A Study on Real IP Traceback and Forensic Data Generation against Bypass Attack

윤병선; 김동준; 양해술

Execute IP traceback at this paper as target an intruder's attacking that Bypass Attack in order to avoid an exposure of own Real IP address. Design IP traceback server and agent module, and install in Internet network system for Real IP traceback. Set up detection and chase range aggressive loop around connection arbitrariness, and attack in practice, and generate Real IP data cut off by fatal attacks after data and intrusion detection accessed general IP, and store to DB. Generate the Forensic data which Real IP confirms substance by Whois service, and ensured integrity and the reliability that buy to early legal proof data, and was devoted to of an invader. Present the cyber criminal preventive effect that is dysfunction of Ubiquitous Information Society and an effective Real IP traceback system, and ensure a Forensic data generation basis regarding a judge's robe penalty through this paper study.

Citation status

KCI Citation Counts (1)
열림/닫힘 버튼
REFERENCES (21)
열림/닫힘 버튼
* 2021년 이후 발행 논문의 참고문헌은 현재 구축 중입니다.

[web] 김창곤 / 2006 / / 한국전산원 정보화기획단 u-전략팀 / http://www.nca.or.kr

[other] / 2007 / 2006년 해킹바이러스 통계-KrCERT / 한국정보보호진흥원

[book] Peter Szor / 2005 / COMPUTER VIRUS RESEARCH AND DEFENSE / Addison-Wesley

[confproc] Y. Zhang / 2000 / Detecting Stepping Stones / Proceedings of 9th USENIX Security Symposium

[journal] 박대우 / 2006 / A Study of the Intelligent Connection of Intrusion prevention System against Hacker Attack / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 11(2) : 351~360

[report] Buchholz / 2000 / Packet Tracker Final Report,CERIAS Technical Report 2000-23 / Purdue University

[journal] Kanellis, P / 2006 / Digital crime and forensic science in cyberspace / Journal of digital forensic practice. Hershey: Idea Group

[confproc] D. Schnackenberg / 2000 / Infrastructure for Intrusion Detection and Response / Proceedings of DISCEX

[journal] 이규안 / 2006 / CA Study on the Chain of Custody for Securing the Faultlessness of Forensic Data / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 11(6) : 175~184

[journal] 박대우 / 2007 / A Study of the Back-tracking Techniques against Hacker's Mobile Station on WiBro / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 12(3) : 185~194

[journal] 박대우 / 2007 / A Study of Information Leakage Prevention through Certified Authentication in Phishing, Vishing, SMiShing Attacks / 한국컴퓨터정보학회논문지 / 한국컴퓨터정보학회 12(2) : 171~180

[journal] Luoma, V / 2006 / Forensics and electronic discovery: The new management challenge / Computers & Security 25(2) : 91~96

[other] 김태봉 / 2004 / HTTP(S) 보안을 위한 자동추적 시스템 및 그의 방법, 아이자이어 로보텍스(특허출원 10-2004-0070329)

[other] 김완수 / 2005 / 메일수신자 위치 추적 시스템 및 그의 방법, 트라이옵스 (특허등록 10-0440270-0000)

[journal] 김태봉 / 2005 / 역추적 기술의 동향 및 적용 사례 분석 / 한국정보보호학회 15(1)

[confproc] D. Schnackenberg / 2001 / Cooperative Intrusion Traceback and Response Architecture(CITRA) / Proceedings of the 2nd DARPA Information Survivability Conference and Exposition

[journal] Stefan Savage / 2000 / Practical Network Support for IP Traceback / Proceedings of the 2000 ACM SIGCOMM Conference : 295~306

[confproc] Dawn X. Song / 2001 / Advanced and Authenticated Marking Schemes for IP Traceback / Proceedings of InfoCom

[journal] 이준엽 / 2002 / A New Framework for IP Traceback : Inference of Logical Topology by Measuring Packet Losses / 정보보호학회논문지 / 한국정보보호학회 12(3) : 39~47

[confproc] K. Yoda / 2000 / Finding a Connection Chain for Tracing Intruders / 6th European Symposisum on Research in Computer Security - ESORICS 2000 LNCS -1985

[journal] Deawoo Park / 2006 / A study about dynamic intelligent network security systems to decrease by malicious traffic / International Journal of Computer Science and Network Security 6(N.9B) : 193~199

KJC Korea
Journal Central

Statistics

Tools

Sharing

Issue List

Citation status