TICN 시스템을 위한 정보보증 기술
Information Assurance Technologies for TICN System
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
정보보증(information assurance)은 기존의 정보 보호의 개념보다는 넓은 개념으로 다양한 공격과 침입에 대한탐지와 대응뿐만 아니라 사전 대응을 통한 서비스의 광범위한 안전성을 제공해 준다. 현재 대한민국 국방부에서는NCW(Network Centric Warfare) 전장 환경으로의 변화에 따라서 기존에 사용되고 있던 스파이더(SPIDER) 통신망을 개선한 전술종합정보통신체계(TICN: Tactical Information Communication Network)를 도입하고 있다. 본논문에서는 많은 위협 요소가 존재하는 군 전술종합정보통신체계(TICN)에서의 취약점을 분석하고 다양한 형태의 위협에 대하여 TICN 상의 정보를 보호하는 정보보증에 관한 기법들을 제시한다.
Abstract
The information assurance, which is wider concept and more upgraded technology than information security,supports extensive security services taking advance safety measures as well as the information security services such as detection and protection against various kinds of attacks and intrusion. Recently the Korean Ministry of National Defense introduces TICN(Tactical Information Communication Network) system for tactical networks environments instead of the current SPIDER network system in order to follow the trend of NCW(Network Centric Warfare). In this paper, we perform threat analysis on the TICN system and propose information assurance technologies that protect the information over TICN against various kinds of threats.
참고문헌 (30)
- K. Cebrowski, "Network-centric warfare : Its origin and future", in Proc. U.S. Navy institute, pp.1~5 (1998)
- 한영주, "능동네트워크 기반의 DDoS 공격 대응 기술 동향", 정보과학회지, 21(12), pp.49~59 (2004)
- J. Mirkovic, "D-WARD: Source-end defense against distributed denial of service attacks", UCLA. Computer science, 102~131 (2003)
- 전용희, "봇넷기술개요및분석", 한국정보보호 학회지, 18(3), pp.101~108 (2008)
- 이두호, "Anti-jamming 기반전술통신 기술", 한국통신학회지, 24(10), pp.24~33 (2007)
- P. Kocher, "Differential power analysis", in Proc. Advances Cryptography, pp.388~397 (1999)
- "IATF : Information Assurance Technical Framework, release 3.1", National Security Agency, Technical directors IATF Release 3.1, 8~102 (2002)
- M. Albuquerque, "Global information grid edge network interface architecture", in Proc. of MILCOM, pp.1~7 (2007)
- S. Sankaranarayanan, "Enhancing wireless spectrum utilization with a cellular-ad hoc overlay architecture", in Proc. of MILCOM, pp.1~8 (2005)
- C. Baum, "Erasure insertion infrequency-hop communications with fading and partial band interference", IEEE Trans. Veh. Technol, 40(7), pp.1232~1238 (1992)
- Z. Zhang, "Performance of all-directional transmission and reception algorithm in wireless ad-hoc networks with directional antennas", in Proc. of MILCOM, pp.255~230 (2005)
- C. Cowan, "Buffer overflows: attacks and defenses for vulnerability of the decade", in Proc. of DARPA, pp.119~129 (2000)
- M. Srivatsa, "Trust management for secure information flows", in Proc. of MILCOM, pp.34~45 (2008)
- Y. Lee, "Design and implementation of wireless PKI technology suitable for mobile phone in mobile-commerce", Computer Communications, 30(4), pp.893~903 (2007)
- J. Lee, "Wireless PKI technology in Korea", The First International Workshop for Asian PKI, pp.1~16 (2006)
- 장준교, "국내무선PKI 기술규격 소개 및 구축 현황", 정보과학회지, 20(4), pp.43~48 (2002)
- D. Jablon, "Strong password-only authenticated key exchange", ACM Computer Communications Review, 26(5), pp.5~26 (1996)
- 정은희, "무선랜환경에서OTP를 이용해 사용자 인증을 강화시킨 보안 시스템 설계", 한국인터넷정보학회지, pp.141~144 (2008)
- A. Khurri, "Evaluating IP security and mobility on lightweight hardware", Facult of Information and Natural Sciences, 5~14 (2009)
- A. Satoh, "Hardware-focused performance comparison for the standard block ciphers AES, Camellia, and Triple-DES", Lecture Notes in Computer Science, 252~266 (2003)
- M. Abdalla, "Password-based authenticated key exchange in the three-party setting", Lecture Notes in Computer Science, 65~88 (2005)
- 김영진, "국가 전산망 보안관제업무의 효율적수행방안에 관한 연구", 정보보호학회논문지, 19(1), pp.103~111 (2009), 한국정보보호학회
- F. Cuppens, "Alert correlation in a cooperative intrusion detection framework", in Proc. of the IEEE Symposium on Security and Privacy, pp.1~14 (2002)
- P. Bacher, "Know your enemy: tracking botnets", The Honeynet Project & Research Alliance, 1~13 (2005)
- A. Maiti, "Physical unclonable function and true random number generator", in Proc. of the 19th ACM Great Lakes symposium on VLSI, pp.425~428 (2009)
- M. Myers, "RFC2560: X.509 internet Public Key Infrastructure Online Certificate Status Protocol- OCSP", Internet RFCs, 1~23 (1999)
- C. Kaufman, "Internet key exchange(IKEv2) protocol", RFC: 4306, 1~34 (2005)
- F. Xing, "Understanding dynamic denial of service attack in mobile ad hoc networks", in Proc. of MILCOM, pp.1~7 (2006)
- B. Zhou, "A random packet destruction DoS attack for wireless networks", in Proc. of ICC, pp.1~5 (2008)
- C. Cowan, "Buffer overflows: attacks and defenses for vulnerability of the decade", in Proc. of DARPA, pp.119~129 (2000)