위협 헌팅 개념 정립 및 방어기법 비교분석에 관한 연구
A Study on the Establishment of Threat hunting Concept and Comparative Analysis of Defense Techniques
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
최근 기존 보안 솔루션의 한계를 극복하기 위해 제시된 위협 헌팅에 대한 관심이 높아지고 있다. 일반적으로 위협 헌팅은 시스템 내부에 존재하는 위협을 식별 및 제거하는 기법으로 인식되고 있지만 그 정의가 명확하지 않기 때문에 모의 해킹, 침입 탐지, 침해사고 분석 등 다른 용어들과 혼용이 많이 발생하고 있다. 따라서 본 논문에서는 보고서 및 논문에서 발췌한 위협 헌팅의 정의를 비교 분석하여 그 의미를 명확히 하고 방어 기법을 비교분석한다.
Abstract
Recently, there has been a growing interest in threat hunting presented to overcome the limitations of existing security solutions. Threat hunting is generally recognized as a technique for identifying and eliminating threats that exit inside the system. But, the definition is not clear, so there is confusion in terms with penetration testing, intrusion detection, and incident analysis. Therefore, in this paper, compare and analyze the definitions of threat hunting extracted from reports and papers to clarify their implications and compare with defense techniques.
참고문헌 (16)
- 이대성, "북한의 사이버전 위협에 대한 분석과 전망", 융합보안 논문지, 16(5), pp.11~16 (2016), 한국융합보안학회
- SECURITY EFFECT--IVENESS REPORT 2020, "FireEye, Inc.", FIREEYE MANDIANT, ~ (2020)
- M-Trend 2020,”FIREEYE MANDIANT SERVICES |SPECIAL REPORT, "FireEye, Inc.", ~ (2020)
- Is Your Threat Hunting Working? A New SANS Survey for 2020, "Mathias Fuchs", SANS Institute Information Reading Room, ~ (2020)
- Threat Hunting: Open Season on the Adversary, "Eric Cole", SANS Institute Information Reading Room, ~ (2016)
- The Hunter Strikes Back:The SANS 2017 Threat Hunting SSurvey, "Rob Lee", SANS Institute Information Reading Room, ~ (2017)
- SANS 2018 Threat Hunting Survey Result, "Robert M. Lee", SANS Institute Information Reading Room, ~ (2018)
- SANS 2019 Threat Hunting Survey: The Differing Needs of New and Experienced Hunters, "Mathias Fuchs", SANS Institute Information Reading Room, ~ (2019)
- Dan Gunter, "A Practical Model for Conducting Cyber Threat Hunting" (2021), SANS Institute Information Reading Room
- Dannly Akacki, "HUNTPEDIA : Your Threat Hunting Knowledge Compendium" (2017), Sqrrl
- Sqrrl, Inc, "A Framework for Cyber Threat Hunting" (2018), Sqrrl
- Sqrrl, Inc, "Hunt Evil : Your Practical Guide to Threat Hutning" (2019), Sqrrl
- HaddadPajouh, H., "A Deep Recurrent Neural Network Based Approach for Internet of Things Malware Threat Hunting", Future Generation Computer System, 85, pp.88~96 (2018)
- Nazmus Sakib Miazi, "The Design of Cyber Threat Hunting Games : A Case Study", International Conference on Computer Communication and Networks, 26, pp.1~6 (2017)
- Danish Javeed, "An Efficient Approach of Threat Hunting Using Memory Forensics", International Journal of Computer Networks and Communication Security, 8(5), pp.37~45 (2020)
- TTP response based ATT&CK Netowrk, "Hyukjun Kim", KISA, ~ (2020)