ARP spoofing 바이러스에 감염된 단말을 효율적으로 분리하기 위한 네트워크 관리시스템의 설계 = A Design of Network Management System for Efficiently Isolating Devices Infected with ARP Spoofing Virus

다국어 초록 (Multilingual Abstract)

ARP spoofing is a typical Internet attack, in which an attacker sends data by changing his's MAC address with the other's one. Currently, this attack is usually dealt with separating the attacking PCs infected with ARP spoofing virus, by keeping network devices investigating by the network manager. However, this manual process has some limitations in time and accuracy. This paper proposes a new network management system to replace the effort of network manager who has to keep on inspecting the network. Along with designing an ARP analyzer and a disconnection notifier and adding them into the existing network management system, the proposed system provides a basement to identify and notify the PC infected by an ARP spoofing virus with fast and high accuracy. As a result, it is expected to minimize the network break off and to make easy the network management.

참고문헌 (Reference)

1 이보만, "해외에서 Proxy Server를 연동한 우회적인 공격기법 연구" 432-435, 2011

2 서우석, "통합 보안정책 알고리즘 적용에 따른 최적화 방어 시스템 구축에 관한 연구" 한국정보보호학회 21 (21): 39-46, 2011

3 정인환, "자동 노드 인식 기능을 갖는 ARP 스푸핑을 이용한 인터넷 차단기" 한국인터넷방송통신학회 11 (11): 93-106, 2011

4 인터넷침해대응센터, "인터넷 침해사고 동향 분석 및 월보"

5 홍승표, "신뢰적인 ARP 테이블의 운영을 통한 ARP 스푸핑 공격에 대한 효율적인 방어 기법" 한국정보과학회 17 (17): 26-30, 2011

6 신윤호, "TCP/IP환경에 기반한 SCADA 시스템의 ARP Spoofing 공격 가능성 연구" 한국융합보안학회 9 (9): 9-17, 2009

7 서우일, "TCP Connection ARP Spoofing/Hijacking에 대한 탐지 및 추적에 대한 연구" 2000

8 D. Bruschi, "S-ARP: a Secure Address Resolution Protocol" 66-74, 2003

9 Guo Hao, "Principle of and Protection of Man-in-the-middle Attack Based on ARP Spoofing" 한국정보처리학회 5 (5): 131-134, 2009

10 J. Bae, "Network Access Control and Management using ARP Spoofing in Various Windows Environment" 1-10, 2011

11 N. Hubballi, "LAN Attack Detection using Discrete Event Systems" 50 (50): 119-300, 2011

12 J. Koo, "Evaluation of Network Blocking Algorithm Based on ARP Spoofing and Its Application" 3481 : 177-186, 2005

13 V. Ramachandran, "Detecting ARP Spoofing: An Active Technique" 239-250, 2005

14 이승재, "ARP Spoofing과 Network Sniffing 연동 공격의 탐지 및 추적에 관한 연구" 성균관대학교 정보통신대학원 2006