TCP/IP Layer별 공격패턴 분석에 기반한 CFC를 이용한 DDoS 방어 알고리즘 연구
A Study on the DDoS Defense Algorithm using CFC based on Attack Pattern Analysis of TCP/IP Layers
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Paper is on defense for so-called internet crisis, the attack of DDoS (Distributed Denial of Service) which was targeted to the central government ministries, financial sector, and portal sites of chief counties including Korea on June 7th, 2009 as its start. By conducting attack with various DDoS attacking methods in the lab environment and dividing networks targeted by the attack by layers, this paper records and analyzes the chief information for attack, destination information of packets, defense policy setting, and the flow of packet attack with the subjects of the networks separated. This study suggests CFC system using multiple firewalls applying defense policy corresponding to the target layer for ultimate attack and tests it according to the result of analyzing the attack packet information and its amount, log analysis, access recording port, and MAC and IT information, etc. by layers. This article is meaningful in that it analyzes the attack by layers, establishes firewall policy for protecting each layer, and secures accurate mechanism for detect and defense.
Abstract
Paper is on defense for so-called internet crisis, the attack of DDoS (Distributed Denial of Service) which was targeted to the central government ministries, financial sector, and portal sites of chief counties including Korea on June 7th, 2009 as its start. By conducting attack with various DDoS attacking methods in the lab environment and dividing networks targeted by the attack by layers, this paper records and analyzes the chief information for attack, destination information of packets, defense policy setting, and the flow of packet attack with the subjects of the networks separated. This study suggests CFC system using multiple firewalls applying defense policy corresponding to the target layer for ultimate attack and tests it according to the result of analyzing the attack packet information and its amount, log analysis, access recording port, and MAC and IT information, etc. by layers. This article is meaningful in that it analyzes the attack by layers, establishes firewall policy for protecting each layer, and secures accurate mechanism for detect and defense.
참고문헌 (19)
- "DDoS 악성코드 유포 개요"[URL]
- 시스코코리아, "DDoS 공격 비상, 어떻게 대처할 것인가?", ~ (2009)
- "분산 서비스 거부공격(DDoS)으로 인한 국내 주요 홈페이지 인터넷 접속 장애, 이용자보호팀 신화수"[URL]
- 전용희, "DDoS 공격 및 대응 기법 분류", 한국정보보호학회논문지, 19(3), pp.46~57 (2009)
- Hunt, R, "Internet", Intranet firewall security-policy, architecture and transaction services, 1998, pp.2(12), 1107~1123
- Liu, A. X, "Firewall Policy Queries", 20(6), pp.766~777 (2000)
- 노시춘, "네트워크보안 인프라의 차단구조 설계방법", (사)디지털산업정보학회 논문지, 2(2), pp.9~20 (2006), (사)디지털산업정보학회
- 천재홍, "VoIP의 DoS공격 차단을 위한 IPS의 동적 업데이트엔진", 한국컴퓨터정보학회논문지, 11(6), pp.165~174 (2006), 한국컴퓨터정보학회
- Schultz, E. E, "When Firewalls Fail: Lessons Learned From Firewall Testing", Network security, 8~12 (1997)
- 천우성, "DoS공격에 대한 N-IDS 탐지 및 패킷 분석 연구", 한국컴퓨터정보학회논문지, 13(6), pp.217~224 (2008), 한국컴퓨터정보학회
- 이창우, "분산 환경에서의 침입방지를 위한 통합보안 관리 시스템 설계", 한국컴퓨터정보학회논문지, 11(2), pp.75~82 (2006), 한국컴퓨터정보학회
- Wool, A, "The use and usability of direction-based filtering in firewalls", Computers & security, 23(6), pp.459~468 (2004)
- Liu, A. X, "Firewall policy verification and troubleshooting", Computer networks, 53(16), pp.2800~2809 (2009)
- Pozo, S, "Model-Based Development of firewall rule sets: Diagnosing model inconsistencies", Information and software technology, 51(5), pp.894~915 (2009)
- 박원형, "SNS를 이용한 분산서비스거부(DDoS) 공격 분석 및 탐지 방안 연구", 정보*보안논문지, 9(1), pp.151~159 (2009), 한국사이버테러정보전학회
- 이인희, "IP 역추적 설계 및 보안감사 자료생성에 관한 연구", 한국컴퓨터정보학회지, 15(1), pp.53~64 (2007)
- 전정훈, "효율적인 네트워크 보안운영을 위한 Exclusive Firewall 관한 연구", 한국컴퓨터정보학회논문지, 12(2), pp.93~102 (2007), 한국컴퓨터정보학회
- 김선호, "고속 인터넷 백본망에서의 분산형 서비스 거부 공격 탐지 방법", 한국통신학회논문지B, 32(2), pp.90~99 (2007), 한국통신학회
- 이영교, "정부 주요기관에 대한 사이버 공격의 대처 방법", (사)디지털산업정보학회 논문지, 4(2), pp.39~47 (2008), (사)디지털산업정보학회