사회공학 사이버작전 개념정립 연구
A Study on the Concept of Social Engineering Based Cyber Operations
0
조회
0
다운로드
4
인용
0
참고문헌
키워드
초록
최근 사이버 공격기술을 활용해 목표시스템을 직접 공격하는 기술적 사이버작전 대신 목표시스템을 관리하는 사람의 취약점을 이용해 목표시스템에 침입하는 사회공학 기법이 각광을 받고 있다. 이러한 추세에도 불구하고 사이버작전과 사회공학 기법 사이의 연관관계에 대한 명확한 개념이 정립되어 있지 않아 많은 혼란이 있는 것이 현실이다. 따라서 본 논문에서는 사회공학 사이버작전에 대한 명확한 개념정립을 통해 향후 사회공학 사이버작전에 대한 심도있는 연구를 위한 토대를 마련하고자 한다.
Abstract
Recently, instead of technical cyber operations that directly attack the target information system by using cyber attacktechniques, social engineering techniques that indirectly invade the system by exploiting the vulnerabilities of persons whomanage the system are being watched. Despite this trend, there is a lot of confusion because there is no clear conceptabout the relationship between cyber operations and social engineering techniques. Therefore, this paper aims at establishinga clear concept of a social engineering cyber operation, helping future researchers in this literature.
참고문헌 (11)
- 신동천, "사회공학 공격의 위험도 평가를 위한 지표 개발", 보안공학연구논문지, 14(2), pp.143~156 (2017), 보안공학연구지원센터[DOI]
- Kevin D. Mitnick, "The Art of Deception : Controlling the Human Element of Security" (2003), John Wiley & Sons
- Jungho Kang et. al., "A Study on the Relationship between Social Engineering and Cyberspace Operations" (2017)
- Dept. of Computer Science in Korea Military Academy, "Introduction to Cyber Warfare, 2nd Ed" (2016), Yangseogak
- ROK Army Training & Doctrine Command, "FM 1-1 Military Terminology" (2017), Republic of Korea Army Headquarters
- US Joint Chief of Staff, "JP 3-12(R) Cyberspace Operations" (2013)
- Operationalizing Social Engineering for Offensive Cyber Operations, Technical Report, "Bryan Skarda", Air Force Institute of Technology, ~ (2008)
- Wenjun Fan, "Social Engineering: I-E based Model of Human Weakness for Attack and Defense Investigations", Computer Network and Information Security, 9, pp.1~11 (2017)
- Nabie Y. Conteh1, "Cybersecurity : risks, vulnerabilities and countermeasures to prevent social engineering attacks", International Journal of Advanced Computer Research, 6(23), pp.31~38 (2016)[DOI]
- P. S. Maan, "Social Engineering: A Partial Technical Attack", International Journal of Computer Science Issues, 9(2), pp.557~559 (2012)
- John Orbell, "A "Cognitive Miser" Theory of Cooperators Advantage", The American Political Science Review, 85(2), pp.515~528 (1991)[DOI]