Proceedings of the Korean Institute of Information and Commucation Sciences Conference (한국정보통신학회:학술대회논문집)

The Korea Institute of Information and Commucation Engineering (한국정보통신학회)
권호 표지

Browser fuzzing and analysis using known vulnerability

파이썬 모듈과 정규표현식을 활용한 웹 취약점 탐색 자동화 봇

  • Kim, Nam-gue (Dept. of Information and Communication Engineering, Dongseo University) ;
  • Kim, Ki Hwan (Dept. of Ubiquitous IT Graduate School of Dongseo University) ;
  • Lee, Hoon-Jae (Dept. of Computer Engineering, Dongseo University)
  • 김남규 (동서대학교 정보보안트랙) ;
  • 김기환 (동서대학원 유비쿼터스 IT) ;
  • 이훈재 (동서대학교 컴퓨터공학부)
  • Published : 2016.05.25
Download PDF
⟨ Previous Next ⟩

Abstract

Internet technology is universal, news from the Web browser, shopping, search, etc., various activities have been carried out. Its size becomes large, increasing the scale of information security incidents, as damage to this increases the safety for the use of the Internet is emphasized. IE browser is ASLR, such as Isolated Heap, but has been continually patch a number of vulnerabilities, such as various protection measures, this vulnerability, have come up constantly. And, therefore, in order to prevent security incidents, it is necessary to be removed to find before that is used to exploit this vulnerability. Therefore, in this paper, we introduce the purge is a technique that is used in the discovery of the vulnerability, we describe the automation technology related thereto. And utilizing the known vulnerabilities, and try to show any of the typical procedures for the analysis of the vulnerability.

웹이 보편화되면서 많은 편리함을 가져온 동시에 주 사용자인 기업에는 대외비 문서서, 중요 자원의 유출, 개별 사용자에게는 개인 정보 유출 등의 보안 이슈 또한 가져왔다. 이에 관련 기관들은 웹에 대한 취약점을 정리한 리스트를 제시하였다. 본 지에서는 웹 취약점의 표준으로 널리 사용되는 OWASP top10의 리스트들을 웹에서 자동으로 탐색하고 문서화하는 봇의 구현 모델을 제시한다.

Keywords