STRIDE and HARM Based Cloud Network Vulnerability Detection Scheme
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
Cloud networks are used to provide various services. As services are increasingly deployed using cloud networks, thereare a number of resources in the cloud that leverage a variety of environments and protocols. However, there is a securityintrusion on these resources, and research on cloud network vulnerability detection is required as threats to cloud resourcesemerge. In this paper, we propose a vulnerability detection scheme using STRIDE and HARM for vulnerability detection ofresources utilizing various environments and protocols, and present cloud network vulnerability detection scheme throughvulnerability detection scenario composition
Abstract
Cloud networks are used to provide various services. As services are increasingly deployed using cloud networks, thereare a number of resources in the cloud that leverage a variety of environments and protocols. However, there is a securityintrusion on these resources, and research on cloud network vulnerability detection is required as threats to cloud resourcesemerge. In this paper, we propose a vulnerability detection scheme using STRIDE and HARM for vulnerability detection ofresources utilizing various environments and protocols, and present cloud network vulnerability detection scheme throughvulnerability detection scenario composition
참고문헌 (23)
- 2019 Internet Security Threat Report, "Symantec", ~ (2019)
- Gartner, "Gartner Forecasts Worldwide Public Cloud Revenue to Grow 17.5Percent in 2019", ~ (2019)
- Wang, L, "Interactive analysis of attack graphs using relational queries.,", Proceedings of 20th IFIP WG 11.3 Working Conference on Data and Applications Security(DBSec 2006), pp.119~132 (2006)
- Jin Hong, "HARMs:Hierarchical Attack Representation Models for Network Security Analysis", Australian Information Security Management Conference, pp.73~81 (2012)
- Tming Chenie, "DroidVecDeep: Android Malware Detection Based on Word2Vec and Deep Belief Network", KSII Transactions on Internet and Information Systems, 13(4), pp.2180~2197 (2019), 한국인터넷정보학회
- "CVE" (2019)[URL]
- "CVE" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "Exploitdatabase" (2019)[URL]
- "STRIDE threat model of Microsoft"[URL]
- Wesam S. Bhaya, "Prevention of Spoofing Attacks in the Infrastructure wireless networks", Journal of Computer Science, 8(10), pp.1769~1779 (2012)
- Kavisankar L, "A pioneer scheme in the detection and defense of DrDoS attack involving spoofed flooding packets", KSII Transactions on Internet and Information Systems, 8(5), pp.1726~1743 (2014), 한국인터넷정보학회[DOI]
- Christian S. Collberg, "Watermarking, Tamper-Proofing, and Obfuscation-Tools for Software Protection", IEEE Transactions on Software Engineering, 28(8), pp.735~746 (2002)
- Seul-Ki Choi, "System Hardening and Security Monitoring for IoT Devices to Mitigate IoT Security Vulnerabilities and Threats", KSII Transactions on Internet and Information Systems, 12(2), pp.906~918 (2018), 한국인터넷정보학회[DOI]
- Adam Shostack, "threat modeling-designing for security" (2014), WILEY
- Adrien Bonguet, "A Survey of Denial-of-Service and Distributed Denial of Service Attacks and Defenses in Cloud Computing", Future internet, ~ (2017)
- Pradeepthi K. V, "Cloud Attack Detection with Intelligent Rules", KSII TRANSACTIONS ON INTERNET AND INFORMATION SYSTEMS, 9(10), pp.4204~4222 (2015)
- Ananth A. Jillepalli, "Analysis of Web Browser Security Configuration Options", KSII Transactions on Internet and Information Systems, 12(12), pp.6139~6160 (2018), 한국인터넷정보학회[DOI]
- A. Karahasanovic, "Adapting Threat Modeling Methods for the Automotive Industry", Proceeding of the 15th ESCAR Conference (2017)