Eungki Park

Internet Threat Detection, Prediction and Relevant Reaction System for Pattern-freeWorm

When in dual-shore software outsourcing, the working units are geographically distributed and each has unique management framework, procedure and security requirement. Timely business information convergence is necessary for the collaboration but difficult to achieve in such environment. A framework is proposed to adaptively collect the process information in dual-shore software outsourcing and to timely share the information among these heterogeneous working units. The further information analysis is also enabled, which may enhance the timely collaboration and decision making.With the development of Internet technology, the popularity of the malicious threat has grown beyond our imagination. The emergence of intelligent, sophisticated attack techniques makes the Internet services more vulnerable than ever, which become an important business technology in e-commerce. Many techniques have been proposed to detect (Zou et al., 2003; Lakhina and Diot, 2005; and Krishnamurthy et al., 2003), predict (Kai-Gui Wu, 2006 and Songjie Wei and Kirkovic, 2005) and react (Castaneda and Xuy, 2004 and Williamson, 2002) the malicious worm traffic, yet have limitations. In this paper, we proposed Internet threat detection, prediction and relevant reaction system for pattern-free worm. Our proposed system allows the system to detect, predict, react using grouping traffic characteristics. According to the proposed system, traffic factors generated by respective worms using k-means algorithms are grouped into N groups so that a great of Information may be effectively understood and a worm generated afterward is involved with characteristics of relevant group using cosine similarity for prediction and reaction.

Vulnerability analysis and evaluation within an intranet

Recently computer incidents have increased rapidly and their ripple effects have also grown. Since computer systems become critical infrastructures in various areas, it is more and more important to protect the network and computer system assets from malicious incidents. Attackers try to search the vulnerabilities of the network and system, and penetrate to the network and system to do some malicious actions.

Design and implementation of firewall simulation based on SSFNet

In this paper, we design and implement a packet-filtering firewall on a famous simulation framework, SSFNet. One major drawback of many existing firewall simulator is not to be anble to present the dynamic behavior of simulation environment. The firewall implemented in this paper does he able to present its dynamic behavior as well as static behavior. We simulated the firewall module with several scenarios that represent famous harmful accesses to the Internet resources.

Adaptive architecture for web server survivability

Internet becomes more and more popular, and most companies and institutes use web services as a fundamental tools to promote their business. As results, Internet and web services become core infrastructure for a business and become more and more important, but attacks against web services increase as the popularity of web services grows. Therefore, there are increasing needs of undisturbed web services despite of attacks. In this paper, we proposed adaptation policies for a web-server intrusion tolerant system. Our proposed adaptation policies allow the system to provide continuous web services using various techniques, such as intrusion tolerant types, replication degree, server allocation mechanism, adaptive access control method and so on.