네트워크 취약성 분석을 위한 확장된 사이버 공격 트리에 관한 연구
A Study on an Extended Cyber Attack Tree for an Analysis of Network Vulnerability
1
조회
0
다운로드
9
인용
0
참고문헌
키워드
초록
We extended a general attack tree to apply cyber attack model for network vulnerability analysis. We defined an extended cyber attack tree (E-CAT) which extends the general attack tree by associating each node of the tree with a transition of attack that could have contributed to the cyber attack. The E-CAT resolved the limitation that a general attack tree can not express complex and sophisticate attacks. Firstly, the Boolean expression can simply express attack scenario with symbols and codes. Secondary, An Attack Generation Probability is used to select attack method in an attack tree. A CONDITION-composition can express new and modified attack transition which a aeneral attack tree can not express. The E-CAT is possible to have attack's flexibility and improve attack success rate when it is applied to cyber attack model.
Abstract
We extended a general attack tree to apply cyber attack model for network vulnerability analysis. We defined an extended cyber attack tree (E-CAT) which extends the general attack tree by associating each node of the tree with a transition of attack that could have contributed to the cyber attack. The E-CAT resolved the limitation that a general attack tree can not express complex and sophisticate attacks. Firstly, the Boolean expression can simply express attack scenario with symbols and codes. Secondary, An Attack Generation Probability is used to select attack method in an attack tree. A CONDITION-composition can express new and modified attack transition which a aeneral attack tree can not express. The E-CAT is possible to have attack's flexibility and improve attack success rate when it is applied to cyber attack model.
참고문헌 (16)
- Ariel Futoransky, "Building computer network attacks", Core Security Technology, ~ (2003)
- 엄정호, "보안 안전성을 위한 자동화 보안진단평가 시스템에 관한 연구", (사)디지털산업정보학회 논문지, 5(4), pp.109~116 (2009), (사)디지털산업정보학회
- 엄정호, "사이버 공격과 보안 기술", pp.3~9 (2009), 홍릉과학출판사
- Curt A. Carver, "Military Academy Attack", Defense Network, 2002, 29~34
- Kristopher Daley, "A Structural Framework for Modeling Multi-stage Network Attacks", Proceeding of the International Conference on Parallel Processing Workshops, pp.5~10 (2002)
- Bruce Schneier, "Attack Trees: Modeling Security Threats", Dr. Dobb's Journal, ~ (1999)
- Cynthia Phillips, "A graph-based system for network vulnerability analysis", Proceedings of the 1998 workshop on new security paradigms, pp.71~79 (1998), ACM press
- Wei Wang, "A Graph Based Approach Toward Network Forensics Analysis", ACM Transactions on Information and Systems Security, 12(1), pp.401~433 (2008)
- Bruce Schneier, "Secrets and Lies:Digital Security in a Networked World" (2000), John Wiley & Sons
- Vineet Saini, "Threat modeling using attack trees", Journal of Computing Sciences in Colleges, 23(Issue4), pp.124~131 (2008)
- Nayot Poolsapassit, "Investigating Computer Attacks using Attack Trees", Advances in Digital Forensics Ⅲ,, 242, pp.331~343 (2007)
- Seyit Anmet Camtepe, "Modeling and Detection of Complex Attacks", Proceedings of the third international conference on security and privacy in communication networks, pp.234~243 (2007)
- Hubert Comon, "Tree Automata Techniques and Applications", TATA, ~ (2002)
- Jung ho Eom, "Active Cyber Attack model for Network system's Vulnerability Assessment", International Conference on Information Science and Security(ICISS 2008),, pp.153~158 (2008)
- Jong-yeub Lee, "Monitoring and Investigation of DoS Attack", KNOM Reveiw, 6(2), pp.33~40 (2004)
- Andrew P. Moore, "Attack Modeling for Information Security and Survivability", Technical Note, ~ (2001), CMU[DOI]