보안위협모델링과 국제공통평가기준을 이용한 IP Camera 보안요구사항 분석
Security Requirements Analysis on IP Camera via Threat Modeling and Common Criteria
0
조회
0
다운로드
6
인용
0
참고문헌
키워드
초록
다양한 산업에 걸쳐 IoT 기기의 보급이 급격히 증가하면서 신뢰성, 보안성과 같은 안전한 IoT 기기 및 서비스를 위한 요구가 증가하고 있으며 보안공학에서는 고 신뢰(Trustworthy) 시스템의 설계 및 구현을 위해 안전한 개발 생명주기를 활용한다. 안전한 개발 생명주기는 보안요구사항 도출, 설계, 구현, 운영 단계로 구분되며 각 단계별로 달성하기 위한 목표 및 활동이 존재한다. 그 중 보안요구사항 도출 단계는 가장 첫 단계로 향후 설계, 구현 단계의 목표를 달성을 위해 정확하고 객관적인 보안요구사항을 도출하는 것이 중요하다. 정확하고 객관적인 보안요구사항을 도출하기 위해 보안위협모델링을 활용하며 이를 통해 도출된 보안요구사항은 위협 식별 범위에 대한 완전성과 대응되는 위협에 대한 추적성을 만족시킬 수 있다. 해외에서는 다양한 대상과 보안위협방법론을 활용한 연구가 진행되고 있는 반면 국내 연구는 중요성에 비해 상대적으로 미흡한 편이다. 따라서 본 논문에서는 IP Camera를 대상으로 Data Flow Diagram, STRIDE, Attack Tree와 같은 체계적인 보안위협모델링을 통해 보안요구사항을 도출하는 과정에 대해 설명하고 객관적인 의미 전달을 위해 도출한 보안요구사항은 국제표준인 공통평가기준을 활용하여 표현한다.
Abstract
With rapid increasing the development and use of IoT Devices, requirements for safe IoT devices and services such as reliability, security are also increasing. In Security engineering, SDLC(Secure Development Life Cycle) is applied to make the trustworthy system. Secure Development Life Cycle has 4 big steps, Security requirements, Design, Implementation and Operation and each step has own goals and activities. Deriving security requirements, the first step of SDLC, must be accurate and objective because it affect the rest of the SDLC. For accurate and objective security requirements, Threat modeling is used. And the results of the threat modeling can satisfy the completeness of scope of analysis and the traceability of threats .In many countries, academic and IT company, a lot of researches about drawing security requirements systematically are being done. But in domestic, awareness and researches about deriving security requirements systematically are lacking. So in this paper, I described about method and process to drawing security requirements systematically by using threat modeling including DFD, STRIDE, Attack Library and Attack Tree. And also security requirements are described via Common Criteria for delivering objective meaning and broad use of them.
참고문헌 (48)
- "Security Development Lifecycle"[URL]
- "Cisco Secure Development Lifecycle(SDL)"[URL]
- "VMware Security Development Lifecycle"[URL]
- "OWASP Secure Development Lifecycle Cheat Sheet"[URL]
- Guttorm Sindre, "Capturing Security Requirements through Misuse Cases", Proceedings of the Norsk Informatikkonferanse (2001)
- Guttorm Sindre, "Eliciting security requirements with misuse cases", Requirements Engineering, 10(1), pp.34~44 (2005)
- Edward G. Amosoro, "Fundamentals of computer security technology" (1994), AT&T Bell labs
- Chris Salter, "Toward A Secure System Engineering Methodology", Proceedings of the 1998 Workshop on New Security Paradigms, pp.2~10 (1998)
- "Attack Trees"[URL]
- Adam Shostack, "Experiences Threat Modeling at Microsoft", Microsoft, ~ (2008)
- "Microsoft Threat Modeling Tool 2016"[URL]
- "LINDDUN"[URL]
- "CERT, Software Engineering Institute, Carnegie Mellon University, OCTAVE"[URL]
- "Trike"[URL]
- Tony UcedaVelez, "Real World Threat Modeling using the PASTA Methodology", Proceedings of OWASP AppSec Research 2012 (2012)
- "Threat Risk Modeling"[URL]
- Donn B. Parker, "Our Excessively Simplistic Information Security Model and How to Fix it", ISSA Journal of Requirements Engineering (2010), Springer-Verlag
- Shostack, Adam, "Threat Modeling : Designing for Security" (2014), John Wiley & Sons
- Aaron Marback, "Security Test Generation using Threat Trees", Proceedings of Automation of Software Test on ICSE Workshop (2009)
- Inger Anne Tondel, "Combining misuse cases with attack trees and security activity models", Availability, Reliability, and Security on ARES’10 International Conference (2010)
- Goncalo Martins, "Toward a Systematic Treat Modelling Approach for Cyber-Physical Systems", Proceedings of National Symposium on Resilient Critical Infrastructure (2015)
- Appstore security – 5 lines of defence against malware, "Dr. Marnix Dekker", European Network and Information Security Agency(ENISA), ~ (2011)
- Tong Xin, "Online Banking Seucurity Analysis based on STRIDE Threat Model", International Journal of Security and its Applications, 8, pp.271~282 (2014)
- Anthony Hadding, "Threat Modeling in Embedded Systems", pp.2012
- Kristian Beckers, "A Threat Analysis Methodology for Smart Home Scenarios, Technical Report", Proceeding of the International Workshop on Smart Grid Security, pp.94~124 (2014)
- Anton Bretting, "Vehicle Control Unit Security using Open Source AUTOSAR", M.S., pp.2015
- Katrina Mansfield, "DoD Comprehensive Military Unmanned Aerial Vehicle Smart Device Ground Control Station Threat Modeling", Defense ARJ, ~ (2015)
- Mark Yampolskiy, "Systematic Analysis of Cyber-Attacks on CPS-Evaluating Applicability of DFDbased Approach", Proceedings of the International Symposium on Resilient Control System, pp.55~62 (2012)
- Cletus O. Ohaneme, "Design and Implementation of an IP-Based Security Surveillance System", International Journal of Computer Science Issues, 9(5) (2012)
- Craig Heffner, "Exploiting Surveillance cameras, Like a Hollywood Hacker", Tactical Network Solutions, ~ (2013)
- Sergey Shekyan, "Watching the watchers: hacking wireless IP Security Cameras" (2013), Shape Security and Qualys Inc.
- "Do you know who’s watching you? An in-depth examination of IP Camera attack surface"[URL]
- Lee Tobin, "Reverse Engineering a CCTV system, A case study", Digital Investigation, 11(3), pp.179~186 (2014)
- Security threat report Foreignmade CCTV, IP-Camera, "Red ALert", NSHC and KAIST, ~ (2015)
- CCMB, "Common Criteria for Information Technology Security Evaluation – Part 1 : Introduction and general model, Version 3.1 Revision 4", CCRA, ~ (2012)
- CCMB, "Common Criteria for Information Technology Security Evaluation - Part 2 : Security functional components, Version 3.1 Revision 4", CCR, ~ (2012)
- James Ransome, "Core Software Security, Security at the source" (2013), CRC Press
- 김재기, "위협 모델링 기법을 이용한 펨토셀 취약점 분석에 대한 연구", 정보처리학회논문지. 컴퓨터 및 통신시스템, 5(8), pp.197~210 (2016), 한국정보처리학회[DOI]
- Suvda Myagmar, "Threat Modeling as a Basis for Security Requirements", Symposium on Requirements Engineering for Information Security (2005)
- Vineet Saini, "Threat Modeling Using Attack Tree", Journal of Computing Science in Colleges, 23(4), pp.124~131 (2008)
- Steven F Burns, "Threat Modeling: A Process to Ensure Application Security", OWSP, ~ (2005)
- Caroline Mockel, "Threat modeling approaces and tools for securing architectural designs of an E-banking application", Proceedings of the Information Assurance and Security, pp.149~154 (2010)
- Sathya Prakash Kadhirvelan, "Threat Modelling and Risk Assessment within Vehicular Systems", M.S, pp.2014
- Jia Di, "A Hardware Threat Modeling Concept for Trustable Integrated Circuits", Proceedings of the Region 5 Technical Conference (2007)
- Marwan Abi-Antoun, "Checking Treat Modeling Data Flow Diagrams for Implementation Conformance and Security", Proceeding of the International conference on Automated Software Engineering, pp.393~396 (2007)
- ITSCC, "Supporting Document for Korean National Protection Profile for Network Device V1.0", ~ (2016)
- ITSCC, "Supporting Document for Korean National Protection Profile for Virtual Private Network, V1.0", ~ (2016)
- ITSCC, "Supporting Document for Koeran National Protection Profile for Firewall, V1.0", ~ (2016)