전력분야 사이버 위협 분석 및 기반시설 보안 강화를 위한 해외 IP 대역 차단 방안 연구
Oversea IP Ranges Blocking for Security Enhancement of Critical Infrastructures with Cyber Threats Analysis in Electric Industry
0
조회
0
다운로드
2
인용
0
참고문헌
키워드
초록
최근 기반시설에 대한 사이버 공격의 증가에 따라 기반시설의 안전성 강화를 위한 연구와 노력이 계속되어 왔다. 본 논문에서는 다양한 사이버 위협의 정의와 유형에 대해 살펴보고 사이버 위협의 정의를 명확히 하였다. 중국으로부터의 심각한 사이버 위협에 대해 살펴본 후, 사이버 위협의 실체, 즉, 사이버 위협의 출발지, 위협의 유형, 빈도등을 분석하여 사이버 위협의 명확한 모습을 규명하였다. 이를 통해 사이버 위협 차단을 위한 불필요한 해외 IP 대역 차단 기준을 확립하였다. 불필요한 해외 IP 대역 차단을 위한 방법으로 정보시스템 단위별 차단 방법과 네트워크단위별 차단방법을 제안하였다. 또한 보안장비별 차단 특성과 보안관제 개선 효과, 악성 해외 IP 대역 차단시의 영향, 해외 정상 사용자들에 대한 서비스 방안 등을 제시하였다.
Abstract
Recently, there has been a lot of studies and efforts to strengthen the stability of critical infrastructures against increasingcyber attacks to critical infrastructures. In this thesis, I defined what cyber threats are, after showing you various definitionsabout what cyber threats are and what the types are. After studying about significant cyber threats from China, I showedyou the realities of cyber threats with the analysis about starting points, types of cyber threats, ratios of attacks and so on. At last, I defined guidelines about unnecessary oversea IP range blocking. Also, I proposed unnecessary oversea IP rangeblocking methodologies with per information system and per network system. Furthermore, I proposed blocking characteristicsper security equipment and security operation improvement and blocking effects and service process to normal oversea users.
참고문헌 (18)
- Dennis H, "Ubiquitous Connectivity and Threats: Architecting The Next Generation Cyber Security Operation", The 7th Annual IEEE International Conference, pp.1506~1509 (2017)
- Geet Parekh, "Identifying Core Concepts of Cybersecurity : Results of Two Delphi Processes", IEEE Transactions on Education, 61(1), pp.11~20 (2018)
- Giyoung Kim, "Threats quantification technics for pre-detection about cyber threats", Journal of The Korea Institute of Information Security & Cryptology, 22(8), pp.15~20 (2012)
- SeolHwa Lim, "APT present condition and malignant code countermeasures", Journal of The Korea Institute of Information Security & Cryptology, 24(2), pp.63~70 (2014)
- YongWoo Lee, "A Study on the Critical Information Security Threat and Measures to Protect", Master’s, Department of Management &Industry, pp.2011
- DongHoon Song, "Cyber security threats assessment with atomic power infrastructures’ cyber invasion cases studies", Journal of The Korea Institute of Information Security &Cryptology, 28(2), pp.51~59 (2018)
- Imsup Lee, "A study for Electric IT’s Security Improvement measures", Master’s, Department of Information Security Engineering, pp.2012
- ChaWon Joo, "A study about Risk analysis and countermeasures with Public Agencies’ cyber invasion types", Master’s, Department of Information Security Engineering, pp.2013
- 이후기, "보안관제 기반에서의 유해IP 보관 주기 산정에 관한 연구", 예술인문사회 융합 멀티미디어 논문지, 7(7), pp.953~962 (2017), 사단법인 인문사회과학기술융합학회[DOI]
- GyoungSoo Shin, "A Study on Cyber Threats from North Korea and Countermeasures", Doctor’s, Department of Political Science and Diplomacy, pp.2018
- HaeGwon Choi, "Study on trend of DDoS threats and prevention for the network service security risk", Master’s, Department of Technology & Industry, pp.2008
- Patrick P. Tsang, "Anonymous IP-address Blocking in Tor with Trusted Computing", Dartmouth College of USA, 1~7 (2006)
- Chris Wilcox, "Correlating Spam Activity with IP Address Characteristics", Colorado State University of USA, 1~6 (2010)
- Ferry Astika Saputra, "Detecting and Blocking Onion Router Traffic Using Deep Packet Inspection", International Electronics Symposium(IES), pp.283~288 (2016)
- "Network ingress filtering: defeating denial of service attacks which employ ip source address spoofing(BCP 38)" (2000)[URL]
- Vijayalakshmi Murugesan, "HPSIPT : A high-precision single-packet IP traceback scheme", Elsevier journal of Computer Networks, 143, pp.275~288 (2018)
- Clay Johnson III, "Executive Office of the President _ implementation of Trusted Internet Connections_m08-05", Executive office of the President, pp.1~ (2007)
- Federal Network Resilience, "Trusted Internet Connections reference Architecture Document version 2. 0_TIC_Ref_Arch_v2. 2_2017", Homeland Security, pp.1~75 (2017)