기업 사설 네트워크 우회 접속 분석 및 통제 대책 연구A Study on Analysis and Control of Circumvent Connection to the Private Network of Corporation
- Other Titles
- A Study on Analysis and Control of Circumvent Connection to the Private Network of Corporation
- Authors
- 이철원; 김휘강; 임종인
- Issue Date
- 2010
- Publisher
- 한국정보보호학회
- Keywords
- Covert Channel; Malicious Code; Remote Control; Reverse Connection; Private Network; Tunneling
- Citation
- 정보보호학회논문지, v.20, no.6, pp.183 - 194
- Indexed
- KCI
- Journal Title
- 정보보호학회논문지
- Volume
- 20
- Number
- 6
- Start Page
- 183
- End Page
- 194
- URI
- https://scholar.korea.ac.kr/handle/2021.sw.korea/117489
- ISSN
- 1598-3986
- Abstract
- A company’s private network protected by a firewall and NAT(Network Address Translation) is not accessible directly through an external internet. However, as Reverse Connection technology used by NetCat extends to the technologies such as SSH Tunnel or HTTP Tunnel, now anyone can easily access a private network of corporation protected by a firewall and NAT. Furthermore, while these kinds of technologies are commercially stretching out to various services such as a remote control and HTTP Tunnel, security managers in a company or general users are confused under the circumstances of inner or outer regulation which is not allowed to access to an internal system with a remote control. What is more serious is to make a covert channel invading a company’s private network through a malicious code and all that technologies. By the way, what matters is that a given security system such as a firewall cannot shield from these perceived dangers. So, we analyze the indirect access of technological methods and the status quo about a company’s internal network and find a solution to get rid of the related dangers.
- Files in This Item
- There are no files associated with this item.
- Appears in
Collections - School of Cyber Security > Department of Information Security > 1. Journal Articles
Items in ScholarWorks are protected by copyright, with all rights reserved, unless otherwise indicated.