기계학습을 이용한 네트워크 전장정보 수집

다국어 초록 (Multilingual Abstract)

Recently, various systems based on Internet of Things (IOT) and Information and Communications Technologies(ICT) have been developed. Today, assorted devices are connected to a network, and various operating systems according to devices having different resources and functions have appeared. With the increased need for in hacking security, researches on the vulnerability analysis of the operating system installed on each device and the actual attack technique have been carried out. Accordingly, the type and detailed version of the operating system of the device, Function (API) is emerging as important information in security. Since the control of this information gathering in the cyber warfare is the first stage of the cyber threat, many studies have been conducted on mehods for controlling the network traffic while scanning. In order to bypass this control of the network, information collectors prepare countermeasures to secretly collect port information. In this paper, we deal with a scanning method that can acquire information about opponents through network basic commands which are not important in the network control system.

참고문헌 (Reference)

1 이현신, "실시간 트래픽 분석을 위한 운영체제 판별 방법에 관한 연구" 한국통신학회 36 (36): 443-450, 2011

2 Choi, Jun Dae, "Utilize sensors for collecting battlefield information" 256 : 80-81, 2000

3 Beck, Rob, "Passive-aggressive resistance: OS fingerprint evasion" 89 : 1-, 2001

4 Crenshaw, A., "OSfuscate: change your windows OS TCP/IP fingerprint to confuse P0f, NetworkMiner, ettercap, Nmap and other OS detection tools"

5 Lyon, Gordon Fyodor, "Nmap network scanning: The official Nmap project guide to network discovery and security scanning" Insecure 2009

6 Veysset, Franck, "New tool and technique for remote operating system fingerprinting" 4 : 2002

7 Beverly, Robert, "A robust classifier for passive TCP/IP fingerprinting" 158-167, 2004

8 Berrueta, David Barroso, "A practical approach for defeating Nmap OS- Fingerprinting"

9 Gao, Ke, "A passive approach to wireless device fingerprinting" IEEE 2010

10 Phillips, Cynthia, "A graph-based system for network-vulnerability analysis" ACM 1998