is vulnerable to web cyber attacks using web shells. When the web shell is uploaded to the web server, it is confirmed that the attack frequency is high because the control of the web server can be easily performed. As the damage caused by the web shell occurs a lot, each company is responding to attacks with various security devices such as intrusion prevention systems, firewalls, and web firewalls. In this case, it is difficult to detect, and in order to prevent and cope with web shell attacks due to these characteristics, it is difficult to respond only with the existing system and security software. Therefore, it is an automated defense system through the collection and analysis of web shells based on artificial intelligence machine learning that can cope with new cyber attacks such as detecting unknown web shells in advance by using artificial intelligence machine learning and deep learning techniques in existing security software. We would like to propose about. The machine learning-based web shell defense system model proposed in this paper quickly collects, analyzes, and detects malicious web shells, one of the cyberattacks on the web environment. I think it will be very helpful in designing and building a security system. 최근 정보통신 인프라의 발달로 인터넷접속 디바이스가 급속하게 늘어나고 있는 실정이다. 스마트폰, 노트북, 컴퓨터, IoT디바이스까지 인터넷접속을 통하여 정보통신서비스를 받고 있는 것이다. 디바이스 운영환경이 대부분이 웹(WEB)으로 이루어져 있는 관계로 웹쉘을 이용한 웹사이버 공격에 취약하다. 웹쉘이 웹 서버에 업로드 될 경우 웹 서버의 제어가 손쉽게 이루어 질 수 있어서 공격빈도가 높은 것으로 확인된다. 웹쉘로 인한 피해가 많이 발생하면서 각 기업에서는 침입차단시스템, 방화벽, 웹방화벽등 다양한 보안장비로 공격에 대응하고 있지만, 현재 출시되는 대부분의 웹쉘 대응 장비는 패턴 기반으로 탐지가 이루어지기 때문에 웹쉘 변종에있어서는 탐지가 어려우며 이런 특성으로 웹쉘 공격의 예방 및 대처하기 위해서는 기존의 체계와 보안소프트웨어만 가지고 대응 하기에는 힘든 상황이 현실이다. 이에 인공지능 머신러닝 과 딥러닝기법을 활용하여 알려지지 않은 웹쉘을 사전에 탐지하는 등 신규사이버 공격에 대하여 대처 할 수 있는 인공지능 머신러닝 기반의 웹쉘 수집 및 분석을 통하여 자동화된 웹쉘 방어시스템에 대하여제안하고자 한다. 본 논문에서 제안하는 머시러닝기반 웹쉘 방어시스템 모델은 웹환경에 대한 사이버공격중의 하나인 악성 웹쉘에대하여 수집, 분석, 탐지를 빠르게 하여,안전한 인터넷환경구축 및 운영시 필수적으로 적용이 필요한 웹정보보안 시스템 설계,구축에 많은 도움이 될 것으로 생각한다.

요약시스템에 의한 웹 정보검색 서비스의 품질 개선

박철제,조재균 대한경영학회 2004 大韓經營學會誌 Vol.17 No.3

In this paper, we propose a web information search service technique, which improves the presentation efficiency of web search results. when presenting a search result, it is more effective to use the summary system than shows the before and behind the sentence which includes a keyword. For this, we implemented the summary system that summarized the web contents automatically. And, we made a comparative evaluation this system and a commercial business system "yahoo". From the "yahoo" site, it extracted the web search results of keyword "management information" and this results made a comparative evaluation our system in questionnaire study. In this study, a questionnaire consisted of 17 items was developed and then administered to 83 university students. The test result shows that the precision is improved 10% using the summary system. In this paper, we propose a web information search service technique, which improves the presentation efficiency of web search results. when presenting a search result, it is more effective to use the summary system than shows the before and behind the sentence which includes a keyword. For this, we implemented the summary system that summarized the web contents automatically. And, we made a comparative evaluation this system and a commercial business system "yahoo". From the "yahoo" site, it extracted the web search results of keyword "management information" and this results made a comparative evaluation our system in questionnaire study. In this study, a questionnaire consisted of 17 items was developed and then administered to 83 university students. The test result shows that the precision is improved 10% using the summary system.

A Web Recommendation System using Grid based Support Vector Machines

Sung-Hae Jun 한국지능시스템학회 2007 INTERNATIONAL JOURNAL of FUZZY LOGIC and INTELLIGE Vol.7 No.2

Main goal of web recommendation system is to study how user behavior on a website can be predicted by analyzing web log data which contain the visited web pages. Many researches of the web recommendation system have been studied. To construct web recommendation system, web mining is needed. Especially, web usage analysis of web mining is a tool for recommendation model. In this paper, we propose web recommendation system using grid based support vector machines for improvement of web recommendation system. To verify the performance of our system, we make experiments using the data set from our web server.

다중 계층 웹 필터를 사용하는 웹 애플리케이션 방화벽의 설계 및 구현

장성민(Sung-Min Jang),원유헌(Yoo-Hun Won) 한국컴퓨터정보학회 2009 韓國컴퓨터情報學會論文誌 Vol.14 No.12

최근 인터넷 상에서 빈번하게 발생하는 내부 정보와 개인 정보 유출과 같은 보안 사고들은 보안을 고려하지 않고 개발된 웹 애플리케이션의 취약점을 이용하는 방법으로 빈번하게 발생한다. 웹 애플리케이션의 공격들에 대한 탐지는 기존의 방화벽과 침입 탐지 시스템들의 공격 탐지 방법으로는 탐지가 불가능하며 서명기반의 침입 탐지 방법으로는 새로운 위협과 공격에 대한 탐지에 한계가 있다. 따라서 웹 애플리케이션 공격 탐지 방법에 대한 많은 연구들이 웹 트래픽 분석을 이동하는 비정상행위 기반 탐지 방법을 이용하고 있다. 비정상행위 탐지 방법을 사용하는 최근의 웹 방화벽에 관한 연구들은 웹 트래픽의 정확한 분석 방법, 패킷의 애플리케이션 페이로드 검사로 인한 성능 문제 개선, 그리고 다양한 네트워크 보안장비들의 도입으로 발생하는 통합관리 방법과 비용 문제 해결에 중점을 두고 있다. 이를 해결하기 위한 방법으로 통합 위협 관리 시스템이 등장 하였으나 부족한 웹 보안 기능과 높은 도입 비용으로 최근의 애플리케이션 공격들에 대해 정확한 대응을 하지 못하고 있는 현실이다. 본 연구에서는 이러한 문제점들을 해결하기 위해 웹 클라이언트의 요청에 포함된 파라미터 값의 길이에 대한 실시간 분석을 이용하여 공격 가능성을 탐지하는 비정상행위 탐지방법을 제안하고, 애플리케이션 데이터 검사로 발생하는 성능 저하 문제를 해결할 수 있는 다중 계층 웹 필터를 적용한 웹 애플리케이션 방화벽 시스템을 설계하고 구현하였다. 제안된 시스템은 저가의 시스템이나 레거시 시스템에 적용 가능하도록 설계하여 추가적인 보안장비 도입으로 야기되는 비용 문제를 해결할 수 있도록 하였다. Recently, the leakage of confidential information and personal information is taking place on the Internet more frequently than ever before. Most of such online security incidents are caused by attacks on vulnerabilities in web applications developed carelessly. It is impossible to detect an attack on a web application with existing firewalls and intrusion detection systems. Besides, the signature-based detection has a limited capability in detecting new threats. Therefore, many researches concerning the method to detect attacks on web applications are employing anomaly-based detection methods that use the web traffic analysis. Much research about anomaly-based detection through the normal web traffic analysis focus on three problems - the method to accurately analyze given web traffic, system performance needed for inspecting application payload of the packet required to detect attack on application layer and the maintenance and costs of lots of network security devices newly installed. The UTM(Unified Threat Management) system, a suggested solution for the problem, had a goal of resolving all of security problems at a time, but is not being widely used due to its low efficiency and high costs. Besides, the web filter that performs one of the functions of the UTM system, can not adequately detect a variety of recent sophisticated attacks on web applications. In order to resolve such problems, studies are being carried out on the web application firewall to introduce a new network security system. As such studies focus on speeding up packet processing by depending on high-priced hardware, the costs to deploy a web application firewall are rising. In addition, the current anomaly-based detection technologies that do not take into account the characteristics of the web application is causing lots of false positives and false negatives. In order to reduce false positives and false negatives, this study suggested a realtime anomaly detection method based on the analysis of the length of parameter value contained in the web client's request. In addition, it designed and suggested a WAF(Web Application Firewall) that can be applied to a low-priced system or legacy system to process application data without the help of an exclusive hardware. Furthermore, it suggested a method to resolve sluggish performance attributed to copying packets into application area for application data processing, Consequently, this study provide to deploy an effective web application firewall at a low cost at the moment when the deployment of an additional security system was considered burdened due to lots of network security systems currently used.

웹 컬러 시스템 설계를 위한 기초적 연구

이경희 한국니트디자인학회 2021 패션과 니트 Vol.19 No.1

Web colors are colors used in displaying web pages on the World Wide Web, and the methods for describing and specifying those colors. Colors may be specified as an RGB triplet or in hexadecimal format or according to their common English names in some cases. We have a whopping 16 million colors to choose from when designing a website. The RGB color system defines all colors as a combination of three different values; a particular shade of red, another of green, and another of blue. RGB color space or RGB color system, constructs all the colors from the combination of the Red, Green and Blue colors. This color model is used in computer monitors, television sets, and theater. This study investigated the web color system applies for web color equipment, such as computer monitors and smart phone monitors. This study is developed the 『Hue and Tone 313 Color System』for web site based on hue and tone color system. I suggested the 313 colors with attached the RGB notation which could web color display for efficient sensual color education. The 10 hues classification of Munsell hue are Red, Yellow Red, Yellow, Green Yellow, Green, Blue Green, Blue, Purple Blue, Purple, Red Purple are gathered in this color system. The 19 tones classification are vivid, light, standard, deep, pale, soft, dull, dark, very pale, light grayish, medium grayish, dark grayish, very dark, off White, off Pale, off Light Gray, off Medium Gray, off Dark Gray, off Black are collected in this color system, And the achromatic colors in this system are collected white, light gray, medium gray, dark gray and black. The special colors in this system are gathered gold, silver and copper for modern design trend.

논문 : 웹(Web) 기반 GIS를 활용한 관광정보시스템의 아키텍쳐에 관한 연구

노영 ( Young Noh ) 명지대학교 금융지식연구소 2007 금융지식연구 Vol.5 No.1

미래학자 존 나이스 비트(John Naisbitt)는 그의 저서 ``메가트렌드 아시아``에서 향후 3대 메가 트랜드를 글로벌화, 정보기술, 바이오(Bio) 기술로 제시하였다. 정보기술 중에서도 인터넷 혁명과 정보통신 기술의 급속한 발전은 경제 전반에 걸쳐 많은 변화를 야기하고 있다. 과거에는 생각하지 못했던 새로운 현상과 이를 설명하는 새로운 디지털 경제의 신 법칙들이 등장하고 있다. 이러한 인터넷의 발달과 더불어 다른 산업들과 마찬가지로 관광정보 산업도 인터넷을 이용한 서비스의 다양성을 추구하고 있다. 서비스 망의 점차적인 범위를 넓혀 가는 관광정보시스템의 개발에 있어 보다 효율적인 인터넷 관광정보시스템에 대한 연구 및 개발은 관광정보 인프라 구축이라는 측면에서 매우 중요한 연구 과제라 할 수 있다. 이에 본 연구에서는 본 연구는 최근 각 산업에서 도입하고 있는 웹(Web) 기반 GIS를 활용하여 관광정보시스템을 구축하기 위한 기본 아키텍쳐를 제시하고자 한다. 본 연구에서 제시한 아키텍쳐를 기반으로 향후 국내 환경에 맞는 웹(Web) 기반 GIS 관광정보시스템을 구현한다면 사용자들이 보다 편리하게 관광정보 및 위치정보를 이용할 수 있을 것이다. Recently, as web services are rapidly diffused throughout the world, organizations are faced with the new paradigm of Internet world. Internet has proven to be an easy and efficient way of delivering a wide variety of services to users of web sites. The internet is more and more emerging as a handy tool of traveling for the tourist industry. However, web based tourist information system provides not only on-line brochures, but provides both value and service. Information technology is having a big effect on all sectors of tourism. Tourists have problems to find what they are looking for, especially in reference to the geographic position of the object and its surroundings. The use of GIS and the Internet has changed the way organizations used geographic information, the processes of accessing, sharing disseminating and analysing data. Online GIS combines the advantage of both GIS and the internet. GIS has become more than an program since GIS is a visual and analytical tool and helps users to understand or visualize this information in a map and enables the users to manage these information interactively and analytically. This study presented in this paper Architecture of the tourism information system using web-based GIS. A new tourism information system architecture is developed as a web-enabling base. Using this, users are able to find the tourism information and spacial information conveniently.

웹소켓을 이용한 모바일 앱 테스트 시스템 설계

최경수(Kyung Su Choi),이길흥(Kil hung Lee) 한국IT서비스학회 2018 한국IT서비스학회지 Vol.17 No.3

In this paper, we propose a testing method of the quality of device application effectively reflecting the necessity of increasing mobile device application quality test, and designed and developed it as a web system. We have studied traditional software testing methods for designing and developing a system. We have developed a next-generation alternative technology that can analyze and compensate for the weaknesses of the web and weaknesses of the Android in order to realize the access system and the responsive web system. As an example applied to the system, we analyzed the requirements of the system implementation and expressed the functions of the system through the use case diagram. The test scenarios were conducted by connecting 5,000 devices to each system using the existing HTTP polling method and the proposed web socket method. After setting the comparative group, the result of the proposed web management system was observed and compared through repeated tests. The research shows that the proposed web socket system has better performance than HTTP polling. The more the number of simultaneous processing of the devices, the lower the server stability but the better the time efficiency. In conclusion, the more the number of devices to be tested is, the more the number of devices can be effectively tested using the proposed web management system.

Web Fusion Model of Internet of Things Based on Hierarchy Requirement Analysis

YANG Hui-jun 보안공학연구지원센터 2016 International Journal of Smart Home Vol.10 No.6

Each item of sensory information is effectively integrated by Internet of things (IoT) system. However, due to different framework and interface, software and hardware platform and communication protocol are mutually independent, which makes distributed IoT system unable to fulfill uniform operation and management. By aiming at issues difficultly fulfilled by IoT system, a kind of framework model of IoT system based on Web Service is put forward. Firstly, function and framework analysis is conducted for local sensor service system, integrated sensor service system and integrated application service system required by model; next, an introduction about design of Web Service interface is made; finally, services and functions are abstracted to normalize the relation among three varieties of service systems of model. This scheme is proved to be with good applicability, flexibility and expansibility in cases.

A Web Recommendation System using Grid based Support Vector Machines

Jun, Sung-Hae Korean Institute of Intelligent Systems 2007 INTERNATIONAL JOURNAL of FUZZY LOGIC and INTELLIGE Vol.7 No.2

Main goal of web recommendation system is to study how user behavior on a website can be predicted by analyzing web log data which contain the visited web pages. Many researches of the web recommendation system have been studied. To construct web recommendation system, web mining is needed. Especially, web usage analysis of web mining is a tool for recommendation model. In this paper, we propose web recommendation system using grid based support vector machines for improvement of web recommendation system. To verify the performance of our system, we make experiments using the data set from our web server.

웹기반 청각장애인용 수화 웹페이지 제작 시스템

박성욱(Sung-Wook Park),왕보현(Bo-Hyeun Wang) 한국지능시스템학회 2014 한국지능시스템학회논문지 Vol.24 No.3

소리가 잘 들리지 않는 청각장애인은 소리를 표시하는 글자를 익히고 복잡한 개념을 전달하는 글을 이해하는 데 어려움이 많다. 그래서 자연스럽게 표정, 몸짓, 손짓으로 의사를 전달하는 수화가 청각장애인들의 주요 의사소통수단으로 자리잡아왔지만 사회에서는 글과 말이 주요 정보전달 수단으로 이용되고 있어 청각장애인이 정보에 접근하고 지식을 넓혀 직업을 갖는데 큰 어려움이 있다. 특히 근래에 인터넷이 보편화됨에 따라 정상인의 정보 습득량은 크게 늘었지만, 글로 표현된 인터넷을 이해하기 어려운 청각장인들은 인터넷 정보에 접근하는데 어려움이 많다. 본 연구에서는 청각장애인을 위한 수화 웹페이지를 제작할 수 있는 수화 웹페이지 제작 시스템을 개발하였다. 수화 웹페이지 제작 시스템은 청각장애인용 수화 웹페이지 제작자가 통상적인 인터넷 사용에 필요한 하드웨어 및 소프트웨어 환경만 갖추면 운영할 수 있도록 웹기반으로 개발하였다. 수화용 웹 페이지 제작자는 게시판 형태의 인터페이스를 이용하여 변역하고자하는 문장을 서버에 전송할 수 있다. 서버는 수신된 문장을 수화로 번역하여 3D 아바타 기반의 수화 그래픽 애니메이션을 랜더링한다. 수화 그래픽 애니메이션은 MP4 형식의 동영상으로 변환되며, 스트리밍 서버의 저장소에 보관된다. 저장된 수화 동영상의 이름과 주소는 수화 웹페이지 제작자가 처음 문장을 입력하였던 게시판에 표시되도록 하여 향후 청각장애인용 웹 페이지를 제작할 때 활용할 수 있도록 하였다. 또한 본 연구에서는 웹페이지 제작자가 공공기관의 웹페이지를 제작할 수 있도록, 이들 기관에서 현재 사용된 글들을 수화로 번역할 때 필요한 수화 단어를 수화 웨페이지 제작 시스템의 수화 사전에 추가하였다. 수화 단어를 추가함으로써 웹기반 수화 웹페이지 제작 시스템이 공공부문에 보다 더 많이 활용될 수 있을 것이다. Hearing-impaired people have difficulty in hearing, so it is also hard for them to learn letters that represent sound and text that conveys complex and abstract concepts. Therefore it has been natural choice for the hearing-impaired people to use sign language for communication, which employes facial expression, and hands and body motion. However, the major communication methods in daily life are text and speech, which are big obstacles for the hearing-impaired people to access information, to learn and make intellectual activities, and to get jobs. As delivering information via internet become common the hearing-impaired people are experiencing more difficulty in accessing information since internet represents information mostly in text forms. This intensifies unbalance of information accessibility. This paper reports web-based text-to-sign language translating system that helps web designer to use sign language in web page design. Since the system is web-based, if web designers are equipped with common computing environment for internet browsing, they can use the system. The web-based text-to-sign language system takes the format of bulletin board as user interface. When web designers write paragraphs and post them through the bulletin board to the translating server, the server translates the incoming text to sign language, animates with 3D avatar and records the animation in a MP4 file. The file addresses are fetched by the bulletin board and it enables web designers embed the translated sign language file into their web pages by using HTML5 or Javascript. Also we analyzed text used by web pages of public services, then figured out new words to the translating system, and added to improve translation. This addition is expected to encourage wide and easy acceptance of web pages for hearing-impaired people to public services.