지원사업
학술연구/단체지원/교육 등 연구자 활동을 지속하도록 DBpia가 지원하고 있어요.
커뮤니티
연구자들이 자신의 연구와 전문성을 널리 알리고, 새로운 협력의 기회를 만들 수 있는 네트워킹 공간이에요.
논문 기본 정보
- 자료유형
- 학위논문
- 저자정보
- 지도교수
- 양대헌
- 발행연도
- 2020
- 저작권
- 인하대학교 논문은 저작권에 의해 보호받습니다.
이용수3
이 논문의 연구 히스토리 (2)
- 이 논문의 후속연구가 궁금하신가요?
- 연관 학술논문 또는 학술발표를 통해 보다 발전된 연구결과를 확인하실 수 있습니다.
- 이 논문의 연구 히스토리 확인하기
초록· 키워드
오류제보하기
랜섬웨어는 사용자의 PC에 존재하는 파일을 암호화하고, 복호화를 위해 금전
을 요구한다. 이러한 랜섬웨어 공격의 빈도와 그에 따른 피해금액은 매년 증가
하고 있기 때문에 예방과 탐지 및 복구를 할 수 있는 시스템이 필요하다. 본 논
문에서는 랜섬웨어 탐지 알고리즘인 SSD-Insider에서 사용하는 해시테이블을
블룸 필터로 교체하고 최적화를 통해 성능을 향상시킨 AdvanSSD-Insider 탐
지 알고리즘을 제안한다. 실험 결과, SSD-Insider 알고리즘과 비교하여 동일한
랜섬웨어 탐지 정확도를 유지하면서 메모리 사용량이 최대 90% 감소하고 수행
시간이 최대 77% 감소하였다. 또한 기존 SSD-Insider 알고리즘이 요구하는
메모리와 동일한 메모리 사용량으로 관찰 시간을 10배 증가시킬 수 있고, 이를
통해 탐지하기 어려웠던 랜섬웨어를 일부 탐지하여 정확도가 증가하였다. 다음
으로 실제 SSD 내부 펌웨어에서 동작할 수 있는지 알아보기 위해 OpenSSD를
이용한 추가적인 실험을 수행하였다. 실험은 실제 환경에서 일반 응용 프로그램
에 영향을 미치지 않고 랜섬웨어만을 정상적으로 탐지하는지 알아보는 정확성
실험과, 실제 사용자가 탐지 알고리즘에 의해 성능 하락을 느낄 수 있는지 측정
하는 성능 실험으로 나누어 진행하였다. 실험 결과 정확성 실험에서는 랜섬웨어
만을 정상적으로 탐지하였고 상용 SSD 내부 펌웨어에서 탐지 알고리즘이 동작
할 수 있음을 확인하였다. 하지만, 많은 읽기 및 쓰기 요청이 발생하는 프로그램
에 대해서 탐지 알고리즘에 의해 프로그램 실행 시간이 10%가량 증가하는 한
계점이 존재하였다.
을 요구한다. 이러한 랜섬웨어 공격의 빈도와 그에 따른 피해금액은 매년 증가
하고 있기 때문에 예방과 탐지 및 복구를 할 수 있는 시스템이 필요하다. 본 논
문에서는 랜섬웨어 탐지 알고리즘인 SSD-Insider에서 사용하는 해시테이블을
블룸 필터로 교체하고 최적화를 통해 성능을 향상시킨 AdvanSSD-Insider 탐
지 알고리즘을 제안한다. 실험 결과, SSD-Insider 알고리즘과 비교하여 동일한
랜섬웨어 탐지 정확도를 유지하면서 메모리 사용량이 최대 90% 감소하고 수행
시간이 최대 77% 감소하였다. 또한 기존 SSD-Insider 알고리즘이 요구하는
메모리와 동일한 메모리 사용량으로 관찰 시간을 10배 증가시킬 수 있고, 이를
통해 탐지하기 어려웠던 랜섬웨어를 일부 탐지하여 정확도가 증가하였다. 다음
으로 실제 SSD 내부 펌웨어에서 동작할 수 있는지 알아보기 위해 OpenSSD를
이용한 추가적인 실험을 수행하였다. 실험은 실제 환경에서 일반 응용 프로그램
에 영향을 미치지 않고 랜섬웨어만을 정상적으로 탐지하는지 알아보는 정확성
실험과, 실제 사용자가 탐지 알고리즘에 의해 성능 하락을 느낄 수 있는지 측정
하는 성능 실험으로 나누어 진행하였다. 실험 결과 정확성 실험에서는 랜섬웨어
만을 정상적으로 탐지하였고 상용 SSD 내부 펌웨어에서 탐지 알고리즘이 동작
할 수 있음을 확인하였다. 하지만, 많은 읽기 및 쓰기 요청이 발생하는 프로그램
에 대해서 탐지 알고리즘에 의해 프로그램 실행 시간이 10%가량 증가하는 한
계점이 존재하였다.
목차
목 차목 차 ································································································································ ⅰ그림 목차 ····························································································································· ⅲ표 목차 ································································································································· ⅳ요약 ···································································································································· ⅴAbstract ······························································································································ ⅵⅠ. 서론 ································································································································· 1Ⅱ. 배경 지식 ······················································································································· 32.1 SSD-Insider ·········································································································· 32.2 블룸 필터 ··············································································································· 6Ⅲ. AdvanSSD-Insider 알고리즘 ······················································································· 73.1 AdvanSSD-Insider 구현 ······················································································ 73.2.1 Memoization ····························································································· 83.2.2 Non-cryptographic hashing ···································································· 9Ⅳ. AdvanSSD-Insider 알고리즘의 성능 평가 실험 ·················································· 104.1 실험 환경 ············································································································· 104.2 실험 순서 ············································································································· 134.3.1 기존 SSD-Insider 알고리즘과 성능 비교 실험 ································ 144.3.2 관찰 시간을 증가시킨 후 정확성 비교 실험 ····································· 16Ⅴ. OpenSSD 를 이용한 탐지 알고리즘의 펌웨어 구현 및 성능 실험 ··················· 185.1 OpenSSD 를 이용한 실험의 필요성 ······························································· 185.2 OpenSSD ············································································································· 195.3 실험 환경 ············································································································· 215.4 실험 순서 ············································································································· 295.5.1 정확성 실험 ······························································································ 305.5.2 성능 실험 ································································································· 31Ⅵ. 결론 및 향후 연구 ······································································································ 33참고문헌 ······························································································································ 34
최근 본 자료
댓글(0)
0