클라우드 기반의 악성 IP 탐지를 위한 보안 시스템 구축 연구

Abstract

Recently, cyber threats related to malicious code are increasing, and unlike large enterprises with well-established security systems, small and medium-sized enterprises (SMEs) or organizations that require a security system are vulnerable to cyber threats. In order to establish a security system against malicious behaviors with low cost for security, this paper proposes a system for detecting and blocking malicious IPs using Malware API. Reliable Malware API is used to distinguish between normal IP and malicious IP. It creates a database of malicious IPs through IPs identified based on the Malware API, sets access control based on security indicators, and provides notification functions to security administrators to facilitate identification of malicious IPs. This system can efficiently respond to infringement incidents by detecting and blocking malicious IPs in the cloud-based security system in a vulnerable environment from the system serviced through the server.