공격 기법 모델링을 통한 사이버 공격 시뮬레이터 설계 및 구현

다국어 초록 (Multilingual Abstract)

With the development of information technology and the growth of the scale of system and network, cyber threats and crimes continue to increase. To cope with these threats, cybersecurity training based on actual attacks and defenses is required. However, cybersecurity training requires expert analysis and attack performance, which is inefficient in terms of cost and time. In this paper, we propose a cyber attack simulator that automatically executes attack techniques. This simulator generates attack scenarios by combining attack techniques modeled to be implemented and executes the attack by sequentially executing the derived scenarios. In order to verify the effectiveness of the proposed attack simulator, we experimented by setting an example attack goal and scenarios in a real environment. The attack simulator successfully performed five attack techniques to gain administrator privileges.

참고문헌 (Reference)

1 "Vulnerability Quick View Report"

2 E. Trickel, "Shell We Play A Game? CTF-as-a-service for Security Education" 2017

3 Z. C. Schreuders, "Security Scenario Generator (SecGen): A Framework for Generating Randomly Vulnerable Rich-scenario VMs for Learning Computer Security and Hosting CTF Events" 2017

4 "MITRE ATT&CK"

5 "Locked Shields"

6 S. Wi, "Git-based CTF: A Simple and Effective Approach to Organizing In-Course Attack-and-Defense Security Competition" 2018

7 "European Network and Information Security Agency"

8 J. Mirkovic, "DEW: Distributed Experiment Workflows"

9 "CYBERGYM"

10 "CALDERA"

11 "Asia Pacific Computer Emergency Response Team"

12 P. Passeri, "A year of cyber attacks"