윈도우 악성코드 분류 시스템에 관한 연구 = A Study on Windows Malicious Code Classification System

다국어 초록 (Multilingual Abstract)

This project presents a classification methodology for malicious codes in Windows OS (Operating System) environment, develops a test classification system. Thousands of malicious codes are brought in every day. In a result, classification system is needed to analyzers for supporting information which newly brought malicious codes are a new species or a variety. This system provides the similarity for analyzers to judge how much a new species or a variety is different to the known malicious code. It provides to save time and effort, to less a faulty analysis. This research includes the design of classification system and test system. We classify the malicious codes to 9 groups and then 9 groups divide the clusters according to the each property. This system provides the similarity for analyzers to save time and effort. It is used prospect system of malicious code in the future.

참고문헌 (Reference)

1 "월간 정보보호뉴스 (Vol. 128 No. 5 2008년 5월)"

2 최준호, "악성코드 분류 및 명명법에 관한 연구" 20 (20): 2002

3 염용진, "악성 프로그램의 진화" (1244) : 2006

4 장영준, "악성 코드 동향과 그 미래 전망" 18 (18): 2008

5 "http://www.trendmicro.co.kr/"

6 "http://www.kasperskylab.co.kr"

7 "http://www.hauri.co.kr/"

8 "http://www.ahnlab.com/"

9 M.Bishop, "Vulnerabilities Analysis" 125-136, 1999

10 Nancy R.Mead, "Survivable Network Analysis Method" 2000

11 Robert J. Ellison, "Survivability: Protecting Your Critical Systems" 3 : 55-63, 1999

12 F. Cohen, "Simulating Cyber Attacks, Defenses, and Consequences" 18 : 479-518, 1999

13 "NVD: National Vulnerability Database"

14 "CVSS: Common Vulnerability Scoring System"

15 "CVE: Common Vulnerabilities and Exposures"

16 안철수 연구소, "2008년 4월 악성코드 동향 분석 보고서" ASEC 리포트