불법 사용자 탐지를 위한 자료접근 패턴 분석 모델
Data Access Pattern Analysis Model for Detecting Illegal Users
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
컴퓨터와 네트워크 환경의 급속한 발전은 개인과 기업의 생활 및 운영패턴 전반적인 과정에 디지털 정보를 필수적으로 요구하고 있다. 이에 따라 디지털 정보는 그 취급과정에 있어 보안의 중요성을 더욱 강하게 인식시키고 있다. 아울러 디지털 정보의 확산은 빠르게 발전하는 다양한 공격 기법들의 집중적인 표적이 되고 있다. 그러므로 사용자들의 개인 정보 및 시스템 정보를 보호하고 불법적인 공격에 대응하는 것은 매우 중요하다. 특히, 고급 지속적 위협(Advanced Persistent Threats, APT)과 같이 복잡하고 세련된 공격 기법은 기존의 대응 방식만으로는 더 이상 안전하다고 할 수 없다. 이에 따라, 사용자의 이상 접근 패턴을 탐지하여 불법적인 공격을 사전에 방지할 수 있는 연구가 더욱 필요하다고 할 수 있다. 본 연구는 개인 식별 정보, 의료 기록 등의 민감한 정보가 포함된 시스템에 대해 비정상적인 접근 패턴을 탐지할 수 있는 모델을 제안한 것이다. 본 논문의 제안 모델은 정보시스템에 대한 접근 경로, 정보접근 패턴 등을 기반으로 시스템의 고가용성 보장과 함께 향후 원격진료 시행에 따른 개인의 진료정보의 안정성을 강화할 수 있는 기법이라고 할 수 있다.
Abstract
The rapid development of computer and network environments is making digital information an essential part of the overall life and operating patterns of individuals and businesses. Accordingly, the importance of security in the handling process of digital information is becoming more and more recognized. In addition, the spread of digital information is becoming an intensive target of various rapidly developing attack techniques. Therefore, it is very important to protect users' personal and system information and respond to illegal attacks. In particular, complex and sophisticated attack techniques such as Advanced Persistent Threats (APT) can no longer be said to be safe using existing response methods alone. Accordingly, it can be said that more research is needed to detect abnormal access patterns of users and prevent illegal attacks in advance. This study proposes a model that can detect abnormal access patterns to systems containing sensitive information such as personal identification information and medical records. The model proposed in this text can be said to be a technique that can ensure high availability of the system based on the access path to the information system, information access patterns, etc., and strengthen the stability of individual medical information in accordance with the implementation of telemedicine in the future.
참고문헌 (15)
- E. J. Khaleefa, "Concept and difficulties of advanced persistent threats(APT) : Survey", International Journal of Nonlinear Analysis and Applications, 13, pp.3047~4052 (2022)
- P. Chen, "A study on advanced persistent threats", 15th IFIP International Conference on Communications and Multimedia Security (CMS), pp.63~72 (2014)
- C. H. An, "Medical treatment cluster composition and security model design of regional public hospitals in Korea for telemedicine", pp.2016
- C. H. An, "Designing mutual cooperation security model for IP spoofing attacks about medical cluster basis big data environment", Convergence security journal, 16(7), pp.21~29 (2016)
- H. T. Ha, "Forecasting model for DDoS attacks in enterprise networks", Journal of The Korea Knowledge Information Technology Society, 8(3), pp.57~64 (2013)
- G. Zhao, "Detecting APT malware infections based on malicious DNS and traffic analysis", IEEE Access, 3, pp.1132~1142 (2015)
- I. Ghafir, "Advanced persistent threat attack detection : An overview", International Journal of Advancements in Computer Networks and Its Security (2014)
- M. Eltahir, "Extracting knowledge from web server logs using web usage mining", Computing, Electrical and Electronics Engineering (ICCEEE), pp.413~417 (2013)
- H. S. Jang, "Data-mining based anomaly detection in document management system", Journal of The Korea Knowledge Information Technology Society, 10(4), pp.465~473 (2015)
- Y. J. Ma, "Prevention of DDoS attacks for enterprise network based on traceback and network traffic analysis", Journal of information and communication convergence engineering, 7(2), pp.157~163 (2009)
- J. S. Park, "Based on URL pattern analysis preventive measures against harmful sites", pp.2019
- Y. T. Mu, "A proposal of a defence model for the abnormal data collection using trace back Information in big data environments", Journal of The Korea Knowledge Information Technology Society, 10(2) (2015)
- M. H. Kim, "An encrypted service data model for using illegal applications of the government civil affairs service under big data environments", Convergence security journal, 15(7), pp.31~38 (2015)
- L. Yang, "Model design for reduce OTP reauthorization based on euclidean distance", Journal of The Korea Knowledge Information Technology Society, 12(5), pp.737~745 (2017)
- L. Yang, "User authentication service model using euclidean distance baesd on encryption", Journal of The Korea Knowledge Information Technology Society, 13(6), pp.695~703 (2018)