클라우드 기반의 악성 IP 탐지를 위한 보안 시스템 구축 연구 = Implementation of security system for Malicious IP Detection based on Cloud

다국어 초록 (Multilingual Abstract)

Recently, cyber threats related to malicious code are increasing, and unlike large enterprises with well-established security systems, small and medium-sized enterprises (SMEs) or organizations that require a security system are vulnerable to cyber threats. In order to establish a security system against malicious behaviors with low cost for security, this paper proposes a system for detecting and blocking malicious IPs using Malware API. Reliable Malware API is used to distinguish between normal IP and malicious IP. It creates a database of malicious IPs through IPs identified based on the Malware API, sets access control based on security indicators, and provides notification functions to security administrators to facilitate identification of malicious IPs. This system can efficiently respond to infringement incidents by detecting and blocking malicious IPs in the cloud-based security system in a vulnerable environment from the system serviced through the server.

참고문헌 (Reference)

1 박광철, "종합침해사고대응시스템”에서의 악성 추출방법과 관리방안 연구" 15 (15): 41-49, 2005

2 김정욱, "악성도메인 IP 주소 추적을 통한 효과적인 보안관제 방안 연구" 한국융합보안학회 9 (9): 135-142, 2009

3 장승주, "데이터베이스에서 지정된 I P 주소 접근 금지를 위한 기능 설계" 한국통신학회 39 (39): 716-721, 2014

4 안정모, "대규모 네트워크 환경을 위한 통합 침입탐지 시스템" 한국통신학회 29 (29): 985-996, 2004

5 권정수, "국내 중소기업 33%가 1년 내 사이버 공격 경험…“보안 투자 미흡”지적"

6 배상은, "軍 감시장비에 '악성코드 IP' 설정된 중국산 부품…"IP 삭제""

7 Christopher, "Network Management Tool Implemented on IPv6Environment: A Tool for Computer Networks Laboratory of University of San Carlos Computer Engineering" 219-221, 2010