Internet Attacks Research Articles

인터넷 보안 시뮬레이션을 위한 공격 모델링

최근 인터넷 사용이 폭발적으로 증가함에 따라 인터넷은 다양한 공격에 노출되었다. 이러한 인터넷 공격을 시뮬레이션 하기 위해서는 공격을 효과적으로 모델링 할 수 있어야 한다. 그러나 기존의 인터넷 공격 모델링 기법들은 공격을 단순히 특징에 파라 분류하거나 종류를 나누는 네 중점을 두고 있으며, 인터넷 보안 시뮬레이션을 위한 공격 시나리오를 표현하는데 있어서는 적합하지 않았다. 본 논문에서는 기존의 트리기반 공격 모델링 기법을 보완하여 인터넷 보안 시뮬레이션의 공격 모델링 기법으로 활용할 수 있게 개선하였다. 개선된 공격 모델링 기법은 복잡한 시나리오의 표현 불가, 공격 실행 순서의 모호함, 시스템 상태 정보의 결여 풍과 같은 기존 트리 기반 모델링 기법의 문제점들을 해결하였다. 또한 기존 모델링 기법으로는 기술할 수 없었던 동시간 공격 표현, 정밀한 공격 시작 및 수행기간 지정 등이 가능하도록 하였다. As the use of the Internet has explosively increased, it is likely for the Internet to be exposed to various attacks. Modeling the Internet attacks is essential to simulate the attacks. However, the existing studies on attack modeling have mainly focused on classifying and categorizing the attacks and consequently they are not suitable to representing attack scenarios in the Internet security simulation. In this paper, we introduce the existing methods of attack modeling, and propose an adapted attack modeling to properly express the properties for the Internet security simulator. The adapted attack modeling suggests a solution to the problems of the existing attack tree modelings, such as difficulty of composing complex scenarios ambiguity of attack sequence, lack of system state information. And it can represent simultaneous, precise time-dependent attack, and attack period, which are nearly impossible to be represented in many other existing methods.

Coordinated Internet attacks: responding to attack complexity

This paper examines the issues involved with responding to complex Internet attacks. Such attacks characteristically occur in stages over extended periods of time and allow specific actions in a particular stage to be interchangeable. The stages can

Internet slammed again [hacking

The author describes how hackers broke new ground the weekend of 24-26 January 2003 with an unusual type of Internet attack. While most computer worms propagate by e-mail, Slammer spread over the Internet among servers and even corporate PCs running such programs as the premium version of the Office XP software suite. The afflicted computers all ran software containing Microsoft's database programs SQL Server 2000 or SQL Data Engine. At least a dozen Microsoft offerings do, hence Slammer's dizzying rate of propagation. infected computers used up to 60 percent of their processing abilities generating artificial traffic between each other. Slammer's attempts to find new computers to infect also spewed prodigious amounts of traffic throughout the Net. The enormous loads even overwhelmed servers not running the vulnerable software. The largest US automated teller network was affected, as was Microsoft's own site.

Managing the Most Critical Internet Security Vulnerabilities: One Effective Approach

Security continues to be the most significant risk (in terms of costs) associated with businesses, their information systems (IS), and information assets — especially those on the Internet. A new vulnerability or exposure seems to appear every week. A strong argument can be made that vendors ought to be held more responsible for their faulty systems. Although absolute security is impossible, and although a secure system today will have new risks next week, there are some developing tools of interest to assist auditors and security professionals in the management of the most critical Internet security vulnerabilities. Some expert assistance is being provided, not only in the publishing of alerts as new vulnerabilities occur, but also in assembling various broad analyses of Internet attacks and providing the results to the public. For example, a list from the SANS Institute and the FBI, called “Twenty Most Critical Internet Security Vulnerabilities,” serves as an excellent check-sheet for those responsible for security. This article attempts to provide tools and techniques that can mitigate these types of security risks.

Internet attacks will replace military conflicts

Internet attacks will replace military conflicts

New security alliance

Following a sudden increase of Internet attacks, eight Internet providers teamed up with Internet security firm ICSA.net to establish the Alliance for Internet Security to prevent denial-of-service attacks.

New security alliance

Following a sudden increase of Internet attacks, eight Internet providers teamed up with Internet security firm ICSA.net to establish the Alliance for Internet Security to prevent denial-of-service attacks.

Internet attack mechanisms

Current media is filled with theoretical attacks, vulnerabilities and malicious activities, but the problems that make the news are rarely the ones that result in the common, day to day losses. A Mitnick might be able to mount an obscure sequencing attack against a perceived adversary, but such attacks will fall against virtually any firewall since it depends on a network finding nothing wrong with an internal machine suddenly appearing on the outside. Similarly, a SATAN/SANTA attack will quickly reveal holes but only if you happen to be running Unix with RPC and NFS active. This is not to say that such attacks are not common, just that they require a specific configuration to exist at the attackee's site.