• Title/Summary/Keyword: 보안망

Search Result 1,161, Processing Time 0.021 seconds

A Status Monitoring Agent Design and Implementation for Wireless Lan Security Management (무선랜 보안관리를 위한 정보 수집 에이전트 설계 및 구현)

  • 김동필;백병욱;김상욱
    • Proceedings of the Korea Institutes of Information Security and Cryptology Conference
    • /
    • 2003.12a
    • /
    • pp.585-590
    • /
    • 2003
  • 무선랜 환경에서는 데이터 링크 레이어의 전달 매체와 물리적 계층이 기존의 유선 네트워크와는 근본적으로 다른 특성을 지닌다. 무선랜 환경에서는 공중망을 전달 매체로 하여 통신이 이루어진다. 그리고 무선랜 환경에서는 단말기들의 이동성에 의해 네트워크 상태가 가변적으로 변하기 때문에, 이러한 환경에서 유선과는 또 다른 보안상의 문제점들을 가지게 된다. 본 논문은 무선 구간에서 유동적으로 발생하는 네트워크의 상태와 정보들을 수집하여 무선 구간에서만 이루어질 수 있는 보안상의 문제점들을 파악하고 대처하는 무선랜 환경에서 상태 정보 수집 에이전트를 설계하고 구현한다.

  • PDF

VoIP 보안기술, 한 단계 진일보

  • Yun, Seok-Ung
    • 정보보호뉴스
    • /
    • s.127
    • /
    • pp.24-26
    • /
    • 2008
  • 최근 인터넷전화(VoIP) 사용이 증가하고 있는 가운데, 지난 4월 7-8일 양일간 삼성동 코엑스에서 의미 있는 전시회가 개최됐다. KISA가 LG데이콤, 웨어플러스 등 3개 업체와 공동으로 지난 2006년부터 3개년 사업으로 추진하고 있는 VoIP의 정보보호 연구와 그 결과물인 정보보호 시스템 전시회가 그것이다. 특히 이번 전시회에서는 종단간(End to End) 보안통신을 지원하는 인터넷전화기기를 비롯해, 스팸 확산을 방지하는 VoIP 스팸 대응, VoIP 서비스망 보호를 위한 보안세션제어 시스템 등이 선보여, 차세대 IT 서비스로 주목받는 인터넷전화 서비스의 정보보호 수준을 한 단계 끌어올릴 것으로 평가받고 있다.

  • PDF

제어망 보안을 위한 일방향자료전달시스템의 송수신 에이전트 개발

  • O, Yeong-Cheol;Han, Mi-Ran;Sin, Yong-Tae;Kim, Jong-Bae
    • Proceedings of the Korean Institute of Information and Commucation Sciences Conference
    • /
    • 2015.05a
    • /
    • pp.708-709
    • /
    • 2015
  • 최근 외부의 악의적인 공격으로부터 내부의 시스템을 보호하기 위하여 논리적, 물리적으로 망을 분리하고 있다. 하지만 사회공학적 해킹에는 물리적 망 분리도 취약할 수밖에 없다. 이러한 이유로 국가기반시설들을 담당하는 주요 기관들은 좀 더 안전한 네트워크 망을 구성할 필요가 있다. 따라서 본 논문에서는 일방향자료전달 시스템을 제안한다. 본 논문에서 제시한 일방향자료전달시스템은 제어시스템으로부터 업무망으로 전달되어지는 정보를 수신하여 처리하고, 업무망의 제어 정보는 송신되지 않도록 구성한다. 이 방식을 통해 어떠한 경우에도 외부로부터 내부의 제어망을 통해 기간시스템에 접근하는 것이 불가능하기 때문에 국가기반시설을 안전하게 보호할 수 있다.

  • PDF

The Implementation of VoIP Terminal using PPTP for Voice Security (PPTP를 이용한 VoIP 음성보안 단말기 구현)

  • Kim, Sam-Taek
    • The Journal of the Institute of Internet, Broadcasting and Communication
    • /
    • v.9 no.2
    • /
    • pp.73-80
    • /
    • 2009
  • Although it is relatively difficult to eavesdrop the commonly used PSTN in that it is connected with direct circuit, it is difficult to ensure the secret of call on Internet because many users can connect to the Internet at the same time. However, it is needed to ensure secret of voice call in a special situation. Due to the fact that many users can connect to the internet at the same time, VoIP can always be in a defenseless state by hackers. Therefore, in this paper, we have developed the increased voice security internet telephone terminal and measured conversation quality by adopting VPN PPTP based on SIP and using tunnel method in transmitting voice data to prevent eavesdrop of internet telephone.

  • PDF

Development of the Wireless Sensor S/W for Wireless Traffic Intrusion Detection/Protection on a Campus N/W (캠퍼스 망에서의 무선 트래픽 침입 탐지/차단을 위한 Wireless Sensor S/W 개발)

  • Choi, Chang-Won;Lee, Hyung-Woo
    • Journal of the Korea Society of Computer and Information
    • /
    • v.11 no.6 s.44
    • /
    • pp.211-219
    • /
    • 2006
  • As the wireless network is popular and expanded, it is necessary to development the IDS(Intrusion Detection System)/Filtering System from the malicious wireless traffic. We propose the W-Sensor SW which detects the malicious wireless traffic and the W-TMS system which filters the malicious traffic by W-Sensor log in this paper. It is efficient to detect the malicious traffic and adaptive to change the security rules rapidly by the proposed W-Sensor SW. The designed W-Sensor by installing on a notebook supports the mobility of IDS in compare with the existed AP based Sensor.

  • PDF

A Software Architecture for High-speed PCE (Path Computation Element) Protocol (고성능 PCE (Path Computation Element) 프로토콜 소프트웨어 구조)

  • Lee, Wonhyuk;Kim, Seunhae;Kim, Hyuncheol
    • Convergence Security Journal
    • /
    • v.13 no.6
    • /
    • pp.3-9
    • /
    • 2013
  • With the rapidly changing information communication environment and development of technologies, the informati on networks are evolved from traditional fixed form to an active variable network that flexible large variety of data can be transferred. To reflect the needs of users, the next generation using DWDM (Dense Wavelength Division M ultiplexing) transmission system and OXC (Optical Cross Connect) form a dynamic network. After that GMPLS (Ge neralized Multi-Protocol Label Switching) can be introduced to dynamically manage and control the Reconfigurable Optical Add-drop Multiplexer (ROADM)/Photonic Cross Connect (PXC) based network. This paper propose a softw are architecture of Path Computation Element (PCE) protocol that has proposed by Internet Engineering Task Force (IETF) to path computation. The functional blocks and Application Programming Interface (API) of the PCE protoco l implementation are also presented.

Implementation of One-Person Media Live System in Closed Network Environment (폐쇄망 환경에서 1인 미디어 라이브 시스템 구현)

  • Kim, Dae-Jin
    • Journal of Digital Contents Society
    • /
    • v.18 no.8
    • /
    • pp.1523-1527
    • /
    • 2017
  • Recently, there have been a growing number of services for users to shoot content by themselves and to broadcast this data to a large number through the Internet. One-person media live services are popular in life, and similar services are becoming common. Most of these services are for general users. However, depending on the service model or the situation, there are cases where the object of streaming is limited depending on the security-sensitive service environment. Especially, in the case of closed networks such as military, government, and security organizations, these specialized services are needed. Therefore, in this paper, we implemented a live media system in a closed network environment. We study system components suitable for service environment and study how to develop components.

Design of Wired and Wireless linkage Hybrid Sensor Network Model over CATV network (CATV망을 이용한 유무선 연동의 하이브리드 센서 네트워크 모델 설계)

  • Lee, Kyung-Sook;Kim, Hyun-Deok
    • Convergence Security Journal
    • /
    • v.12 no.3
    • /
    • pp.67-73
    • /
    • 2012
  • In this paper, in order to overcome the disadvantage of wireless-based sensor network, a hybrid sensor network using wired and wireless linkage is proposed. Proposed a wired and wireless linkage hybrid sensor network can compensate the defect of poor transmission at the indoor wireless environment, and can be free from interference between a wireless LAN and Bluetooth of the same frequency bandwidth due to an attribute of low-loss transmission at the CATV network. Also, proposed a wired and wireless linkage hybrid sensor network make use of CATV network which is well-built infrastructure, is more efficient to design network, assure a stability and high reliability of the sensor network as providing a stability for an inaccuracy and a predictable transmission link for the existing wireless network.

Wireless Certificate Management Protocol for Mobile Phone Security (휴대폰에서의 무선 인증서 관리 프로토콜)

  • Lee, Yong;Lee, Goo-Yeon
    • Journal of the Institute of Electronics Engineers of Korea TC
    • /
    • v.45 no.10
    • /
    • pp.90-98
    • /
    • 2008
  • PKI (Public Key Infrastructure) which is used for the security of E-commerce (Electronic-commerce) in wired internet is not suitable for the mobile phone because of the fundamental limitation of performance such as less memory and less powerful CPU. Therefore, we need to develop a wireless PKI (WPKI) that provides the similar security level as the wired PKI supporting mobile phone. In this paper, we propose a lightweight and secure Wireless Certificate Management Protocol (WCMP) that is executable to the mobile phone that has a constrained communication environment and limitation of performance, and show the implementation results of the scheme based on the mobile phone. We minimize data sizes processed in mobile phone, and optimize protocols for the certificate management. This results in the reduced module sizes to be able to install in mobile phone and shows as the same level as the wired CMP.

A Study of Eavesdropping and Attack about Smart Phone VoIP Services (Smart Phone VoIP 서비스에 대한 공격과 도청 연구)

  • Chun, Woo-Sung;Park, Dea-Woo;Yang, Jong-Han
    • Journal of the Korea Institute of Information and Communication Engineering
    • /
    • v.15 no.6
    • /
    • pp.1313-1319
    • /
    • 2011
  • VoIP service by taking advantage of the current PSTN network and internet over the existing telephone network at an affordable price allows you to make voice calls to the service is being expanded. However, the security of public must be maintained for security vulnerabilities in Smart Phone VoIP case problems arise, and is likely to be attacked by hackers. In this paper, the Internet, using wired and Smart Phone VoIP services may occur during analysis of the type of incident and vulnerability analysis, the eavesdropping should conduct an attack. Smart Phone VoIP with institutional administration to analyze the vulnerability OmniPeek, AirPcap the equipment is installed in a lab environment to conduct eavesdropping attack. Packet according to the analysis and eavesdropping attacks, IP confirmed that the incident as an attack by the eavesdropping as to become the test proves. In this paper, as well as Smart Phone VoIP users, the current administration and the introduction of Smart Phone service and VoIP service as a basis for enhanced security will be provided.