• Home
  • Search
  • Root 권한 프로세스 추적을 통한 침입 탐지 기법
  • https://doi.org/10.3745/kipstc.2008.15-c.4.239Copy DOI Icon

Root 권한 프로세스 추적을 통한 침입 탐지 기법

Show More
  • Abstract
  • Literature Map
  • References
  • Similar Papers
Abstract

보안 침입 사건이 있은 후 해당되는 취약점만을 패치시키는 방식으로만 침입 피해를 줄이는 것은 충분하지 않다. 시스템 내에 취약한 코드가 있더라도 시스템의 내구성을 높여 보다 포괄적으로 침입을 막을 수 있는 방법이 필요하다. 본 논문은 리눅스 시스템에서 관리자를 대신하여 root 권한을 가진 프로세스를 감시하는 강건한 실시간 침입탐지기법을 제시한다. 이 기법은 사용자IP 주소를 프로세스 테이블에 추가하고 root 권한으로 기동되는 모든 프로세스의 IP 주소를 감시한다. 제안한 기법이 버퍼 오버 플로우 취약성에 대해 방어하는 것을 KON 프로그램을 통해 확인한다. 또한 원격으로 시스템을 관리할 수 있는 설정 프로토콜을 제안하며, 이 프로토콜을 통해 관리자 호스트의 IP주소가 침입으로부터 안전하게 보호될 수 있다. It is not enough to reduce damages of computer systems by just patching vulnerability codes after incidents occur. It is necessary to detect and block intrusions by boosting the durability of systems even if there are vulnerable codes in systems. This paper proposes a robust real-time intrusion detection method by monitoring root privileged processes instead of system administrators in Linux systems. This method saves IP addresses of users in the process table and monitors IP addresses of every root privileged process. The proposed method is verified to protect vulnerable programs against the buffer overflow by using KON program. A configuration protocol is proposed to manage systems remotely and host IP addresses are protected from intrusions safely through this protocol.

Similar Papers
  • Conference Article
  • Citations23

Robust Real-Time Detection of Abandoned and Removed Objects

  • Sep 01, 2009
  • Qiujie Li +3
  • Conference Article
  • Citations7

Automated Smiley Face Extraction Based on Genetic Algorithm

  • Jul 20, 2012
  • Md Alamgir Hossain
  • Research Article
  • Citations4

Multi-lane Detection Based on RMFP for Autonomous Vehicle Navigation in Urban Environments

  • Dec 01, 2016
  • Revista de la Facultad de Ingeniería
  • Chao Li
  • Research Article
  • Citations11

A robust and real-time lane detection method in low-light scenarios to advanced driver assistance systems

  • Jul 30, 2024
  • Expert Systems With Applications
  • Ronghui Zhang +8
  • Conference Article
  • Citations1

Robust object detection and adaptive background estimation based on radial reach correlation

  • Jan 01, 2015
  • Masaya Itoh
  • Conference Article
  • Citations168

A new image-based real-time flame detection method using color analysis

  • Mar 19, 2005
  • Wen-Bing Horng +2
  • Conference Article
  • Citations5

Voice activity detector based on enhanced cumulant of LPC residual and on-line EM algorithm

  • Sep 17, 2006
  • David Cournapeau +3
  • Conference Article
  • Citations2

A Real-Time Traffic Detection Method Based on Improved Kalman Filter

  • Nov 01, 2018
  • Li Xun +3
  • PDF
  • Research Article
  • Citations4

A Robust Detection Method for Multilane Lines in Complex Traffic Scenes

  • Mar 08, 2022
  • Mathematical Problems in Engineering
  • Xiang Song +6
  • PDF
  • Research Article
  • Citations81

Real-Time Water Surface Object Detection Based on Improved Faster R-CNN.

  • Aug 12, 2019
  • Sensors
  • Lili Zhang +4
  • Book Chapter
  • Citations1

AXARPS: Scalable ARP Snooping Using Policy-Based Mirroring of Core Switches

  • Mar 15, 2019
  • Motoyuki Ohmori +2
  • Research Article
  • Citations103

Robust real-time hand detection and localization for space human–robot interaction based on deep learning

  • Oct 24, 2019
  • Neurocomputing
  • Qing Gao +2
  • PDF
  • Research Article
  • Citations1

A Real-Time Structural Damage Detection method for High-Pile Wharf Foundations

  • Jan 01, 2021
  • E3S Web of Conferences
  • Yongcheng Liu +2
  • Book Chapter
  • Citations15

Robust 3D Hand Detection for Gestures Recognition

  • Jan 01, 2011
  • Tudor Ioan Cerlinca +1
  • Research Article
  • Citations215

An improved tiny-yolov3 pedestrian detection algorithm

  • Feb 13, 2019
  • Optik
  • Zhang Yi +2
Cactus Communications logo

Copyright 2026 Cactus Communications. All rights reserved.