Àüü
ÀüÀÚ/Àü±â
Åë½Å
ÄÄÇ»ÅÍ
·Î±×ÀÎ
ȸ¿ø°¡ÀÔ
About Us
ÀÌ¿ë¾È³»
¿¬±¸¹®Çå
±¹³» ³í¹®Áö
¿µ¹® ³í¹®Áö
±¹³» ÇÐȸÁö
Çмú´ëȸ ÇÁ·Î½Ãµù
±¹³» ÇÐÀ§ ³í¹®
³í¹®Á¤º¸
¹é¼
±³À°Á¤º¸
¿¬±¸ ù°ÉÀ½
ÇаúÁ¤º¸
°ÀÇÁ¤º¸
µ¿¿µ»óÁ¤º¸
E-Learning
¿Â¶óÀÎ Àú³Î
½ÉÈÁ¤º¸
¿¬±¸ ¹× ±â¼úµ¿Çâ
Áֿ俬±¸ÅäÇÈ
ÁÖ¿ä°úÁ¦ ¹× ±â°ü
Çؿܱâ°ü °ü·ÃÀÚ·á
¹ÙÀÌ¿À Á¤º¸±â¼ú
ÁÖ¿ä Archive Site
Æ÷Ä¿½ºiN
¿¬±¸ÀÚ Á¤º¸
¶óÀÌ¡½ºÅ¸
ÆÄ¿öiNÅͺä
¼¼ÁßÇÑ
¿¬±¸ÀÚ·á
¹®ÀÚ DB
¿ë¾î»çÀü
¾Ë¸²¸¶´ç
ºÎ½Ç ÇмúÈ°µ¿ ¿¹¹æ
³í¹®¸ðÁý
´ëȸ¾È³»
What's New
¿¬±¸ºñÁ¤º¸
±¸ÀÎÁ¤º¸
°øÁö»çÇ×
CSERIC ±¤Àå
Post-Conference
¿¬±¸ÀÚ Ä«Æä
ÀÚÀ¯°Ô½ÃÆÇ
Q&A
´Ý±â
»çÀÌÆ®¸Ê
¿¬±¸¹®Çå
±¹³» ³í¹®Áö
¿µ¹® ³í¹®Áö
±¹³» ÇÐȸÁö
Çмú´ëȸ ÇÁ·Î½Ãµù
±¹³» ÇÐÀ§ ³í¹®
³í¹®Á¤º¸
¹é¼
±³À°Á¤º¸
¿¬±¸ ù°ÉÀ½
ÇаúÁ¤º¸
°ÀÇÁ¤º¸
µ¿¿µ»óÁ¤º¸
E-Learning
¿Â¶óÀÎ Àú³Î
½ÉÈÁ¤º¸
¿¬±¸ ¹× ±â¼úµ¿Çâ
Áֿ俬±¸ÅäÇÈ
ÁÖ¿ä°úÁ¦ ¹× ±â°ü
Çؿܱâ°ü °ü·ÃÀÚ·á
¹ÙÀÌ¿À Á¤º¸±â¼ú
ÁÖ¿ä Archive Site
ÄÄÇ»ÅÍiN
¿¬±¸ÀÚ Á¤º¸
¿¬±¸ÀÚ·á
¹®ÀÚ DB
Ȧ·Î±×·¥ DB
¿ë¾î»çÀü
¾Ë¸²¸¶´ç
ºÎ½Ç ÇмúÈ°µ¿ ¿¹¹æ
³í¹®¸ðÁý
´ëȸ¾È³»
What's New
¿¬±¸ºñ Á¤º¸
±¸ÀÎÁ¤º¸
°øÁö»çÇ×
IT Daily
CSERIC ±¤Àå
Post-Conference
¿¬±¸ÀÚ Ä«Æä
ÀÚÀ¯°Ô½ÃÆÇ
Q&A
¼ºñ½º ¹Ù·Î°¡±â
¼³¹®Á¶»ç
¿¬±¸À±¸®
°ü·Ã±â°ü
Please wait....
¿¬±¸¹®Çå
±¹³» ³í¹®Áö
¿µ¹® ³í¹®Áö
±¹³» ÇÐȸÁö
Çмú´ëȸ ÇÁ·Î½Ãµù
±¹³» ÇÐÀ§ ³í¹®
³í¹®Á¤º¸
¹é¼
±¹³» ³í¹®Áö
Ȩ > ¿¬±¸¹®Çå > ±¹³» ³í¹®Áö >
Çѱ¹Á¤º¸°úÇÐȸ ³í¹®Áö
>
Á¤º¸°úÇÐȸ³í¹®Áö (Journal of KIISE)
Á¤º¸°úÇÐȸ³í¹®Áö (Journal of KIISE)
Current Result Document :
2
/ 11
´ÙÀ½°Ç
ÇѱÛÁ¦¸ñ(Korean Title)
¸í·É¾î Ư¼º ¿ä¾àÀ» »ç¿ëÇÑ ½Å°æ¸Á ±â¹Ý ROP °ø°Ý ŽÁöÀÇ ¼º´É °³¼±
¿µ¹®Á¦¸ñ(English Title)
Performance Improvement of Neural Network-based Detection of ROP Attacks using Abstraction of Instruction Features
ÀúÀÚ(Author)
ÀÌÇö±Ô
ǥâ¿ì
Hyungyu Lee
Changwoo Pyo
¿ø¹®¼ö·Ïó(Citation)
VOL 48 NO. 05 PP. 0493 ~ 0500 (2021. 05)
Çѱ۳»¿ë
(Korean Abstract)
±Íȯ ÁöÇâ ÇÁ·Î±×·¡¹Ö(Return-Oriented Programming (ROP))Àº ¸Þ¸ð¸®¿¡ ÀûÀçµÇ¾î ÀÖ´Â ÄÚµå Á¶°¢µéÀ» ±Íȯ ¸í·ÉÀ» »ç¿ëÇÏ¿© ¿øÇÏ´Â ¼ø¼´ë·Î ½ÇÇàÇÏ´Â ÇÁ·Î±×·¥ °ø°Ý ±â¹ýÀÌ´Ù. ÀÌ ³í¹®Àº ½Å°æ¸ÁÀ» »ç¿ëÇÏ¿© ROP °ø°ÝÀ» È¿À²ÀûÀ¸·Î ŽÁöÇÏ´Â ¹æ¹ýÀ» Á¦¾ÈÇÏ°í ÀÖ´Ù. ÀÌ ¹æ¹ýÀº ¸í·É¾î Ư¡À» ³ªÅ¸³»´Â ¿ä¾àÀ» »ç¿ëÇÏ¿© µ¥ÀÌÅÍÀÇ Å©±â¸¦ Ãà¼Ò½ÃÅ°°í, ±Íȯ ¸í·É ÀÌÈÄ¿¡ ½ÇÇàµÇ´Â 12°³ÀÇ ¸í·É¿¡ ´ëÇؼ¸¸ ½Å°æ¸ÁÀ» °¡µ¿ÇÑ´Ù. À¥ ¼¹ö¿Í ºê¶ó¿ìÀú, ±×¸®°í ÀÌµé ½ÇÇà¿¡ ÇÊ¿äÇÑ ¶óÀ̺귯¸®¸¦ »ç¿ëÇÑ ½ÇÇè¿¡¼ F1 Á¡¼ö 100À» À¯ÁöÇÏ´Â °¡¿îµ¥ DeepCheck°ú HeNetº¸´Ù °¢°¢ 9.6¹è, ±×¸®°í 1,403.1¹èÀÇ ¼Óµµ Çâ»óÀ» º¸¿´´Ù.
¿µ¹®³»¿ë
(English Abstract)
Return-oriented programming (ROP) is a program attack technique that executes code snippets in memory following an attacker-intended order using return instructions. This paper proposes a method of detecting ROP attacks using neural networks. The method reduces the size of the data by using abstraction of instruction features relevant to ROP attacks rather than entire bits of instructions and activates the neural networks only for 12 instructions after a return instruction. Our experiments on a web server, browser, and the necessary libraries show speedups of 9.6 and 1,403.1over DeepCheck and HeNet with an F1 score of 100.
Å°¿öµå(Keyword)
ÇÁ·Î±×·¥ º¸¾È
±Íȯ ÁöÇâ ÇÁ·Î±×·¡¹Ö
½ÇÇà½Ã°£ ŽÁö
½Å°æ¸Á
program security
return-oriented programming
runtime detection
neural network
ÆÄÀÏ÷ºÎ
PDF ´Ù¿î·Îµå
¸ñ·Ï
Copyright(c)
Computer Science Engineering Research Information Center
. All rights reserved.