쿠쿠 샌드박스 기술을 이용한 악성코드 행위분석 기법

• 영문명: Malware Behavior Analysis using Cuckoo Sandbox Techniques
• 발행기관: 한국IT마케팅학회
• 저자명: 김지웅(Ji Woong Kim) 정용규(Yong Gyu Jung)
• 간행물 정보: 『The Journal of Information Technology and Management』Vol.1 No.1, 16~22쪽, 전체 6쪽
• 주제분류: 사회과학 > 무역학
• 파일형태: PDF
• 발행일자: 2013.12.31

영문 초록

Intrusion Tolerant Systems is to ensure the continued normal service on the system operation, even if the system is attacked maliciously. Such a system is to be characterized by applying security techniques, but specific technical studies have limitation. Intrusion tolerant based system is proposed security techniques against such as the attack from the outside. The system is applied to a systematic methodology to develop a reliable system. In this paper, the Cuckoo Sandbox tool is referenced for the analysis of malicious codes. It can be constructed and operated dependent services by this system. And it is finely classified and built by the type of database and the security companies to share how to reduce the damage of malicious code. The system is virtualized and built by reliable intrusion tolerant systems for threat detection, control and recovery by the intrusion- tolerant configuration. Also this system is continuously maintained even if system is partially corrupted by malicious intrusion.

목차

Abstract

1. 서론

2. 관련연구

3. 연구모델

4. 시스템 구현 및 시험

5. 결론

6. References

키워드

malware virtualization Intrusion Tolerance threat detection capabilities cuckoo sandbox