Earticle

초록

영어

Recently, as Internet is widely used due to the increased spread of the internet network, the software with malicious intent is distributed via the internet and its infection path gets various too. In particular, attacks by Bot mainly work at C&C (command-and-control) server but it can be secured just by blocking IP because C&C server runs in form of IP. However, this attacker too gets gradually intelligent as they try to connect periphrastically in order to avoid server blocking. Once these malicious codes infiltrate user’s system, it is not easy to detect it through general detection method while it is running. In this paper, we propose malicious process detection system based on security agent in order to prevent damage caused by malicious code infection from spreading.

목차

Abstract
 1. Introduction
 2. Related Works
 3. Detection of Malicious Process
  3.1. System Terminal Device
  3.2. Security Management Server
  3.3. Terminal Device of Controller
 4. Conclusions
 References

키워드

저자

• Seong-Muk Choi [ Dept. of IT Policy and Mgmt., Graduate School of Soongsil Univ., Seoul, 156-743, Korea ]
• Yeol-Joo Ryou [ Baileytech Co., Ltd., #804, IT Premier Tower ]
• Hoo-Ki Lee [ Dept. of IT Policy and Mgmt., Graduate School of Soongsil Univ., Seoul, 156-743, Korea ]
• Hee-Hoon Cho [ Graduate School of Software, Soongsil University, Seoul, 156-743, Korea ]
• Jong-Bae Kim [ Graduate School of Software, Soongsil University, Seoul, 156-743, Korea ] Corresponding author

참고문헌

발행기관

간행물

표지보기 관심저널 등록

• 간행물명

  International Journal of Security and Its Applications

• 간기

  격월간

• pISSN

  1738-9976

• 수록기간

  2008~2016

• 등재여부

  SCOPUS

• 십진분류

  KDC 505 DDC 605