본문 바로가기
KERD
논문KCI 등재

IoT 디바이스의 코사인 유사도 분석을 통한 IoT 보안 위협 확산 방지 방법

An Approach to Prevent the Spread of IoT Security Threats through Cosine Similarity Analysis among IoT Devices

이윤경|김정녀|손선경
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2024.12|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제34권 제6호|pp. 1471-1483|DOI https://doi.org/10.13089/JKIISC.2024.34.6.1471

0

조회

0

다운로드

0

인용

0

참고문헌

키워드

IoT SecuritySimilarity AnalysisPrevention of spread of malware
주제분류컴퓨터학

초록

IoT 디바이스를 타겟으로 하는 다수의 악성 코드가 제작되어 DDoS와 같은 공격에 이용되고 있다. 악성코드는 IoT 디바이스의 취약점을 악용하여 전파되며, 악성 코드에 감염된 디바이스와 유사한 특징을 가지고 있는 디바이스는 악성코드가 전파됨에 따라 동일한 악성 코드에 감염될 가능성이 높다. 본 논문에서는 디바이스 특징 정보의 유사도 분석을 통해 보안 위협이 발생할 가능성이 높은 디바이스를 찾는 방법을 제안한다. 또한 제안한 방식의 타당성을 증명하기 위해 기존의 여러 알고리즘과 비교 분석하였다. 제안하는 기술을 통해 보안 위협의 발생 가능성이 높은 디바이스들을 예측함으로써 보안 위협이 IoT 인프라 전체로 확산되는 것을 사전에 방지할 수 있을 것으로 기대한다.

Abstract

A large number of malware targeting IoT devices is being created and used for attacks such as DDoS. This malware exploits vulnerabilities in IoT devices to spread, and devices with similar characteristics to those already infected are more likely to be compromised by the same malware as it spreads. In this paper, we propose a method to identify devices with a high likelihood of security threats by analyzing the similarity of device characteristic information. Furthermore, we validate the proposed approach by performing comparative analyses with existing algorithms. By predicting devices with a high probability of security threats, the proposed technique is expected to prevent the spread of such threats across the entire IoT infrastructure in advance.

참고문헌 (34)

  1. S. Al-Sarawi, "Internet of things market analysis forecasts, 2020–2030", 2020 Fourth World Conference smart trends in systems, security and sustainability (WorldS4), pp.449~453 (2020), IEEE
  2. "Worldwide Internet of Things Spending Guide"[URL]
  3. "IoT Technology Market by Node Component (Sensor, Memory Device, Connectivity IC), Solution (Remote Monitoring, Data Management), Platform, Service, Enduse Application, Geography (2021-2027)"[URL]
  4. M.A. Khan, "IoT security: Review, blockchain solutions, and open challenges", Future generation computer systems, 82, pp.395~411 (2018)
  5. M. Antonakakis, "Understanding the Mirai botnet", 26th USENIX security symposium (USENIX Security 17), pp.1093~1110 (2017)
  6. X. Zhang, "IoT botnet forensics: A comprehensive digital forensic case study on Mirai botnet servers", Forensic Science International:Digital Investigation, 32 (2020)
  7. J. Su, "Lightweight classification of IoT malware based on image recognition", 2018 IEEE 42Nd annual computer software and applications conference (COMPSAC), 2, pp.664~669 (2018)
  8. R. Kumar, "A multimodal malware detection technique for Android IoT devices using various features", IEEE Access, 7, pp.64411~64430 (2019)
  9. H. Darabian, "An opcode-based technique for polymorphic Internet of Things malware detection", Concurrency and Computation: Practice and Experience, 32(6), pp.e5173~ (2020)
  10. J. Jeon, "Dynamic analysis for IoT malware detection with convolution neural network model", IEEE Access, 8, pp.96899~96911 (2020)
  11. R. Chaganti, "Deep learning based cross architecture Internet of Things malware detection and classification", Computers & Security, 120, pp.102779~ (2022)
  12. D. Vasan, "MTHAEL : Cross-architecture IoT malware detection based on neural network advanced ensemble learning", IEEE Transactions on Computers, 69(11), pp.1654~1667 (2020)
  13. V. Rey, "Federated learning for malware detection in IoT devices", Computer Networks, 204, pp.108693~ (2022)
  14. Y.S. Kim, "AI based IoT malware detection", Proceedings of Symposium of the Korean Institute of communications and Information Sciences, pp.1512~1513 (2022)
  15. A.O. Prokofiev, "A method to detect Internet of Things botnets", 2018IEEE Conference of Russian Young Researchers in Electrical and Electronic Engineering (EIConRus), pp.105~108 (2018)
  16. Y. Meidan, "N-baiot—network-based detection of IoT botnet attacks using deep autoencoders", IEEE Pervasive Computing, 17(3), pp.12~22 (2018)
  17. M. Alqahtani, "IoT botnet attack detection based on optimized extreme gradient boosting and feature selection", Sensors, 20(21), pp.6336~ (2020)
  18. Y.N. Soe, "Machine learning-based IoT-botnet attack detection with sequential architecture", Sensors, 20(16), pp.4372~ (2020)
  19. S.I. Popoola, "SMOTE-DRNN : A deep learning algorithm for botnet detection in the Internet-of-Things networks", Sensors, 21(9), pp.2985~ (2021)
  20. T.S. Gopal, "Mitigating Mirai malware spreading in IoT environment", 2018 International Conference on Advances in Computing, Communications and Informatics (ICACCI), pp.2226~2230 (2018)
  21. Z. Ahmed, "Protecting IoTs from Mirai botnet attacks using blockchains", 2019 IEEE 24th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks (CAMAD), pp.1~6 (2019)
  22. X. Pan, "Machine learning white-hat worm launcher for tactical response by zoning in botnet defense system", Sensors, 22(13), pp.4666~ (2022)
  23. M. Özçelik, "Software-defined edge defense against IoT-based DDoS", 2017 IEEE international conference on computer and information technology (CIT), pp.308~313 (2017)
  24. M. Anirudh, "Use of honeypots for mitigating DoS attacks targeted on IoT networks", 2017 International conference on computer, communication and signal processing (ICCCSP), pp.1~4 (2017)
  25. J.A. Jerkins, "Mitigating IoT insecurity with inoculation epidemics", Proceedings of the ACMSE 2018 Conference, pp.1~6 (2018)
  26. M.N. Aman, "IoT-Proctor : A secure and lightweight device patching framework for mitigating malware spread in IoT networks", IEEE Systems Journal, 16(3), pp.3468~3479 (2021)
  27. M.E. Ahmed, "Mitigating DNS query-based DDoS attacks with machine learning on software-defined networking", MILCOM 2017-2017 IEEE Military Communications Conference(MILCOM), pp.11~16 (2017)
  28. B. Al-Duwairi, "SIEM-based detection and mitigation of IoT-botnet DDoS attacks", International Journal of Electrical and Computer Engineering, 10(2), pp.2182~2191 (2020)
  29. "Akamai SIRT Security Advisory: CVE-2023-26801 Exploited to Spread Mirai Botnet Malware"[URL]
  30. "Beware the Unpatchable:Corona Mirai Botnet Spreads via Zero-Day"[URL]
  31. J.D. Lim, "Implementation of smart segmentation framework for preventing security threats spreading in IoT networks", The Journal of Korean Institute of Communications and Information Sciences, 46(8), pp.1321~1331 (2021)
  33. J. Han, "Data Mining: Concepts and Techniques" (2022), Morgan Kaufmann
  34. "NVD Data Feeds"[URL]

관련 논문AI추천

IoT 봇넷 악성코드 기반 침해사고 흔적 수집 방법이형우한국사물인터넷학회 · 사물인터넷융복합논문지2021 · 제7권 제3호소규모 네트워크의 IoT 보안을 위한 저비용 악성코드 탐지 시스템 설계 방안 연구신상윤, 이다희, 이상진한국정보보호학회 · 정보보호학회논문지2023 · 제33권 제3호다크넷 트래픽 기반의 알려지지 않은 IoT 봇넷 선제탐지 방안노희준, 박건량, 송중석한국정보보호학회 · 정보보호학회논문지2023 · 제33권 제2호IoT 네트워크에서 악성 트래픽을 탐지하기 위한 머신러닝 알고리즘의 성능 비교연구현미진한국디지털정책학회 · 디지털융복합연구2021 · 제19권 제9호IoT 인프라 공격 확산 방지 기술 성능 검증을 위한 악성코드 고속 확산 기법 연구김정녀, 황송이한국정보보호학회 · 정보보호학회논문지2021 · 제31권 제4호사물인터넷 환경에서 안전성과 신뢰성 향상을 위한 Dual-IDS 기법에 관한 연구양환석(사)디지털산업정보학회 · (사)디지털산업정보학회 논문지2017 · 제13권 제1호

이 간행물의 다른 논문 (34건)

블록암호 MGFN의 선형 공격에 대한 안전성 분석전용진, 김남일, 백승준, 김종성pp. 1161-1170딥러닝을 활용한 경량 블록 암호의 신경망 구분자 성능 개선 기술 연구오채린, 임우상, 서창호, 김현일, 정수용pp. 1171-1188Width 효율적 ASCON 양자 회로를 이용한 Grover 기반 양자 보안비도 분석최찬호, 최두호, 오진섭pp. 1189-1199terSIDH의 성능 분석 및 상수 시간 구현김수리, 이정환, 홍석희, 허동회, 강태훈pp. 1201-1209기계 학습 활용 운영체제 핑거프린팅 연구 조사김휘강, 안명식, 박상범, 윤경찬pp. 1211-1229
원문 보기