ETRI-Knowledge Sharing Plaform

ENGLISH

성과물

논문 검색
구분 SCI
연도 ~ 키워드

상세정보

학술지 MLDS: Multi-Layer Defense System for Preventing Advanced Persistent Threats
Cited 28 time in scopus Download 67 time Share share facebook twitter linkedin kakaostory
저자
문대성, 임형진, 이재동, 박종혁
발행일
201412
출처
Symmetry, v.6 no.4, pp.997-1010
ISSN
2073-8994
출판사
MDPI
DOI
https://dx.doi.org/10.3390/sym6040997
협약과제
14MS2300, 다중소스 데이터의 Long-term History 분석기반 사이버 표적공격 인지 및 추적기술 개발, 김익균
초록
Here we report on the issue of Advanced Persistent Threats (APT), which use malware for the purpose of leaking the data of large corporations and government agencies. APT attacks target systems continuously by utilizing intelligent and complex technologies. To overthrow the elaborate security network of target systems, it conducts an attack after undergoing a pre-reconnaissance phase. An APT attack causes financial loss, information leakage, etc. They can easily bypass the antivirus system of a target system. In this paper, we propose a Multi-Layer Defense System (MLDS) that can defend against APT. This system applies a reinforced defense system by collecting and analyzing log information and various information from devices, by installing the agent on the network appliance, server and end-user. It also discusses how to detect an APT attack when one cannot block the initial intrusion while continuing to conduct other activities. Thus, this system is able to minimize the possibility of initial intrusion and damages of the system by promptly responding through rapid detection of an attack when the target system is attacked.
KSP 제안 키워드
APT attacks, Defense system, End-users, Financial losses, Information Leakage, Rapid detection, Security network, advanced persistent threat, government agencies, log information, multi-layer
본 저작물은 크리에이티브 커먼즈 저작자 표시 (CC BY) 조건에 따라 이용할 수 있습니다.
저작자 표시 (CC BY)