5W1H 기반 사이버 작전 방책 우선순위 선정 방안
Priority selection for 5W1H based cyber COA
0
조회
0
다운로드
1
인용
0
참고문헌
키워드
초록
전세계적으로 사이버공격 시도는 매일 수백만건이 발생하고 있다. 이러한사이버공격에 효과적으로 대응하기 위해선 철저한 방책 수립이 필요하다. 본연구에서는 5W1H 기반으로 사이버 작전요소를 분류, 정량화한다. 그리고 그것을하나의 방책으로 구성하고 우선순위화한다. 본 연구에서 제안하는 방안을증명하기 위해 STUXNET 사례를 기반으로 시나리오를 설계했다. 실험 결과Employee Station에서 출발하는 #16 방책이 최적의 방책으로 선정되었다. 이와같은 연구를 통해 민간, 군에서는 최신 취약점에 대비하고 인식할 수 있는사이버 공격훈련을 체계적으로 진행할 수 있을 것이다.
Abstract
Globally, there are millions of cyberattack attempts every day. In order to effectively respond to these cyber attacks, it is necessary to establish a thorough course of action. In this study, cyber operations elements are classified and quantified based on 5W1H. And organize it into a course of action and prioritize it. To prove the method proposed in this study, a scenario was designed based on the Stuxnet case. As a result of the experiment, the #16 method starting from the Employee Station was selected as the optimal course of cation. Through such research, the civilian and military will be able to systematically conduct cyber attack training to prepare for and recognize the latest vulnerabilities.
참고문헌 (26)
- Bhavna Arora, "Exploring and analyzing Internet crimes and their behaviours", Perspective s in Science, 8(7), pp.540~542 (2016)
- "check point: research cyber attacks increased 50% year over year"[URL]
- M. M. Yamin, "Cyber ranges and security testbeds: Scenarios functions tools and architecture", Computers & Security, 88, pp.1~26 (2020)
- The Joint Staff, "Joint Publication (JP) 3-12, Cyberspace Operation" (2018)
- Department of the army, "FM 3-12 Cyberspace and Electromagnetic Warfare" (2021)
- Ducheine Paul, "Fighting Power Targeting and Cyber Operations", Cyber Conflict (CyCon 2014)2014 6th International Conference, pp.303~327 (2014)
- P. W. Poteete, "Implementing the DoD joint operation planning process for private industry enterprise security", DEPT OF INFORM ATION SCIENCES, pp.2011
- J. Andress, "Cyber Warfare: Techniques Tactics and Tools for Security Practitioners", pp.169~193 (2013), Syngress Press
- The Joint Staff, "Joint Publication (JP) 1, Doctrine for the Armed Forces of the United States" (2013)
- The Joint Staff, "Joint Publication (JP) 3-0, Joint Operations" (2018)
- The Joint Staff, "Joint Publication (JP) 5-0, Joint Planning" (2020)
- K. Muhammer, "Cyber operation planning and operational design", Cyber-Security and Digital Forensics, pp.21~29 (2016)
- J. Han, "5W1H-based Expression for the Effective Sharing of Information in Digital Forensic Investigations", arXiv preprint arXiv:2010.15711, ~ (2020)
- A. Khalid, "FACTS approach to address cybersecurity issues in electric vehicle battery systems", 2019 IEEE Technology & Engineeri ng Management Conference (TEMSCON) (2019)
- M. Zhang, "A systematic review of business-IT alignment research with enterprise architecture", IEEE Access, 6, pp.18933~18944 (2018)
- D. M. Correia, "Smart Supply Chain Management: The 5W1H Open and Collaborative Framework", 2021 IEEE 8th International Conference on Industrial Engineering and Applications (ICIEA), pp.401~405 (2021)
- Department of the army, "FM 100-5 Operations" (1993)
- K. Scarfone, "An analysis of CVSS version 2 vulnerability scoring", 20093rd International Symposium on Empirical Software Engineering and Measurement, pp.516~525 (2009)
- "CVSS Score Distribution For Top 50 Products By Total Number Of "Distinct" Vulnerabilities"[URL]
- R. Cooper, "Target Costing and Value Engineering" (1997), Productivity Press
- H. Tohidi, "Review the benefits of using value engineering in information technology project management", Procedia Comput. Sci., 3, pp.917~924 (2021)
- R. E. Sawilla, "Identifying critical attack assets in dependency attack graphs", Proc. Eur. Symp. Res. Comput. Security, pp.18~34 (2008)
- "How Stuxnet spreads—A study of infection paths in best practice systems"[URL]
- "STUXNET REPORT: A SYSTEM ATTACK"[URL]
- Nguyen, H.H., "An approach to incorporating uncertainty in network security analysis", Proceedings of the Hot Topics in Science of Security: Symposium and Bootcamp (HoTSoS) (2017), ACM
- Kookjin Kim, "A Study on Cyber Target Importance Quantification and Ranking Algorithm", Applied Sciences, 12(4), pp.1833~ (2022), MDPI AG[DOI]