안전한 웹 서버 환경을 위한 시큐어코딩 도구, 웹쉘 탐지도구 간의 상호연동 시스템 설계
A Design of Inter-Working System between Secure Coding Tools and Web Shell Detection Tools for Secure Web Server Environments
1
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
Recently, with the development of the ICT environment, the use of the software is growing rapidly. And the number of the web server software used with a variety of users is also growing. However, There are also various damage cases increased due to a software security vulnerability as software usage is increasing. Especially web shell hacking which abuses software vulnerabilities accounts for a very high percentage. These web server environment damage can induce primary damage such like homepage modification for malware spreading and secondary damage such like privacy. Source code weaknesses checking system is needed during software development stage and operation stage in real-time to prevent software vulnerabilities. Also the system which can detect and determine web shell from checked code in real time is needed. Therefore, in this paper, we propose the system improving security for web server by detecting web shell attacks which are invisible to existing detection method such as Firewall, IDS/IPS, Web Firewall, Anti-Virus, etc. while satisfying existing secure coding guidelines from development stage to operation stage.
Abstract
Recently, with the development of the ICT environment, the use of the software is growing rapidly. And the number of the web server software used with a variety of users is also growing. However, There are also various damage cases increased due to a software security vulnerability as software usage is increasing. Especially web shell hacking which abuses software vulnerabilities accounts for a very high percentage. These web server environment damage can induce primary damage such like homepage modification for malware spreading and secondary damage such like privacy. Source code weaknesses checking system is needed during software development stage and operation stage in real-time to prevent software vulnerabilities. Also the system which can detect and determine web shell from checked code in real time is needed. Therefore, in this paper, we propose the system improving security for web server by detecting web shell attacks which are invisible to existing detection method such as Firewall, IDS/IPS, Web Firewall, Anti-Virus, etc. while satisfying existing secure coding guidelines from development stage to operation stage.
참고문헌 (13)
- 한국인터넷진흥원, "2014 한국인터넷백서", pp.494~ (2015)
- 2008년 5월 인터넷침해사고 동향 및 분석 월보, "한국인터넷진흥원", 22~ (2008)
- 조성규, "개인정보 보호를 위한 조직구성과 관리체계에 관한 표준화 모델링", 디지털산업정보학회지, 8(3), pp.33~39 (2012)
- 서우석, "보안이벤트 사이의 상관분석 기법을 이용한 조기위험경보시스템의 설계", 디지털산업정보학회지, 8(1), pp.65~72 (2012)
- 정다혜, "시큐어 코딩 중심으로 본 원자력 관련 소프트웨어", 정보보호학회논문지, 23(2), pp.243~250 (2013), 한국정보보호학회
- 김준호, "소스코드 보안약점 탐지를 위한 정적도구의 활용과 기호실행 엔진을 활용한 개선 방안연구", pp.2015
- 박우열, "PHP 시큐어 코딩 규칙의 개발을 위한 보안 취약점 분석", 2014 한국정보과학회 제 41 회 정기총회 및 동계학술발표회, pp.750~752 (2014)
- 안준선, "SW 개발보안을 위한 보안약점 표준목록 연구", 정보보호학회지, 25(1), pp.7~17 (2015)
- 김정숙, "소프트웨어 보안을 위한 시큐어 코딩", 한국콘텐츠학회지, 11(4), pp.56~60 (2013)
- 최병하, "HTTP Outbound Traffic을 이용한 개선된 악성코드 탐지 기법", 한국컴퓨터정보학회논문지, 14(9), pp.47~54 (2009), 한국컴퓨터정보학회
- 박남열, "우회기법을 이용하는 악성코드 행위기반 탐지 방법", 정보보호학회논문지, 16(3), pp.17~28 (2006), 한국정보보호학회
- 허준호, "근거리 통신망에서의 DDoS 봇넷 탐지 시스템 구현", 멀티미디어학회논문지, 16(6), pp.678~688 (2013), 한국멀티미디어학회[DOI]
- 손유승, "스피어 피싱 대응을 위한 관리적 보안대책에 의한 접근", 한국정보통신학회논문지, 17(12), pp.2753~2762 (2013), 한국정보통신학회[DOI]