제로 트러스트 환경의 실시간 파일 접근 이벤트 수집 방법에 관한 연구 = Real-Time File Access Event Collection Methodology for Zero Trust Environment

다국어 초록 (Multilingual Abstract)

The boundary-based security system has the advantage of high operational efficiency and easy management of security solutions, and is suitable for denying external security threats. However, since it is operated on the premise of a trusted user, it is not suitable to deny security threats that occur from within. A zero trust access control model was proposed to solve this problem of the boundary-based security system. In the zero trust access control model, the security requirements for real-time security event monitoring must be satisfied. In this study, we propose a monitoring method for the most basic file access among real-time monitoring functions. The proposed monitoring method operates at the kernel level and has the advantage of fundamentally preventing monitoring evasion due to the user's file bypass access. However, this study focuses on the monitoring method, so additional research to extend it to the access control function should be continued.

참고문헌 (Reference)

1 장항배, "산업기밀 유출사고 사례분석을 통한 유형별 대응방안 연구" 한국융합보안학회 15 (15): 39-45, 2015

2 K. D. Uttecht, "Zero Trust(ZT)Concepts for Federal Government Architectures" Massachusetts inst of tech 2020

3 A. Rastogi, "Software Engineering Principles and Security Vulnerabilities" 180-190, 2019

4 M. Al-Asli, "Review of signature-based techniques in antivirus products" IEEE 2019

5 C. Wright, "Linux security module framework" 8032 : 6-16, 2002

6 L. Abeni, "Investigating the network performance of a real-time Linux Kernel" 2013

7 A. Kerman, "Implementing A Zero Trust Architecture" The MITRE Corporation 2020

8 M. Sudakshina, "Cloud-Based Zero Trust Access Control Policy : An Approach to Support Work-From-Home Driven by COVID-19 Pandemic"

9 R. Riccardo, "Building situational awareness for network threats in fog/edge computing : Emerging paradigms beyond the security perimeter model" 85 : 235-249, 2018

10 J. Kindervag, "Build security into your network’s dna : The zero trust network architecture"

11 X. Hao, "Asymmetric cryptographic functions based on generative adversarial neural networks for Internet of Things" 2021

12 G. Anil, "A Zero-Trust Security Framework for Granular Insight on Blind Spot and Comprehensive Device Protection in the Enterprise of Internet of Things(E-IOT)" BMS Institute of Technology 2021