본문 바로가기
KERD
논문KCI 등재

An Encrypted Response Model using Application Access Failure information for the Attack of IP Spoofing in a Cloud Computing Environment

1

조회

0

다운로드

2

인용

0

참고문헌

키워드

주제분류학제간연구

초록

The big data is typically collect a large amount of information. It is processed of receiving a service and is based on a cloud computing environment. These environments are easily exposed to illegal accesses, which use IP Spoofing compared to that of a single system. In this study traceback information is used to identify normal users in order to response to illegal accesses in a cloud computing environment. Then, services are provided after the identification process for the normal access frequency of users by comparing it with access failure information within a specific time. If there exists mismatches in traceback information or the access failure information exceeds a critical value, the access will be identified as an illegal access. Then, the access is immediately interrupted and is recorded as illegal access information. In addition, as an access that is attempted at an unexpected location, which is not registered in the existing user traceback information due to movements of normal users, is presented, the data will be provided after encrypting it for responding illegal accesses due to leaks of OTP. The model presented in this study is safe for authorized users against illegal accesses, which use IP Spoofing in a cloud computing based big data collecting environment, and improves service availabilities.

Abstract

The big data is typically collect a large amount of information. It is processed of receiving a service and is based on a cloud computing environment. These environments are easily exposed to illegal accesses, which use IP Spoofing compared to that of a single system. In this study traceback information is used to identify normal users in order to response to illegal accesses in a cloud computing environment. Then, services are provided after the identification process for the normal access frequency of users by comparing it with access failure information within a specific time. If there exists mismatches in traceback information or the access failure information exceeds a critical value, the access will be identified as an illegal access. Then, the access is immediately interrupted and is recorded as illegal access information. In addition, as an access that is attempted at an unexpected location, which is not registered in the existing user traceback information due to movements of normal users, is presented, the data will be provided after encrypting it for responding illegal accesses due to leaks of OTP. The model presented in this study is safe for authorized users against illegal accesses, which use IP Spoofing in a cloud computing based big data collecting environment, and improves service availabilities.

참고문헌 (10)

  1. J. z. Li, "An important aspectt of big data: Data usability", pp.1147~1162 (2013), School of Computer Science and Technology, Harbin Institute of Technology
  2. Y-Z. Wang, "Network big data: Present and future", 36(60) (2013)
  3. S. Curry, "Big data fuels intelligence-driven security", RSA Security Brief, Jan. 2013, ~ (2013)
  4. C-S. Yi, "DDos detecting model of cloud computing environment", Korea Institute of Infoemation Technology the 2015 KIIT Summer Conference, pp.4~6 (2015)
  5. O.Chen, "Cloud computing and its key techniques", 29(9), pp.2562~2567 (2009)
  6. J. H. Sun, "Cloud computing in the vulerability analysis for personal information security", Journal of Information and Security, 10(4), pp.77~82 (2010)
  7. 이해동, "신뢰 호스트 상호 협력을 통한 IP 스푸핑 공격의 효율적 탐지 및 방어 모델 설계", 한국정보통신학회논문지, 16(12), pp.2649~2656 (2012), 한국정보통신학회[DOI]
  8. YanTing Mu, "A Proposal of a Defense Model for the Abnormal Data Collection using Trace Back Information in Big Data Environments", 한국지식정보기술학회 논문지, 10(2), pp.153~162 (2015), 한국지식정보기술학회
  9. R-W. Huang, "Privacy-preserving computable encryption scheme of cloud computing", Chinese Journal of Computers, 34(12), pp.2391~2402 (2011)
  10. 허진경, "암호화와 PKI를 이용한 웹 어플리케이션 인증시스템", 융합보안 논문지, 8(1), pp.1~7 (2008), 한국융합보안학회

관련 논문AI추천

이 간행물의 다른 논문 (11건)