JIPS (한국정보처리학회)
Current Result Document :
| 한글제목(Korean Title) |
Service Identification of Internet-Connected Devices Based on Common Platform Enumeration |
| 영문제목(English Title) |
Service Identification of Internet-Connected Devices Based on Common Platform Enumeration |
| 저자(Author) |
Sarang Na
Taeeun Kim
Hwankuk Kim
|
| 원문수록처(Citation) |
VOL 14 NO. 03 PP. 0740 ~ 0750 (2018. 06) |
한글내용
(Korean Abstract) |
|
영문내용
(English Abstract) |
There are a great number of Internet-connected devices and their information can be acquired through an Internet-wide scanning tool. By associating device information with publicly known security vulnerabilities, security experts are able to determine whether a particular device is vulnerable. Currently, the identification of the device information and its related vulnerabilities is manually carried out. It is necessary to automate the process to identify a huge number of Internet-connected devices in order to analyze more than one hundred thousand security vulnerabilities. In this paper, we propose a method of automatically generating device information in the Common Platform Enumeration (CPE) format from banner text to discover potentially weak devices having the Common Vulnerabilities Exposures (CVE) vulnerability. We demonstrated that our proposed method can distinguish as much adequate CPE information as possible in the service banner.
|
| 키워드(Keyword) |
Common Platform Enumeration (CPE)
Common Vulnerabilities and Exposures (CVE)
OS Fingerprinting
Security Vulnerability Analysis
Service Identification
|
| 파일첨부 |
PDF 다운로드
|
