Earticle

최근 웹 브라우저를 광범위한 용도로 사용하게 되면서 웹 익스플로잇 킷에 의한 피해도 커지고 있 지만, 이에 대한 탐지가 쉽지 않다. 사용자가 웹 익스플로잇 킷에 감염된 웹 페이지에 접속하면 사용 자의 의도와 관계없이 다른 웹 페이지로 옮겨가서 악성코드를 다운로드하게 되고 이 악성코드에 의 해서 침해 피해가 발생되는 것이 전형적인 감염 과정이다. 본 논문에서는 피해 시스템과 중간 경유 시스템에서 캡쳐한 공개된 트래픽 데이터를 활용하여 웹 익스플로잇 킷에 의한 감염 경로를 분석한다. 감염된 웹 페이지에서 다른 웹 페이지로의 이동 과정과 악성코드 배포 사이트에서의 다운로드 과정을 추적하여 그래프로 표현함으로써 감염 경로에 대한 정보를 시각적으로 제시한다. 감염 경로에 대한 그래프 정보는 웹 익스플로잇 킷을 탐지하고 대응하는데 활용될 수 있다.

As the web browsers are used in a broad range of applications recently, the damages caused by web exploit kits also increase, however, it is known to difficult to detect them. When a user accesses a web page infected by a web exploit kit, the page would be redirected to another page without the user’s intention, and the new page would begin downloading a malicious code, thus having the malicious code make an intrusion damage on the system. In this paper, we analyze the infection path of a web exploit kit using open traffic data which have been captured on a victim system as well as some intermediate systems. We trace both the redirection process from the infected web page to another web pages and the downloading process at the malware distribution site, and show the visual information on the infection path in a graphical way. The graph information on infection path could be utilized to detect and countermeasure the web exploit kits.

This paper describes the packet traffic management of the Ubiquitous Healthcare System. In this system, ECG signal and accelerometer signal is transmitted from a wearable health shirt (WHS) to the base station. However, with the increment of users in this system, traffic over-load issue occurs. The main aim of this paper is to reduce the traffic over-load issue between sensor nodes by only transmitting the required signals to the base station when irregular activities are observed. In order to achieve this, in-network processing is adapted where the process of observation is conducted inside the sensor node of WHS. Results shows that irregular activities such as fall can be detected on real-time inside the sensor node and thus resolves traffic over-load issue.

A conceptual model of tentative packet handler subsystem (PHS) of TDX-10 is presented. This model is used to analyze the capacity of PHS especially when packet bus (PBUS) is bottleneck. In the viewpoint of performance analysis, cyclic server system and token bus LAN are utilized in modeling PHS.

As the rapid incensement of the number of internet users has occurred recently, many multimedia application services have been emerging. To improve quality of service, traffic can be suggested to be classified with priority in EPON(Ethernet Passive Optical Network), which is supporting the multimedia application services. In this paper, multimedia application services treat bandwidth classifying device in serving both delay sensitive traffic for real-time audio, video and voice data such as VoIP(Voice over Internet Protocol), and nonreal-time traffic such as BE(Best Effort). With looking through existing mechanisms, new mechanism to improve the quality will be suggested. The delay performances and packet losses of traffic achieved by supporting bandwidth allocation of upstream traffic in suggested mechanism will be analyzed with simulation.