IaC-VIMF: 사이버 공방 훈련을 위한 IaC 기반가상 인프라 변이 생성 프레임워크
IaC-VIMF: IaC-Based Virtual Infrastructure Mutagenesis Frameworkfor Cyber Defense Training
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
사이버 침해사고 대응 능력을 갖춘 전문가의 양성을 위해 여러 기관에서 사이버 훈련장을 구축하여 사이버 방호 전략을 갖춘 보안 전문가를 양성하고 있지만, 기존 시스템에서는 가상훈련 시스템 내 자원의 한계, 시나리오 기반의 실습 콘텐츠 개발 및 운영, 비용적인 문제 등에 있어서 어려움을 겪는다. 이를 보완하기 위해 본 논문에서는 각 조직에 맞는 IT 인프라 환경에 대한 유사한 변이 환경을 제공하여 사이버 공방 훈련자가 다양한 경험을 축적할 수 있도록 하는 가상 인프라 변이 생성 프레임워크를 제안한다. 실험 및 평가를 위해 기존의 컨테이너를 IaC(Infrastructure-as-Code) 환경의 컨테이너로 전환하고 코드 내 변이할 수 있는 요소들을 데이터로 추출하여 자연어 처리 모델인 Word2Vec에 학습시켜 구성 데이터를 변이하여 새로운 코드를 생성하고 새로운 컨테이너 환경을 제시한다.
Abstract
To develop experts capable of responding to cyber security incidents, numerous institutions have established cyber training facilities to cultivate security professionals equipped with effective defense strategies. However, these challenges such as limited resources, scenario-based content development, and cost constraints. To address these issues, this paper proposes a virtual infrastructure variation generation framework. It provides customized, diverse IT infrastructure environments for each organization, allowing cyber defense trainers to accumulate a wide range of experiences. By leveraging Infrastructure-as-Code (IaC) containers and employing Word2Vec, a natural language processing model, mutable code elements are extracted and trained, enabling the generation of new code and presenting novel container environments.
참고문헌 (22)
- Yuchen Yang, "Survey on Security and Privacy", IEEE Internet of Things Journal, 4(5), pp.1250~1258 (2017)
- Manos Antonakakis, "Understanding the Mirai Botnet", Proceedings of the 26th USENIX Security Symposium, pp.1093~1110 (2017)
- 최영한, "사이버위기 경보 기반 사이버 방어 훈련장 설계 및 구축 연구", 정보보호학회논문지, 30(5), pp.805~821 (2020), 한국정보보호학회[DOI]
- Towards Effective Cybersecurity Education and Training, "Razvan Beuran", JAIST, 1~16 (2016)
- Vincent E. Urias, "Cyber Range Infrastructure Limitations and Needs of Tomorrow : A Position Paper", 2018 International Carnahan Conference on Security Technology(ICCST), pp.1~5 (2018)
- Dorothy E. Denning, "Information warfare and security vol. 4" (1999), Addison-Wesley
- "Security-Gym"[URL]
- J. H. Yu, "Technological Trends in Intelligent Cyber Range", Electronics and Telecommunications Trends, 37(4), pp.36~45 (2022), ETRI
- Bernard Ferguson, "National Cyber Range Overview", 2014 IEEE Military Communications Conference, pp.123~128 (2014)
- "CyberSecurity,EU"[URL]
- Meir Kalech, "Cyber-attack detection in SCADA systems using temporal pattern recognition techniques", Computers & Security, 84, pp.225~238 (2019)
- Z. Cliffe Schreuders, "Security Scenario Generator(SecGen) : A Framework for Generating Randomly Vulnerable Rich-scenario VMs for Learning Computer Security and Hosting CTF Events", 2017 USENIX Workshop on Advances in Security Education (2017)
- Jonathan Burket, "Automatic Problem Generation for Caputre-the-Flag Competitions", 2015 USENIX Summit on Gaming, Games, and Gamification in Security Education (2015)
- Thierry Titcheu Chekam, "Mart : A Mutant Generation Tool for LLVM", Proceedings of the 2019 27th ACM Joint Meeting on European Software Engineering Conference and Symposium on the Foundations of Software Engineering, pp.1080~1084 (2019)
- Testing Framework for Large and Complex Java Systems, "Fundamentals of Software Engineering", 2017, 148~163
- "Mutate-NLP"[URL]
- Kang Min Yoo, "GPT3Mix: Leveraging Large-scale Language Models for Text Augmentation", Findings of the Association for Computational Linguistics: EMNLP 2021, pp.2225~2239 (2021)
- Varun Kumar, "Data Augmentation using Pre-trained Transformer Models", Proceedings of the 2nd Workshop on Life-long Learning for Spoken Language Systems, pp.18~26 (2020)
- Mofiz Mojib Haider, "Automatic Text Summarization Using Gensim Word2Vec and K-Means Clustering Algorithm", 2020 IEEE Region 10 Symposium (TENSYMP), pp.283~286 (2020)
- Kenneth Ward Church, "Word2Vec", Natural Language Engineering, 23(1), pp.155~162 (2017)
- Laurens van der Maaten, "Visualizing Data using t-SNE", Journal of Machine Learning Research, 9(86), pp.2579~2605 (2008)
- 강형석, "Word2vec 모델로 학습된 단어 벡터의 의미 관계 분석", 정보과학회논문지, 46(10), pp.1088~1093 (2019), 한국정보과학회[DOI]