동적 네트워크 환경에 적용 가능한 Attack Graph 모델 연구
An Attack Graph Model for Dynamic Network Environment
2
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
시스템 및 네트워크 환경의 규모가 확대되고, 네트워크 구조 및 시스템 구성이 빈번하게 변화함에 따라 네트워크관리자가 현황을 수동으로 관리하고 실시간 변동사항을 식별하는 데에 많은 어려움이 발생하고 있다. 본 논문에서는동적인 네트워크 정보를 실시간으로 스캔하고, 사전에 수집한 취약점 정보를 바탕으로 네트워크 내 장치의 취약성정도를 점수화하고 최종적으로 공격자의 입장에서 공격 가능한 모든 경로를 도출하여 네트워크 관리자에게 공격 가능성이 높은 경로 목록을 제공하는 알고리즘을 제안하였다. 또한 제안하는 알고리즘을 토대로 한 Attack Graph를실제로 구현하였으며, Software Defined Networking (SDN) 환경이 포함된 동적으로 변화하는 가상 네트워크환경을 구축한 후 시뮬레이션을 진행하여 Moving Target Defense (MTD) 개념이 반영된 시스템에도 적용이 가능함을 입증하였다.
Abstract
As the size of the system and network environment grows and the network structure and the system configuration changefrequently, network administrators have difficulty managing the status manually and identifying real-time changes. In thispaper, we suggest a system that scans dynamic network information in real time, scores vulnerability of network devices,generates all potential attack paths, and visualizes them using attack graph. We implemented the proposed algorithm basedattack graph; and we demonstrated that it can be applicable in MTD concept based defense system by simulating ondynamic virtual network environment with SDN.
참고문헌 (21)
- Monthly Special Report, "KISA", ~ (2012)
- Jin B. Hong, "A survey on the usability and practical applications of Graphical Security Models", Computer Science Review, 26, pp.1~16 (2017)[DOI]
- Nirnay Ghosh, "NetSecuritas: An Integrated Attack Graph-based Security Assessment Tool for Enterprise Networks", Proceedings of the 2015 International Conference on Distributed Computing and Networking, pp.1~10 (2015)
- L. Wang, "k-Zero Day Safety: Measuring the Security Risk of Networks against Unknown Attacks", Proc. of the 15th European Symposium on Research in Computer Security (ESORICS 2010), 6345, pp.573~587 (2010)
- 김지홍, "시스템 취약점 분석을 통한 침투 경로 예측 자동화 기법", 정보보호학회논문지, 22(5), pp.1079~1090 (2012), 한국정보보호학회
- Moon, Y. H., "Hybrid Attack Path Enumeration System Based on Reputation Scores", Computer and Information Technology (CIT), 2016 IEEE International Conference, pp.241~248 (2016)
- R. Lippmann, "Validating and Restoring Defense in Depth Using Attack Graphs", Military Communications Conference 2006. MILCOM 2006, pp.1~10 (2006), IEEE
- R. P. Lippmann, "Evaluating and strengthening enterprise network security using attack graphs" (2005)
- S. Noel, "Managing attack graph complexity through visual hier- archical aggregation", VizSEC, 2004, 109~118
- Jing Jiang, "Research on Improved Physical Topology Discovery Based on SNMP", 2017 IEEE International Conference on Computational Science and Engineering (CSE) and IEEE International Conference on Embedded and Ubiquitous Computing (EUC) (2017)
- Yusuf, S. E, "Security Modelling and Analysis of Dynamic Enterprise Networks", Computer and Information Technology (CIT), 2016 IEEE International Conference, pp.249~256 (2016)
- M. Ge, "Evaluating Security and Availability of Multiple Redundancy Designs when Applying Security Patches", 2017 47th Annual IEEE, 2017, 53~60
- S. Khan, "Topology discov- ery in software defined networks: Threats taxonomy and state-of-the-art", IEEE Communications Surveys Tutorials, 19(1), pp.303~324 (2016)
- Farzaneh Pakzad, "Efficient topology discovery in software defined networks", 8th International Conference on Signal Processing and Communication Systems (ICSPCS) (2014)
- [URL]
- 박중길, "정보시스템 취약도 계산 방법 개발", 정보보호학회논문지, 17(5), pp.131~140 (2007), 한국정보보호학회
- P. Mell, "A Complete Guide to the Common Vulnerability Scoring System Version 2.0" (2007)
- Ryo Yamada, "Using abnormal TTL values to detect malicious IP packets", Proceedings of the Asia-Pacific Advanced Network 2012, 34, pp.17~34 (2012)
- Software-Defined Networking: The New Norm for Networks, ONF White Paper, , 3~6 (2012)
- 고종빈, "스마트그리드 제어시스템 보안 위협 평가 방안 연구", 정보보호학회논문지, 23(5), pp.873~883 (2013), 한국정보보호학회[DOI]
- The architecture of vmware esxi, VMware White Pap, "Charu Chaubal", ~ (2008)