기업 사설 네트워크 우회 접속 분석 및 통제 대책 연구
A Study on Analysis and Control of Circumvent Connection to the Private Network of Corporation
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
A company’s private network protected by a firewall and NAT(Network Address Translation) is not accessible directly through an external internet. However, as Reverse Connection technology used by NetCat extends to the technologies such as SSH Tunnel or HTTP Tunnel, now anyone can easily access a private network of corporation protected by a firewall and NAT. Furthermore, while these kinds of technologies are commercially stretching out to various services such as a remote control and HTTP Tunnel, security managers in a company or general users are confused under the circumstances of inner or outer regulation which is not allowed to access to an internal system with a remote control. What is more serious is to make a covert channel invading a company’s private network through a malicious code and all that technologies. By the way, what matters is that a given security system such as a firewall cannot shield from these perceived dangers. So, we analyze the indirect access of technological methods and the status quo about a company’s internal network and find a solution to get rid of the related dangers.
Abstract
A company’s private network protected by a firewall and NAT(Network Address Translation) is not accessible directly through an external internet. However, as Reverse Connection technology used by NetCat extends to the technologies such as SSH Tunnel or HTTP Tunnel, now anyone can easily access a private network of corporation protected by a firewall and NAT. Furthermore, while these kinds of technologies are commercially stretching out to various services such as a remote control and HTTP Tunnel, security managers in a company or general users are confused under the circumstances of inner or outer regulation which is not allowed to access to an internal system with a remote control. What is more serious is to make a covert channel invading a company’s private network through a malicious code and all that technologies. By the way, what matters is that a given security system such as a firewall cannot shield from these perceived dangers. So, we analyze the indirect access of technological methods and the status quo about a company’s internal network and find a solution to get rid of the related dangers.
참고문헌 (19)
- Marc S.Sokol, "Security Architecture and Incident Management for E-Business", 9~14 (2000)
- "원격조정 가능한 디도스 해킹프로그램, 2010년 9월(웹검색일)"[URL]
- 국가 사이버 안전센터, "상용 원격제어프로그램을 이용한 해킹기법 및 대처방안", 2~6 (2005)
- Manuel Crotti, "Detecting HTTP Tunnels with Statistical Mechanisms", 2007 IEEE International Conference on Communications, pp.6162~6168 (2007)
- "토종 SW벤처 알서포트, 日 PC 원격제어시장 점령, Sep. 2010년 9월(웹검색일)"[URL]
- 인터넷 침해대응센터, "2010년 07월 인터넷침해사고 동향 및 분석 월보", 5~6 (2010)
- 서정택, "가상환경을 이용한 악성코드 탐지기술", 정보보호학회지, 17(5), pp.74~82 (2007)
- 박성용, "보안 인증을 통한 ActiveX Control 보안 관리 모델에 관한 연구", 정보보호학회논문지, 19(6), pp.113~119 (2009), 한국정보보호학회
- 성재모, "최근 주요 해킹 피해 동향과 대응 방안", 정보보호학회지, 16(1), pp.80~84 (2006)
- 이은배, "망 분리기반의 정보보호에 대한 고찰", 정보보호학회지, 20(1), pp.39~46 (2010)
- 손태식, "보안솔루션에 대한 우회 공격 기법 연구", 정보보호학회 종합학술발표회 논문집, 12(1), pp.139~143 (2002)
- Yu Wang, "Automatic Application Signature Construction from Unknown Traffic", 24th IEEE International conference on Advanced Information Networking and Applications, pp.20~23 (2010)
- Zhenbin Guo, "Identification Peer-to-Peer Traffic for High Speed Networks Using Packet Sampling and Application Signatures", Signal Processing,2008.ICSP 2008.9th International Conference on, pp.2013~2019 (2008)
- Like Zhang, "Analysis of Payload Based Application Level Network Anomaly Detection", Proceedings of the 40th Hawaii International Conference on System Sciences-2007, pp.1~10 (2007)
- Jan Kanclirz, "NetCat Power Tools" (2008), Syngress
- "Shell Shoveling, 2010년 9월(웹검색일)"[URL]
- "Upgrading to TLS Within HTTP/1.1, 2010년 9월(웹검색일)"[URL]
- Mason McDaniel, "Content Based File Type Detection Algorithms", Proceedings of the 36th Hawaii International Cnference on System Sciences, 통권 : 9, pp.332~ (2003)
- 김지숙, "민간기업과 공공기관의 정보보호 관리체계 차이 비교", 정보보호학회논문지, 20(2), pp.117~129 (2010), 한국정보보호학회