Research Notes in Information Science, v.14, pp.102-105
ISSN
2287-1934
Publisher
차세대융합기술연구원(AICIT)
Language
English
Type
Journal Article
Abstract
Malware has become a fundamental element of all the attacks. The first goal of every attack is to install a malware in a target system, because if a malware is installed in a system then attackers can do anything. In order to install a malware, attackers try various methods and techniques. Sometimes, they send a malware attached email or an email which contains the malicious links to a malware to the target users. These days, however, as the attacks are getting sophisticated more, the way of malware installation is very sophisticated as well. Recently, they tried to attack an update server for a famous application and changed an update module to malware. Shortly after, users automatically downloaded the malware which looked like a legitimate update module. During these attacks, attackers utilize normal legitimate applications. They modify the normal applications. They insert some malicious functionality into them. When these malwares are executed they operate just like normal applications. The malwares also have the same filenames and attributes. So, ordinary users can't identify whether an executable file is a malware or a legitimate application. In order to overcome this situation, we need a method which can authenticate the integrity of an application. We need to identify that an application is not modified from its original distribution. For that, we propose a software integrity authentication method. In this method, we check the integrity of an application with a trusted third party.
KSP Keywords
Authentication method, Executable file, Integrity Authentication, Methods and techniques, Software Integrity, Target Users, Trusted Third Party, fundamental element
Copyright Policy
ETRI KSP Copyright Policy
The materials provided on this website are subject to copyrights owned by ETRI and protected by the Copyright Act. Any reproduction, modification, or distribution, in whole or in part, requires the prior explicit approval of ETRI. However, under Article 24.2 of the Copyright Act, the materials may be freely used provided the user complies with the following terms:
The materials to be used must have attached a Korea Open Government License (KOGL) Type 4 symbol, which is similar to CC-BY-NC-ND (Creative Commons Attribution Non-Commercial No Derivatives License). Users are free to use the materials only for non-commercial purposes, provided that original works are properly cited and that no alterations, modifications, or changes to such works is made. This website may contain materials for which ETRI does not hold full copyright or for which ETRI shares copyright in conjunction with other third parties. Without explicit permission, any use of such materials without KOGL indication is strictly prohibited and will constitute an infringement of the copyright of ETRI or of the relevant copyright holders.
J. Kim et. al, "Trends in Lightweight Kernel for Many core Based High-Performance Computing", Electronics and Telecommunications Trends. Vol. 32, No. 4, 2017, KOGL Type 4: Source Indication + Commercial Use Prohibition + Change Prohibition
J. Sim et.al, “the Fourth Industrial Revolution and ICT – IDX Strategy for leading the Fourth Industrial Revolution”, ETRI Insight, 2017, KOGL Type 4: Source Indication + Commercial Use Prohibition + Change Prohibition
If you have any questions or concerns about these terms of use, or if you would like to request permission to use any material on this website, please feel free to contact us
KOGL Type 4:(Source Indication + Commercial Use Prohibition+Change Prohibition)
Contact ETRI, Research Information Service Section
Privacy Policy
ETRI KSP Privacy Policy
ETRI does not collect personal information from external users who access our Knowledge Sharing Platform (KSP). Unathorized automated collection of researcher information from our platform without ETRI's consent is strictly prohibited.
[Researcher Information Disclosure] ETRI publicly shares specific researcher information related to research outcomes, including the researcher's name, department, work email, and work phone number.
※ ETRI does not share employee photographs with external users without the explicit consent of the researcher. If a researcher provides consent, their photograph may be displayed on the KSP.