취약성 매트릭스를 이용한 사이버 공격 및 방어 모델링 = Cyber Attack and Defense Modeling Using Vulnerability Metrics

다국어 초록 (Multilingual Abstract)

The major objective of this paper is to perform modeling of cyber attack and defense using vulnerability metrics. To do this, we have attempted command level modeling for realizing an approach of functional level proposed by Nong Ye, and we have defined vulnerability metrics that are able to apply to DEVS(Discrete Event System Specification) and performed modeling of cyber attack and defense using this. Our approach is to show the difference from others in that (i) it is able to analyze behaviors of systems being emerged by interaction between functional elements of network components, (ii) it is able to analyze vulnerability in quantitative manner, and (iii) it is able to establish defense suitably by using the analyzed vulnerability. We examine an example of vulnerability analysis on the cyber attack and defense through case study.

참고문헌 (Reference)

1 "Vulner ability Measures for Network Vulner ability Analysis System" nov.2002.

2 "The challenge of building survivable information intensive systems" august : 39-43, 2000.August

3 "The Process of Network Security" 2000.

4 "Simulating Cyber Attacks, Defenses, and Consequences" 1999.

5 "Network SecurityModel- ingandCyber-attack Simulation Metho- dology" jul.2001.

6 "Intrusion Detection" Intrusion Net Books 1999.

7 "Intelligent Agents and Endomorphic Systems" modularmodels1990.

8 "Defensive Information Operations" 1997.June

9 "CACS - A Process Control Approach to Cyber Attack Detection" 44 (44): 2001

10 "Are We Forgetting the Risks of Information Technology" 43-51, dec.2000.