본문 바로가기
  • Home

Design and Implementation of Cyber Attack Simulator based on Attack Techniques Modeling

  • Journal of The Korea Society of Computer and Information
  • Abbr : JKSCI
  • 2020, 25(3), pp.65-72
  • DOI : 10.9708/jksci.2020.25.03.065
  • Publisher : The Korean Society Of Computer And Information
  • Research Area : Engineering > Computer Science
  • Received : February 28, 2020
  • Accepted : March 12, 2020
  • Published : March 31, 2020

Yong Goo Kang 1 YOO JEONG DO 1 Eunji Park 2 Donghwa Kim 3 Huy-Kang Kim 1

1고려대학교
2고려대학교 해킹대응기술연구실
3국방과학연구소

Accredited

ABSTRACT

With the development of information technology and the growth of the scale of system and network, cyber threats and crimes continue to increase. To cope with these threats, cybersecurity training based on actual attacks and defenses is required. However, cybersecurity training requires expert analysis and attack performance, which is inefficient in terms of cost and time. In this paper, we propose a cyber attack simulator that automatically executes attack techniques. This simulator generates attack scenarios by combining attack techniques modeled to be implemented and executes the attack by sequentially executing the derived scenarios. In order to verify the effectiveness of the proposed attack simulator, we experimented by setting an example attack goal and scenarios in a real environment. The attack simulator successfully performed five attack techniques to gain administrator privileges.

Citation status

* References for papers published after 2022 are currently being built.

This paper was written with support from the National Research Foundation of Korea.