본문 바로가기
KERD
논문KCI 등재

고신뢰 드론 시스템을 위한 스케줄링 측면에서의 서비스 거부 공격 완화 방안 연구

Study on Highly Reliable Drone System to Mitigate Denial of Service Attack in Terms of Scheduling

0

조회

0

다운로드

1

인용

0

참고문헌

키워드

주제분류컴퓨터학

초록

사이버 보안위협이 증가하면서 시스템 보안 수준이 보증된 고신뢰 시스템에 대한 수요가 증가하고 있다. 정보보호제품에 대한 평가․인증 국제 표준인 공통평가기준(CC: Common Criteria)은 고등급 보안 수준을 보증하기 위해시스템에 대한 정형명세 및 검증을 요구하고 있으며 점차 이를 준수하는 사례가 증가하고 있다. 본 논문에서는 고등급 보안 수준을 보증하기 위해 다양한 분야에 적용 가능하며 고신뢰 수준을 요구하는 드론시스템에 대한 보안 위협을도출한다. 그 결과를 기반으로 시스템 커널 내 스케줄링 측면에서 개선된 시스템 모델을 Z/EVES를 활용하여 정형명세 및 검증을 진행함으로써 고신뢰 드론시스템에 적용 가능한 스케줄링 방식을 제안한다.

Abstract

As cyber security threats increase, there is a growing demand for highly reliable systems. Common Criteria, aninternational standard for evaluating information security products, requires formal specification and verification of the systemto ensure a high level of security, and more and more cases are being observed. In this paper, we propose highly reliabledrone systems that ensure high level security level and trust. Based on the results, we use formal methods especiallyZ/EVES to improve the system model in terms of scheduling in the system kernel.

참고문헌 (50)

  1. Adam Greenberg, "Facing Forward : Cyber Security in 2019 and Beyond", FIREEYE, ~ (2018)
  2. Grimm, Tomás, "A survey on formal verification techniques for safety-critical systems-on-chip", Electronics, 7(6) (2018)
  3. Survey of Existing Tools for Formal Verification, "Robert C. Armstrong", SANDIA, ~
  4. Kothari, Suresh, "Modeling lessons from verifying large software systems for safety and security", Proceedings of the 2017 Winter Simulation Conference (2017), IEEE Press
  5. Penix, John, "Verification of time partitioning in the DEOS scheduler kernel", Proceedings of the 22nd international conference on Software engineering (2000), ACM
  6. Penix, John, "Verifying time partitioning in the DEOS scheduling kernel", Formal Methods in System Design, 26(2), pp.103~135 (2005)
  7. Kang, Eunsuk, "Formal modeling and analysis of a flash filesystem in Alloy", International Conference on Abstract State Machines, B and Z (2008), Springer
  8. Bornholt, James, "Specifying and checking file system crash-consistency models", ACMSIGARCH Computer Architecture News, 44(2) (2016), ACM
  9. Barthe, Gilles, "Formally verifying isolation and availability in an idealized model of virtualization", International Symposium on Formal Methods (2011), Springer
  10. Freitas, Leo, "Formal methods for security in the Xenon hypervisor", International journal on software tools for technology transfer, 13(5), pp.463~ (2011)
  11. Leinenbach, Dirk, "Verifying the Microsoft Hyper-V hypervisor with VCC", International Symposium on Formal Methods (2009), Springer
  12. Klein, Gerwin, "Comprehensive formal verification of an OS microkernel", ACM Transactions on Computer Systems (TOCS), 32(1) (2014)
  13. Blackham, Bernard, "Towards verified microkernels for real-time mixed-criticality systems", pp.2013
  14. Gu, Ronghui, "CertiKOS: An Extensible Architecture for Building Certified Concurrent {OS} Kernels", 12th {USENIX} Symposium on Operating Systems Design and Implementation ({OSDI} 16) (2016)
  15. KleinG, AndronickJ, "seL4 : formal verification of a noperating system kernel", Communication of the Acm, ~ (2010)
  16. Hassanalian, Mostafa, "Classifications, applications, and design challenges of drones: A review", Progress in Aerospace Sciences, 91, pp.99~131 (2017)
  17. Shostack, Adam, "Threat modeling: Designing for security" (2014), John Wiley & Sons
  18. Shostack, Adam, "Experiences Threat Modeling at Microsoft", MODSEC@ MoDELS, ~ (2008)
  19. Samland, Fred, "AR. Drone:security threat analysis and exemplary attack to track persons", Intelligent Robots and Computer Vision XXIX:Algorithms and Techniques, 8301 (2012), International Society for Optics and Photonics
  20. Rodday, Nils Miro, "Exploring security vulnerabilities of unmanned aerial vehicles", NOMS 2016-2016IEEE, 2016, ~[DOI]
  21. Shepard, Daniel P, "Drone hack:Spoofing attack demonstration on a civilian unmanned aerial vehicle", ~ (2012)
  22. Rob Kidner, "The security drones report 2017", IFSEC GLOBAL (2017)
  23. AIRSPACE SECURITY INSIGHTS REPORT, "911 Security", Dedrone, ~
  24. Sarah Ludwig, "Drones: A Security Tool, Threat and Challenge", SecurityMagazine, ~
  25. U.S. Department of Transportation, "Unmanned Aircraft System (UAS) Service Demand 2015 – 2035 Literature Review &Projections of Future Usage", ~ (2013)
  26. Korea Internet & Security Agency (KISA), "Software Development Security Guide", ~ (2017)
  27. Kuperman, Benjamin A., "Detection and prevention of stack buffer overflow attacks", Communications of the ACM (2005)
  28. Robertson, William K, "Run-time Detection of Heap-based Overflows", LISA, 3 (2003)
  29. Davi, Lucas, "ROPdefender: A detection tool to defend against return-oriented programming attacks", Proceedings of the 6th ACM Symposium on Information, Computer and Communications Security (2011), ACM
  30. Wagle, Perry, "Stackguard: Simple stack smash protection for gcc", Proceedings of the GCC Developers Summit (2003)
  31. Nakagawa, Gaku, "Fork bomb attack mitigation by process resource quarantine", 2016Fourth International Symposium on Computing and Networking (CANDAR) (2016), IEEE
  32. Berlot, Michele, "Dealing with Process Overload Attacks in UNIX", Information Security Journal: A Global Perspective, 17(1), pp.33~44 (2008)
  33. J. Woodcock, "The certification of the Mondex electronic purse to ITSEC Level E6", Formal Aspects of Computing, 20 (2008)
  34. S. Stepney, "Formal Methods for Industrial Products" (2000), Springer
  35. McDermott, "A Formal Security Policy for Xenon", ACM, Conference on Computer and Communications Security, Virginia, pp.43~52 (2008)
  36. "Tokeneer ID Station EAL5Demonstrator: Summary Report" (2008)[URL]

관련 논문AI추천

이 간행물의 다른 논문 (19건)