IoT 봇넷 악성코드 기반 침해사고 흔적 수집 방법 = Intrusion Artifact Acquisition Method based on IoT Botnet Malware

다국어 초록 (Multilingual Abstract)

With the rapid increase in the use of IoT and mobile devices, cyber criminals targeting IoT devices are also on the rise. Among IoT devices, when using a wireless access point (AP), problems such as packets being exposed to the outside due to their own security vulnerabilities or easily infected with malicious codes such as bots, causing DDoS attack traffic, are being discovered. Therefore, in this study, in order to actively respond to cyber attacks targeting IoT devices that are rapidly increasing in recent years, we proposed a method to collect traces of intrusion incidents artifacts from IoT devices, and to improve the validity of intrusion analysis data. Specifically, we presented a method to acquire and analyze digital forensics artifacts in the compromised system after identifying the causes of vulnerabilities by reproducing the behavior of the sample IoT malware. Accordingly, it is expected that it will be possible to establish a system that can efficiently detect intrusion incidents on targeting large-scale IoT devices.

참고문헌 (Reference)

1 김선집, "인증 및 경량화 암호알고리즘 기반 IoT 보안 서비스" 한국사물인터넷학회 7 (7): 1-7, 2021

2 임호성, "사물인터넷 서비스의 신뢰성 강화를 위한 오류 추적 시스템 설계" 한국사물인터넷학회 6 (6): 15-20, 2020

3 김동관, "무선 공유기의 디지털 포렌식 프로세스 모델에 관한 연구" 한국디지털포렌식학회 11 (11): 17-35, 2017

4 I. Ali, "Systematic Literature Review on IoT-Based Botnet Attack" 8 : 212220-212232, 2020

5 A. Alenezi, "IoT Forensics: A State-of-the-Art Review, Challenges and Future Directions" 106-115, 2019

6 Xiaolu Zhang, "IoT Botnet Forensics : A Comprehensive Digital Forensic Case Study on Mirai Botnet Servers" Elsevier 32 : S1-S20, 2020

7 Weam Saadi Hamza, "IoT Botnet Detection : Challenges and Issues" 83 : 15092-15097, 2020

8 Ibrar Yaqoob, "Internet of things forensics: Recent advances, taxonomy, requirements, and open challenges" 2018

9 M. Wazzan, "Internet of Things Botnet Detection Approaches : Analysis and Recommendations for Future Research" 11 : 5713-, 2021

10 X. Zhang, "How Do I Share My IoT Forensic Experience With the Broader Community? An Automated Knowledge Sharing IoT Forensic Platform" 6 (6): 6850-6861, 2019

11 Bruce Nikkel, "Forensic Artifacts in Modern Linux Systems" Bern University of Applied Sciences

12 Harichandran, "CuFA : A more formal definition for digital forensic artifacts" 18 : S125-S137, 2016

13 Anchit Bijalwan, "Botnet Forensic : Issues, Challenges and Good Practices" 10 (10): 28-51, 2018

14 J. Margolis, "An in-depth analysis of the mirai botnet" 6-12, 2017

15 Maria Stoyanova, "A Survey on the Internet of Things(IoT)Forensics : Challenges, Approaches, and Open Issues" 22 (22): 1191-1221, 2020