Prof. Huy Kang Kim's Lifelog (김휘강의 Lifelog)

2009년 4월 5일 일요일

오픈웹에서 오해하기 쉬운 사실 #3: 버그트럭(BugTruck): 인터넷 뱅킹과 액티브 엑스 논란에 대해서

버그트럭(BugTruck): 인터넷 뱅킹과 액티브 엑스 논란에 대해서

Matt Oh 님의 글.

이메일로 전송 BlogThis!Twitter에서 공유 Facebook에서 공유 Pinterest에 공유

댓글 없음:

댓글 쓰기

최근 게시물 이전 게시물 홈

피드 구독하기: 댓글 (Atom)

전체 페이지뷰

가장 많이 본 글

역시 직접 나섰더니 일이 제대로 되는군

이라는 것은 중간 관리자 1~2년차가 빠지기 쉬운 대단한 착각 중 하나. 직접 나섰더니 일이 잘되었다라고 생각하기 전에 아래의 사항을 꼭 체크해 볼 것. 1. 직접 나서기 전에 일이 잘 안되고 있었던 것이 확실한가? 2. 직접 나서서 해결된 결과가 ...
최근 accept 된 paper (PST 2016) -- dataset release

자동차 보안 분야로 Know Your Master: Driver Profiling-based Anti-theft Method 라는 제목으로 투고했던 논문이 최근 PST 2016 (Privacy, Security and Trust) c...
Research Directions in Autonomous Car Security

얼마전 선배를 만나서 자동차 보안관련 토론을 나눌 기회가 있었는데, 진지한 대화 후 선배와 같이 공감한 결론은 이렇다. 1. 이제는 전통적인 차량에 대해 하드웨어 해킹으로 승부를 보긴 어려울 것 같다. 사실 자동차에 대해 어떤 공격이 일...
오픈웹에서 오해하기 쉬운 사실 #1

이 글은 균형잡힌 시각이 어느정도 제시되어야 할 필요가 있다고 생각되어, 연재될 글 중 첫번째 글이다. 오픈웹의 여러 의견 중에서 일리가 있다고 생각되는 것 중 하나는, “적어도 은행 정도 되는 중요 서비스 제공자라면 ActiveX 컨트롤로 백신이...
직장생활하며 겪어본 오타 중 처절한 것

좋은 의도로 상대방은 나에게 메일을 보내오셨던 것 같은데, 받는 사람 입장에서는 받고 나면 “어?' 이건 약간 안드로메다에 갔다온듯한 씁쓸한 느낌이 들어…” 라는 말이 튀어나오게 된다. 고맙습니다. –> 고밉습니다. 이건 뭐...
게임과 보안 연재 7편 - 계정 도용을 막는 방법 (commentary)

지난 주에 게임과 보안 7회째 연재인 "계정 도용을 막는 방법" 이 올라왔습니다. 7회차 기고문은 아래 엔씨소프트 블로그 및 엔씨소프트의 네이버포스트에서 볼 수 있습니다. 계정도용은 사실 게임봇 만큼이나 민감한 건입...

Useful links

Hacking and Countermeasure Research Lab.
Datasets by HCR Lab.
AI Spera

Recent Publications (2019)

Jang, Joonun, Kim, H. K. (2019). FuzzBuilder: Automated building greybox fuzzing environment for C/C++ library. Annual Computer Security Applications Conference (ACSAC) 2019
Park, K. H., Kim, H. K. (2019). This Car is Mine!: Automobile Theft Countermeasure Leveraging Driver Identification with Generative Adversarial Networks. ESCAR Asia 2019
Lee, S., Kim, H. K., & Kim, K. (2019). Ransomware protection using the moving target defense perspective. Computers & Electrical Engineering, 78, 288-299.

Recent Publications (2018)

Lee, E., Woo, J., Kim, H., & Kim, H. K. (2018). No Silk Road for Online Gamers!: Using Social Network Analysis to Unveil Black Markets in Online Games. In Proceedings of the 2018 World Wide Web Conference on World Wide Web (pp. 1825-1834). International World Wide Web Conferences Steering Committee.
Chun, S., Choi, D., Han, J., Kim, H. K., & Kwon, T. (2018, April). Unveiling a Socio-Economic System in a Virtual World: A Case Study of an MMORPG. In Proceedings of the 2018 World Wide Web Conference on World Wide Web (pp. 1929-1938). International World Wide Web Conferences Steering Committee.
Woo, J., Kang, S. W., Kim, H. K., & Park, J. (2018). Contagion of Cheating Behaviors in Online Social Networks. IEEE Access.
Lee, E., Kim, B., Kang, S., Kang, B., Jang, Y., & Kim, H. K. (2018). Profit Optimizing Churn Prediction for Long-term Loyal Customer in Online games. IEEE Transactions on Games.
Han, M. L., Kwak, B. I., & Kim, H. K. (2018). Anomaly intrusion detection method for vehicular networks based on survival analysis. Vehicular communications, 14, 52-63.
Kim, H. M., Song, H. M., Seo, J. W., & Kim, H. K. (2018, August). Andro-Simnet: Android Malware Family Classification using Social Network Analysis. In 2018 16th Annual Conference on Privacy, Security and Trust (PST) (pp. 1-8). IEEE.
Seo, E., Song, H. M., & Kim, H. K. (2018, August). GIDS: GAN based Intrusion Detection System for In-Vehicle Network. In 2018 16th Annual Conference on Privacy, Security and Trust (PST) (pp. 1-6). IEEE.

Recent Publications (2017)

Sang-Wook Seo et al. "C-TAS Ecosystem for Cyber Threat Analysis & Sharing in Korea", OASIS Borderless Cyber and FIRST Technical Symposium 2017
Hyungseok Kim et al. "Firewall Ruleset Visualization Analysis Tool based on Segmentation.", IEEE VizSec (2017)
Hyunsung Lee, Seong Hoon Jeong and Huy Kang Kim. "OTIDS: A Novel Intrusion Detection System for In-vehicle Network by using Remote Frame." Privacy, Security and Trust (PST 2017)
Ge, Mengmeng, Huy Kang Kim, and Dong Seong Kim. "Evaluating Security and Availability of Multiple Redundancy Designs when Applying Security Patches." RADIANCE (2017).
Kwon, YooJin, et al. "An Automated Vulnerability Analysis Technique for Smart Grid Infrastructure", The Eighth Conference on Innovative Smart Grid Technologies (ISGT 2017)
Kang, Ah Reum, et al. "I Would Not Plant Apple Trees If the World Will Be Wiped: Analyzing Hundreds of Millions of Behavioral Records of Players During an MMORPG Beta Test." Proceedings of the 26th International Conference on World Wide Web Companion. International World Wide Web Conferences Steering Committee, 2017.
Kim, Hana, Seongil Yang, and Huy Kang Kim. "Crime Scene Re-investigation: A Postmortem Analysis of Game Account Stealers' Behaviors." ACM NetGames (2017).

Representative Papers

Jang, Joonun, Kim, H. K. (2019). FuzzBuilder: Automated building greybox fuzzing environment for C/C++ library. Annual Computer Security Applications Conference (ACSAC) 2019
Han, M. L., Kwak, B. I., & Kim, H. K. (2018). Anomaly intrusion detection method for vehicular networks based on survival analysis. Vehicular communications, 14, 52-63.
Lee, E., Kim, B., Kang, S., Kang, B., Jang, Y., & Kim, H. K. (2018). Profit Optimizing Churn Prediction for Long-term Loyal Customer in Online games. IEEE Transactions on Games.
Lee, E., Woo, J., Kim, H., & Kim, H. K. (2018). No Silk Road for Online Gamers!: Using Social Network Analysis to Unveil Black Markets in Online Games. In Proceedings of the 2018 World Wide Web Conference on World Wide Web (pp. 1825-1834). International World Wide Web Conferences Steering Committee.
Chun, S., Choi, D., Han, J., Kim, H. K., & Kwon, T. (2018, April). Unveiling a Socio-Economic System in a Virtual World: A Case Study of an MMORPG. In Proceedings of the 2018 World Wide Web Conference on World Wide Web (pp. 1929-1938). International World Wide Web Conferences Steering Committee.
Kang, Ah Reum, et al. "I Would Not Plant Apple Trees If the World Will Be Wiped: Analyzing Hundreds of Millions of Behavioral Records of Players During an MMORPG Beta Test." Proceedings of the 26th International Conference on World Wide Web Companion. International World Wide Web Conferences Steering Committee, 2017.
Hyungseok Kim et al. "Firewall Ruleset Visualization Analysis Tool based on Segmentation.", IEEE VizSec (2017)
Kwon, Hyukmin, et al. "Crime Scene Reconstruction: Online Gold Farming Network Analysis." IEEE Transactions on Information Forensics and Security (2016).
E. Lee, J. Woo, H. Kim, A. Mohaisen, and H. K. Kim, “You Are a Game Bot!: Uncovering Game Bots in MMORPGs via Self-similarity in the Wild,” NDSS 2016.
Jang, J. W., Kang, H., Woo, J., Mohaisen, A., & Kim, H. K. (2016). Andro-dumpsys: anti-malware system based on the similarity of malware creator and malware centric information. Computers & Security.
Kang, A. R., Park, J., Lee, J., & Kim, H. K. (2015, May). Rise and Fall of Online Game Groups: Common Findings on Two Different Games. In Proceedings of the 24th International Conference on World Wide Web Companion (pp. 1079-1084). International World Wide Web Conferences Steering Committee.
Jang, J. W., Kang, H., Woo, J., Mohaisen, A., & Kim, H. K. (2015). Andro-autopsy: Anti-malware system based on similarity matching of malware and malware creator-centric information. Digital Investigation, 14, 17-35.
Chung, T., Han, J., Choi, D., Kwon, T. T., Kim, H. K., & Choi, Y. (2014, April). Unveiling group characteristics in online social games: a socio-economic analysis. In Proceedings of the 23rd international conference on World wide web (pp. 889-900). ACM.
Kim, H. K., Im, K. H., & Park, S. C. (2010). DSS for computer security incident response applying CBR and collaborative response. Expert Systems with Applications, 37(1), 852-870.
Kang, A. R., Woo, J., Park, J., & Kim, H. K. (2013). Online game bot detection based on party-play log analysis. Computers & Mathematics with Applications, 65(9), 1384-1395.

Recent Publications (2016)

Kwak, Byung Il, JiYoung Woo, and Huy Kang Kim. "Know your master: Driver profiling-based anti-theft method." Privacy, Security and Trust (PST), 2016 14th Annual Conference on. IEEE, 2016.
Moon, Young Hoon, et al. "Hybrid Attack Path Enumeration System Based on Reputation Scores." Computer and Information Technology (CIT), 2016 IEEE International Conference on. IEEE, 2016.
Yusuf, Simon Enoch, et al. "Security Modelling and Analysis of Dynamic Enterprise Networks." Computer and Information Technology (CIT), 2016 IEEE International Conference on. IEEE, 2016.
Yu, Song Jin, et al. "Hurst Parameter based Anomaly Detection for Intrusion Detection System." Computer and Information Technology (CIT), 2016 IEEE International Conference on. IEEE, 2016
Daegeon Kim, Jiyoung Woo, and Huy Kang Kim. ""I Know What You Did Before": General Framework for Correlation Analysis of Cyber Threat Incidents" MILCOM 2016 (2016)
Kwon, Hyukmin, et al. "Crime Scene Reconstruction: Online Gold Farming Network Analysis." IEEE Transactions on Information Forensics and Security (2016).
Han, Mee Lan, et al. "WHAP: Web-Hacking Profiling Using Case-Based Reasoning." IEEE CNS 2016 (2016)
Jeong, Seong Hoon, et al. "A longitudinal analysis of. i2p leakage in the public dns infrastructure." Proceedings of the 2016 conference on ACM SIGCOMM 2016 Conference. ACM, 2016.
Jang, Jae-wook, and Huy Kang Kim. "Function-Oriented Mobile Malware Analysis as First Aid." Mobile Information Systems 2016 (2016).
Kang, Ah Reum, et al. "Multimodal game bot detection using user behavioral characteristics." SpringerPlus 5.1 (2016): 1-19.
Jang, Jae-wook, et al. "Andro-dumpsys: anti-malware system based on the similarity of malware creator and malware centric information." Computers & Security (2016).
Intrusion Detection System Based on the Analysis of Time Intervals of CAN Messages for In-Vehicle Network
Lee, Eunjo, et al. "You are a game bot!: uncovering game bots in MMORPGs via self-similarity in the wild." NDSS, 2016.
Jang, Jae-wook, et al. "Detecting and classifying method based on similarity matching of Android malware behavior with profile." SpringerPlus 5.1 (2016): 1.

풍경 테마. Powered by Blogger.