본문 바로가기
KERD
논문KCI 등재

k-SVM을 이용한 Rogue AP 탐지 기법 연구

Detecting Rogue AP using k-SVM method

이시영|문종섭|이재욱
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2014.02|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제24권 제1호|pp. 87-95|DOI http://dx.doi.org/10.13089/JKIISC.2014.24.1.87

0

조회

0

다운로드

4

인용

0

참고문헌

키워드

NetworkSVMRogue APLTE
주제분류컴퓨터학

초록

인가된 AP(Access Point)에 대해서만 사용을 허용하는 무선 통신 환경에서, 스마트폰의 테더링(tethering) 기능에 의한 로그 AP(rogue AP) 사용은 자료 유출과 같은 심각한 보안 문제를 발생시킨다. 이에 본 논문은 홉(hop)간 RTT 값을 특징점(Feature)으로 하고 분류기로 k-SVM(Kernel Support Vector Machine)를 사용하여 로그 AP를 탐지하는 방법을 제안한다. 실험을 통해 유선 네트워크를 이용하여 설치한 일반 AP와 LTE 망을 활용하여설치된 로그 AP 간의 구분이 가능함을 보였다.

Abstract

Under only authorized AP is allowable environment, rogue AP which is generated by a smartphone tethering can be aserious security breach. To solve rogue AP problem, this paper proposes classifying algorithm of Kernel Support VectorMachine using features of RTT data. Through our experiment, we can detect rogue AP from LTE mobile network.

참고문헌 (31)

  1. "Medium Access Control(MAC) security enhancements, amendment 6 to IEEE Standard for local and metropolitan area networks part 11:Wireless Medium Access Control (MAC)and Physical Layer (PHY) specifications", IEEE P802.11i, 2004
  2. Changhua He, "Security Analysis and Improvements for IEEE 802.11i", The 12th Annual Network and Distributed System Security Symposium (NDSS'05), pp.90~110 (2005)
  3. Henry Paul S, "WiFi: what's next?", Communications Magazine IEEE, 40(12), pp.66~72 (2002)
  4. Tarek S. Sobh, "Wi-Fi Networks Security and Accessing Control", IJCNIS, 5(7), pp.9~20 (2013)
  5. Paramvir Bahl, "the security of corporate Wi-Fi networks using DAIR", Proceedings of the 4th international conference on Mobile systems, applications and services, pp.1~14 (2006)
  6. Daisuke Takahashi, "IEEE 802.11user fingerprinting and its applications for intrusion detection", Computers &Mathematics with Applications, 60(2), pp.307~318 (2010)
  7. "AirDefense Services Platform - Motorola Solutions USA"[URL]
  8. "The award-winning wireless networking tool and the best source for your daily Wi-Fi, WiMAX, 3G and VoIP news. NetSt umbler"[URL]
  9. "RogueScanner Free System Administrat ion software downloads"[URL]
  10. Dino Schweitzer, "Using visualization to locate rogue access points", Journal of Computing Sciences in Colleges, 23(1), pp.134~140 (2007)
  11. Payal Bhatia, "Solution to the wireless evil-twin transmitter attack", Risks and Security of Internet and Systems (CRiSIS2010), pp.1~7 (2010)
  12. Kuo-Fong Kao, "A location-aware rogue AP detection system based on wireless packet sniffing of sensor APs", Proceedings of the 2011 ACM Symposium on Applied Computing, pp.32~36 (2011)
  13. Paramvir Bahl, "RADAR: An in-building RF-based user location and tracking system", INFOCOM 2000. Nineteenth Annual Joint Conference of the IEEE Computer and Communications Societie, 2, pp.775~784 (2000), IEEE
  14. Beyah Raheem, "Rogue access point detection using temporal traffic characteristics", Global Telecommunications Conference, 2004. GLOBECOM'04, 7, pp.2271~2275 (2004), IEEE
  15. Wei Wei, "Passive online rogue access point detection using sequential hypothesis testing with TCP ACK-pairs", Proceedings of the 7th ACM SIGCOMM conference on Internet measurement, pp.365~378 (2007)
  16. Lanier Watkins, "A passive approach to rogue access point detection", Global Telecommunications Conference 2007(GLOBECOM'07), pp.355~360 (2007)
  17. Hao Han, "A measurement based rogue AP detection scheme", INFOCOM 2009, pp.1593~1601 (2009)
  18. Phil Simon, "Too Big to Ignore: The Business Case for Big Data", pp.89~90 (2013), Wiley and SAS Business Series
  19. John Robert Anderson, "Machine Learning: An artificial intelligence approach", pp.19~ (1986), Morgan Kaufmann
  20. Bernhard E. Boser, "A training algorithm for optimal margin classifiers", Proceedings of the fifth annual workshop on Computational learning theory, pp.144~152 (1992)
  21. Vladimir N. Vapnik, "The nature of statistical learning theory", pp.133~136 (2000), Springer
  22. Simple learning algorithms for training support vector machines, "Colin Campbell", University of Bristol, ~ (1998)
  23. Massimiliano Pontil, "Properties of support vector machines", Neural Computation, 10(4), pp.955~974 (1998)
  24. Simon Haykin, "Neural networks: a comprehensive foundation" (1994), Prentice Hall PTR
  25. Pyeong-jung Song, "LTE Mobility Management Technology for Network Convergence", Electronics and Telecommunications Trends, 25(6) (2010)
  26. Mathieu Lacage, "IEEE 802.11 rate adaptation: a practical approach", Proceedings of the 7th ACM international symposium on Modeling, analysis and simulation of wireless and mobile systems, pp.126~134 (2004)
  27. Holma H., "LTE for UMTS : OFDMA and SCFDMA Based Radio Access", pp.244~245 (2009), Wiley
  28. Ram Periakaruppan, "GTrace - A Graphical Traceroute Tool", LISA '99 Proceedings of the 13th USENIX conference on System administration, pp.69~78 (1999)
  29. Kenneth Jonsson, "Support vector machines for face authentication", Image and Vision Computing, 20(5-6), pp.369~375 (2002)
  30. "accord - Accord.NET Framework"[URL]
  31. B. Caputo, "Appearance-based Object Recognition using SVMs: Which Kernel Should I Use?", Proc of NIPS workshop on Statistical methods for computational experiments in visual processing and computer vision (2002)

관련 논문AI추천

단말기반 무선 랜 Rogue AP 탐지 기법임권택, 정수환에스케이텔레콤 (주) · Telecommunications Review2012 · 제22권 제6호무선랜 서비스 환경에서의 불법 AP 탐지 기법 분석김민욱, 정수환에스케이텔레콤 (주) · Telecommunications Review2013 · 제23권 제6호스푸핑된 위장 AP 위험성과 탐지 방법김정식, 김태범, 이희조, 정현철에스케이텔레콤 (주) · Telecommunications Review2012 · 제22권 제6호Mobile Adhoc Network에서 CP-SVM을이용한 침입탐지양환석(사)디지털산업정보학회 · (사)디지털산업정보학회 논문지2012 · 제8권 제2호A Method for Detecting Unauthorized Internet Access Node in Private Financial Network김은진, 김휘강, 조형진한국지식정보기술학회 · 한국지식정보기술학회 논문지2015 · 제10권 제6호무선 네트워크 환경에서 가용성 공격에 효과적으로 대응하기 위한 머신러닝 기반 협력 탐지 기법이일구, 전소은, 조민지한국정보처리학회 · 정보처리학회 논문지2025 · 제14권 제9호

이 간행물의 다른 논문 (23건)

소수테이블을 이용한 실용적인 다중 키워드 검색가능 암호시스템양유진, 김상진pp. 5-14GEZEL을 이용한 SEED 및 ARIA 알고리즘 설계 방법권태웅, 김현민, 홍석희pp. 15-29인증서와 개인키 유출 방지를 위한 보안키 저장소 Secure Key Store박영진, 김선종, 이동훈pp. 31-40가우시안 정규기저를 갖는 GF(2ⁿ)의 곱셈에 대한 오류 탐지박영호, 장남수, 김창한pp. 41-50분할 구조를 갖는 Leap-Ahead 선형 궤환 쉬프트레지스터 의사 난수 발생기이제훈, 박영규, 김상춘pp. 51-58
원문 보기