인터넷 환경에서의 비정상행위 공격 탐지를 위한 위협관리 시스템

다국어 초록 (Multilingual Abstract)

The Recently, most of Internet attacks are zero-day types of the unknown attacks by Malware. Using already known Misuse Detection Technology is hard to cope with these attacks. Also, the existing information security technology reached the limits because of various attack's patterns over the Internet, as web based service became more affordable, web service exposed to the internet becomes main target of attack. This paper classifies the traffic type over the internet and suggests the Threat Management System (TMS) including the anomaly intrusion detection technologies which can detect and analyze the anomaly sign for each traffic type.

참고문헌 (Reference)

1 "텍스트 마이닝을 이용한 컴퓨터 네트워크의 침입 탐지" 10 (10): 27-32, 2005.11

2 "취약점 위협의 상관성 분석을 통한 네트워크 위험 조기경보 시스템 설계" 15 (15): 2005년2월.

3 "분산환경에성의 침입방지를 위한 통합보안 관리 시스템 설계" 11 (11): 75-82, 2006.5.

4 "로드 분산 방법을 이용한 네트워크 트래픽 모니터링 및 분석" 2002

5 "U. Lindqvist and P.A. Porras. Detecting Computer and Network Misuse with the Production-Based Expert System Toolset (P-BEST)." 146-161, May1999

6 "Structural Structural Analysis of Network Traffic Flows" 2004

7 "KrCERT/CC"

8 "Internet Denial of Service: Attack and Defense Mechanisms. Prentice-Hall, Upper Saddle River, NJ, 2004." 2004

9 "Experience with a Continuous Network Tracing Infrastructure" 2005

10 "Design and deployment of a passive monitoring infrastructure" 2170:556-2170:557, 2001

11 "Anomaly Detection of Web-based Attacks" 2003.10

12 "Anomaly Detection Methods in Wired Network: a Survey and Taxonomy" July2004

13 "A multi-model approach to the detection of web-based attack" Jan2005