클라우드 환경에서의 악성트래픽 동적 분석 시스템 설계
Design of Malicious Traffic Dynamic Analysis System in Cloud Environment
0
조회
0
다운로드
0
인용
0
참고문헌
키워드
초록
클라우드 환경은 하이퍼바이저 기반으로 다수의 가상머신들이 상호 연결된 형태로 악성코드의 전파가 용이하기 때문에 다른 환경에 비해 악성코드에 감염될 경우 그 피해규모가 상대적으로 크다. 본 논문에서는 이러한 문제점을 해결하기 위해 안전한 클라우드 환경을 위한 악성트래픽 동적 분석 시스템을 제안한다. 제안하는 시스템은 클라우드 환경에서발생하는 악성트래픽을 판별하여 악성행위를 격리된 가상네트워크 환경에서 지속적으로 모니터링 및 분석한다. 또한, 분석된 결과를 추후 발생하는 악성트래픽의 판별과 분석에 반영한다. 본 논문에서 제안하는 시스템은 클라우드 환경에서 발생하는 신‧변종 악성트래픽 탐지 및 대응을 목적으로 클라우드 환경에서의 악성트래픽 분석환경을 구축함으로써안전하고 효율적인 악성트래픽 동적 분석을 제공한다.
Abstract
The cloud environment is hypervisor-based, and many virtual machines are interconnected, which makes propagation of malicious code easier than other environments. Accordingly, this paper proposes a malicious traffic dynamic analysis system for secure cloud environment. The proposed system continuously monitors and analyzes malicious activity in an isolated virtual network environment by distinguishing malicious traffic that occurs in a cloud environment. In addition, the analyzed results are reflected in the distinguishment and analysis of malicious traffic that occurs in the future. The goal of this research is secure and efficient malicious traffic dynamic analysis by constructing the malicious traffic analysis environment in the cloud environment for detecting and responding to the new and variant malicious traffic generated in the cloud environment.
참고문헌 (12)
- KISA, "2016 internet and information security top ten issues outlook", ~ (2015)
- Shin Yeong-Sang, "Hypervisor-based virtualization security technology trend in the cloud environment", ~ (2014)
- "DDaily" (2010)[URL]
- "AhnLab" (2016)[URL]
- Mariano Graziano, "Towards Network Containment in Malware Analysis Systems", ACSAC '12 Proceedings of the 28th Annual Computer Security Applications Conference, pp.339~348 (2012)
- H. Binsalleeh, "On the Analysis of the Zeus Botnet Crimeware Toolkit", Eighth Annual International Conference on Privacy, Security and Trust (2010)
- Baek Seung-Hun, "Open vSwitch packet processing structure" (2015), PIOLINK
- Justin Pettit, "Stateful Connection Tracking & Stateful NAT", ~ (2014)
- A-Young Son, "A Study on migration for QoS in cloud computing", Proceedings of Symposium of the Korean Institute of communications and Information Sciences (2016)
- Laheeb Mohammed Ibrahim, "Analysis and Detection of the Zeus Botnet Crimeware", International Journal of Computer Science and Information Security, 13(9) (2015)
- Babak Yadegari, "A Generic Approach to Automatic Deobfuscation of Executable Code", 2015 IEEE Symposium on Security and Privacy (2015)