Earticle

초록

영어

Malicious-code scanning tools are practically available for identifying suspicious websites. However, such tools only warn users about suspicious sites and do not provide clues as to why the sites were hacked and which vulnerability was responsible for the attack. In addition, the huge number of alarms burdens mangers while executing in-time-response duties. In this paper, a process involving feature modeling and data-mining techniques is proposed to help solve such problems.

목차

Abstract
 1. Introduction
 2. The Proposed Process for Identifying Vulnerability Features
  2.1. Data Collection by Malicious Code Finder (MCFinder) – STEP 1
  2.2. Severity Quantification and Class Labeling – STEP 2
  2.3. Survey of Exposed Vulnerabilities – STEP 3
  2.4. Vulnerability Feature Modeling – STEP 4
  2.5. Classifier Model Training and Evaluation – STEP 5-6
  2.6. High-Impact Feature Selection – STEP 7
 3. Conclusion
 Acknowledgments
 References

키워드

저자

• Taek Lee [ College of Information and Communications, Korea University ]
• Dohoon Kim [ Agency for Defense Development ]
• Hyunchoel Jeong [ Korea Internet and Security Agency ]
• Hoh Peter In [ College of Information and Communications, Korea University ] corresponding author

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605