본문 바로가기
KERD
논문KCI 등재

사이버 보안 연구 프레임워크로써의 Emulab 활용 동향연구

Research on the Trend of Utilizing Emulab as Cyber Security Research Framework

석우진|이만희
한국정보보호학회 (Korea Institute Of Information Security And Cryptology)|2013.12|정보보호학회논문지 (Journal of The Korea Institute of Information Security and Cryptology)|제23권 제6호|pp. 1169-1180|DOI http://dx.doi.org/10.13089/JKIISC.2013.23.6.1169

0

조회

0

다운로드

5

인용

0

참고문헌

키워드

Cyber securityEmulabResearch framework
주제분류컴퓨터학

초록

Emulab은 미국 Utah 대학에서 개발된 연구 프레임워크로써 연구자들에게 필요한 시스템을 원하는 네트워크 구조로 연결하여 주는 On-demand 서비스를 그 핵심으로 하고 있다. 특히 Emulab은 시뮬레이션 또는 가상화 기술을사용하지 않고 실제 시스템에 운영체제를 구동시킴으로써 연구의 검증환경을 실제 환경에 가깝게 하는 것이 특징이다. 이로 인해 Emulab은 사이버 보안 분야뿐만 아니라 네트워크 분야 등에서도 다양하게 활용되고 있었지만 국내에는활용된 바가 거의 없었다. 최근 한국과학기술정보연구원(KISTI)에서 소규모 Emulab을 자체적으로 구축·운영함에따라 국내에서도 Emulab을 활용한 연구가 활성화 될 것으로 기대된다. 이를 기점으로 본 논문은 Emulab을 국내에소개하고, 사이버 보안 연구 프레임워크로써의 Emulab 활용 동향을 소개한다.

Abstract

Emulab is a research framework developed by Utah university, proving on-demend research environment service so thatresearchers can set up and use the environment at anytime. The main advantage of Emulab over other research methodologieslike simulation or virtualization is to use real systems and networks using real operating systems, making the researchenvironment much similar to the real world. Even though Emulab has been actively used in many areas such as security andnetwork, there has been little use in Korea research community. As KISTI recently constructed a small Emulab, it is expectedthat many researchers and educators would make use of the Emulab. In this study, we introduce Emulab to Korea researchcommunity and give an overview of utilization trend of Emulab as a cyber security research framework.

참고문헌 (37)

  1. S. Floyd, "Difficulties in simulating the internet", IEEE, 2001, pp.9(4), 392~403
  2. X. Chen, "Towards an understanding of anti-virtualization and anti -debugging behavior in modern malware", Proceedings of the 38th Annual IEEE, 2008, 177~186
  3. B. White, "An integrated experimental environment for distributed Systems and Networks", Operating systems design and implementation 2002, pp.255~270 (2002)
  4. "KISTI Emulab; Network Emulation Testbed Home"[URL]
  5. "Utah Emulab; Network Emulation Testbed Home"[URL]
  6. "DETER Network Security Testbed"[URL]
  7. Y. Chen, "Collaborative detection of ddos attacks over multiple network domains", IEEE Transactions on Parallel and Distributed Systems, 18(12), pp.1649~1662 (2007)
  8. M. Natu, "Fine-grained capabilities for flooding ddos defense using client reputations", Proceedings of the 2007 Workshop on Large Scale Attack Defense, LSAD '07, pp.105~112 (2007)
  9. Distributed defense against ddos attacks, "J. Mirkovic", University of Delaware CIS Department, ~, pp.Technical Report CIS-TR-2005-02 (2005)
  10. M. Beaumont-Gay, "A comparison of syn flood detection algorithms", Proceedings of the Second International Conference on Internet Monitoring and Protection (ICIMP), pp.9~ (2007)
  11. J. Mirkovic, "How to test dos defenses", Cybersecurity Applications and Technology Conference For Homeland Security, pp.103~117 (2009)
  12. J. Mirkovic, "Benchmarks for ddos defense evaluation", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  13. J. Mirkovic, "Automating ddos experimentation", DETER Community Workshop on Cyber Security Experimentation and Test (2007)
  14. J. Mirkovic, "Measuring impact of dos attacks", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  15. H. Hazeyama, "Outfitting an inter-as topology to a network emulation testbed for realistic performance tests of ddos countermeasures", Proceedings of the Conference on Cyber Security Experimentation and Test (2008)
  16. R. Chertov, "High fidelity denial of service(dos) experimentation", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  17. A. Hussain, "Ddos experiment methodology", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  18. C. Neuman, "Running live self-propagating malware on the deter testbed", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  19. S. Hanna, "Implementation and instrumentation of a flash-worm", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  20. L. Li, "Emulating sequential scanning worms on the deter testbed", Proceedings of IEEE, 2006, ~
  21. S. Cheetancheri, "A distributed host-based worm detection system", Proceedings of the 2006 SIGCOMM Workshop on Large-Scale Attack Defense (LSAD), pp.107~113 (2006)
  22. M. Vasek, "Do malware reports expedite cleanup? an experimental study", 5th USENIX Workshop on Cyber Security Experimentation and Test (CSET) (2012)
  23. N. Weaver, "Very fast containment of scanning worms, Revisited", Malware Detection, 27, pp.113~145 (2007), Springer Verlag
  24. L. Li, "Evaluation of collaborative worm containments on deter testbed", DETER Community Workshop on Cyber Security Experimentation and Test (2007)
  25. L. Briesemeister, "Formally specifying design goals of worm defense strategies", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  26. S. Cheetancheri, "Towards a framework for worm-defense evaluation", Proceedings of the 25th IEEE International Performance, Computing, and Communications Conference (IPCCC), pp.559~565 (2006)
  27. P. Barford, "Toward botnet mesocosms", Proceedings of First Workshop on Hot Topics in Understanding Botnet (2007), USENIX Association
  28. A survey of bgp security issues and solutions, "K. Butler", ATandT Labs – Research, ~, pp.Technical Report TD-5UGJ33 (2004)
  29. S. Tseng, "Elisha: a visual and interactive tool for bgp anomaly detection and analysis", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  30. K. Butler, "Testing large scale bgp security in replayable network environments", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  31. C. Ko, "Towards systemic ids evaluataion", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  32. J. Li, "Dependency -based distributed intrusion detection", DETER Community Workshop on Cyber Security Experimentation and Test (2007)
  33. C. Neuman, "Emulating an embedded firewall", deter community workshop on Cyber Security Experimentation and Test (2007)
  34. N. Weaver, "Stress-testing a gbps intrusion prevention device on deter", DETER Community Workshop on Cyber Security Experimentation and Test (2006)
  35. P. Peterson, "Security exercises for the online classroom with deter", Proceedings of the 3rd international conference on Cyber security experimentation and test (CSET'10) (2010)
  36. "Slowloris"[URL]
  37. "Slowloris HTTP DoS"[URL]

관련 논문AI추천

에뮬레이션 기반 테스트베드 활용 사례 연구유관종, 이민선한국융합학회 · 한국융합학회논문지2018 · 제9권 제9호악성코드 분석을 위한 Emulab 활용 방안 연구석우진, 이만희한국정보보호학회 · 정보보호학회논문지2016 · 제26권 제1호사이버 공격·방어 시뮬레이션 연구 동향강지호, 김형선, 김휘강, 송민근, 송유찬, 이재연, 장준호, 최재웅한국정보보호학회 · 정보보호학회논문지2025 · 제35권 제5호사이버 훈련 및 시험평가를 위한 멀티 사이버 레인지 구조 설계 및 구현김용현, 박무성, 신동규, 안명길국방보안연구소 · 국방과 보안2022 · 제4권 제1호사이버 보안 훈련을 위한 ATT&CK 기반 사이버 위협 모의 기술 연구김동화, 김용현, 안명길, 이희조한국컴퓨터정보학회 · 한국컴퓨터정보학회논문지2020 · 제25권 제9호사이버 탄력성 기반 가상 허니팟 서비스 프레임워크 구상 및 가능성 검증박선, 김종원, 차병래(사)한국스마트미디어학회 · 스마트미디어저널2016 · 제5권 제2호

이 간행물의 다른 논문 (28건)

Pre_Buffered 키스트림을 이용한 효율적인암호처리 구현강철오, 김은찬, 류재철, 박재민pp. 989-1000스마트 기기에서 유해 멀티미디어콘텐츠 판별 메커니즘 및 성능 분석민순호, 김석우, 서창호, 하경주pp. 1001-1006휴대전화 소액결제 시스템의 구조적 취약점 및이용자 보호를 위한 표준결제창의 개선방안박광선, 이상진pp. 1007-1015안드로이드 기반 스마트폰 어플리케이션의전자기파분석 공격 취약성한대완, 김수현, 박제훈pp. 1017-1023소셜 네트워크 환경에서 동적 신뢰 중심의접근 제어 모델에 관한 연구백승수, 김승주pp. 1025-1035
원문 보기