본문 바로가기
  • Home

Intrusion Artifact Acquisition Method based on IoT Botnet Malware

  • Journal of Internet of Things and Convergence
  • Abbr : JKIOTS
  • 2021, 7(3), pp.1-8
  • DOI : 10.20465/KIOTS.2021.7.3.001
  • Publisher : The Korea Internet of Things Society
  • Research Area : Engineering > Computer Science > Internet Information Processing
  • Received : June 24, 2021
  • Accepted : August 24, 2021
  • Published : September 30, 2021

Lee, Hyung Woo 1

1한신대학교

Accredited

ABSTRACT

With the rapid increase in the use of IoT and mobile devices, cyber criminals targeting IoT devices are also on the rise. Among IoT devices, when using a wireless access point (AP), problems such as packets being exposed to the outside due to their own security vulnerabilities or easily infected with malicious codes such as bots, causing DDoS attack traffic, are being discovered. Therefore, in this study, in order to actively respond to cyber attacks targeting IoT devices that are rapidly increasing in recent years, we proposed a method to collect traces of intrusion incidents artifacts from IoT devices, and to improve the validity of intrusion analysis data. Specifically, we presented a method to acquire and analyze digital forensics artifacts in the compromised system after identifying the causes of vulnerabilities by reproducing the behavior of the sample IoT malware. Accordingly, it is expected that it will be possible to establish a system that can efficiently detect intrusion incidents on targeting large-scale IoT devices.

Citation status

* References for papers published after 2023 are currently being built.

This paper was written with support from the National Research Foundation of Korea.