네트워크 보안을 위한 침입차단 시스템과 운영체제 보안 기능 모델링 및 시뮬레이션

• 영문명: Modeling and Simulation of Firewall System and Security Functions of Operating System for Network Security
• 발행기관: 한국시뮬레이션학회
• 저자명: 김태헌(Kim, Tae Heon) 이원영(Lee, Won Young) 김형종(Kim, Hyung Jong) 김홍근(Kim, Hong Geun) 조대호(Cho, Tae Ho)
• 간행물 정보: 『한국시뮬레이션학회 논문지』제11권 제2호, 1~16쪽, 전체 16쪽
• 주제분류: 공학 > 기타공학
• 파일형태: PDF
• 발행일자: 2002.06.30

영문 초록

The need for network security is being increasing due to the development of information communication and internet technology. In this paper, firewall models, operating system models and other network component models are constructed. Each model is defined by basic or compound model, referencing DEVS formalism. These models and the simulation environment are implemented with MODSIM III, a general purpose, modular, block-structured high-level programming language which provides direct support for object-oriented programming and discrete-event simulation. In this simulation environment with representative attacks, the following three attacks are generated, SYN flooding and Smurf attack as an attack type of denial of service, Mail bomb attack as an attack type of e-mail. The simulation is performed with the models that exploited various security policies against these attacks. The results of this study show that the modeling method of packet filtering system, proxy system, unix and windows NT operating system. In addition, the results of the simulation Show that the analysis of security performance according to various security policies, and the analysis of correlation between availability and confidentiality according to security empowerment.

목차

1. 서론

2. 모델링 및 시뮬레이션의 배경이론과 환경

3. 시뮬레이션 대상 네트워크 환경 및 모델링 대상 시스템 특성

4. 모델 디자인

5. 시뮬레이션

6. 결론 및 향후 연구과제

참고문헌