강화학습 기반 네트워크 취약점 분석을 위한 적대적 시뮬레이터 개발 연구
A Study on the Development of Adversarial Simulator for Network Vulnerability Analysis Based on Reinforcement Learning
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
ICT와 network의 발달로 규모가 커진 IT 인프라의 보안 관리가 매우 어려워지고 있다. 많은 회사나 공공기관에서 시스템과 네트워크 보안 관리에 어려움을 겪고 있다. 또한 하드웨어와 소프트웨어의 복잡함이 커짐에 따라 사람이 모든 보안을 관리한다는 것은 불가능에 가까워지고 있다. 따라서 네트워크 보안 관리에 AI가 필수적이다. 하지만 실제 네트워크 환경에 공격 모델을 구동하는 것은 매우 위험하기에 실제와 유사한 네트워크 환경을 구현하여 강화학습을 통해 사이버 보안 시뮬레이션 연구를 진행하였다. 이를 위해 본 연구는 강화학습을 네트워크 환경에 적용하였고, 에이전트는 학습이 진행될수록 해당 네트워크의 취약점을 정확하게 찾아냈다. AI를 통해 네트워크의 취약점을 발견하면, 자동화된 맞춤 대응이 가능해진다.
Abstract
With the development of ICT and network, security management of IT infrastructure that has grown in size is becoming very difficult. Many companies and public institutions are having difficulty managing system and network security. In addition, as the complexity of hardware and software grows, it is becoming almost impossible for a person to manage all security. Therefore, AI is essential for network security management. However, since it is very dangerous to operate an attack model in a real network environment, cybersecurity emulation research was conducted through reinforcement learning by implementing a real-life network environment. To this end, this study applied reinforcement learning to the network environment, and as the learning progressed, the agent accurately identified the vulnerability of the network. When a network vulnerability is detected through AI, automated customized response becomes possible.
참고문헌 (17)
- Jeong Do Yoo, "Cyber Attack and Defense Emulation Agents", Applied Sciences, 10(6) (2020)
- Lee, jung-jai, "A Study on Cyber Security Technology", Jounal of The Korea Society of Information Technology Policy & Management (ITPM), pp.2339~2344 (2021)
- Ho-Gun Rou, "A Study on Detection Method of Web Attack Using Machine Learning", A Study on Detection Method of Web Attack Using Machine Learning, pp.1642~1650 (2020)
- Sang-Jun Lee, "Research on Core Technology for Information Security Based on Artificial Intelligence", The Korea Journal of BigData, pp.99~108 (2021)
- Chanho Shin, "Cyberattack Goal Classification Based on MITRE ATT&CK : CIA Labeling", Journal of Internet Computing and Services, pp.15~26 (2022)
- Imatitikua D. Aiyannyo, "A Systematic Review of Defensive and Offensive Cybersecurity with Machine Learning", Applied sciences, 10(17) (2020)
- KimJaeuk, "Analysis of Deep Learning Model Vulnerability According to Input Mutation", Journal of The Korea Institute of Information Security and Cryptology, pp.51~59 (2021)
- C.P. Andriotis, "Managing engineering systems with large state and action spaces through deep reinforcement learning", Reliability Engineering & System Safety (2019)
- Doug Miller, "Automated Adversary Emulation: A Case for Plannig and Acting with Unknowns", DTIC (2018)
- "Microsoft 365 Defender Research Team" (2021)[URL]
- "technique" (2023)[URL]
- Jungsik Lee, "A Study on Defense and Attack Model for Cyber Command Control System based Cyber Kill Chain", Journal of Internet Computing and Services, pp.41~50 (2021)
- Barbara Slavin, "Iran:How a Third Tier Cyber Power Can Still Threaten the United States", ATLANTIC COUNCIL (2013)