Security challenges in recent internet threats and enhanced security service model for future IT environments

Journal of Internet Technology

Volumn 17, Issue 5, 2016, Pages 947-955

  Kim, Mansik ^a   Lee, Jeong Kyu ^b   Park, Jong Hyuk ^b   Kang, Jungho ^a  

^a Soongsil University   (South Korea)

^b Seoul National University of Science and Technology   (South Korea)

Author keywords

Advanced persistent threats; Internet threats; Ransomware; Security service model; Zero day attack

Indexed keywords

MALWARE; SECURITY SYSTEMS;

ADVANCED PERSISTENT THREATS; COMMUNICATION TECHNOLOGIES; INTERNET ENVIRONMENT; INTERNET INFRASTRUCTURE; INTERNET SECURITY SYSTEMS; SECURITY REQUIREMENTS; SECURITY SERVICES; ZERO DAY ATTACK;

INTERNET;

EID: 84989849873     PISSN: 16079264     EISSN: 20794029     Source Type: Journal    
DOI: 10.6138/JIT.2016.17.5.20160821     Document Type: Article

References (40)

1. J. Kang, J.-K. Han and J. H. Park, Design of IP Camera Access Control Protocol by Utilizing Hierarchical Group Key, Symmetry, Vol. 7, No. 3, pp. 1567-1586, August, 2015.
2. J. Kang and J. Kim, Secure HDFS Design Using Group Key Management System, Journal of Internet Technology, Vol. 17, No. 4, pp. 729-737, July, 2015.
3. K. Peng, A Secure Network for Mobile Wireless Service, Journal of Information Processing Systems, Vol. 9, No. 2, pp. 247-258, 2013.
4. K. Hashizume, D. G. Rosado, E. Fernández-Medina and E. B. Fernandez, An Analysis of Security Issues for Cloud Computing, Journal of Internet Services and Applications, Vol. 4, No. 1, February, 2013, doi: 10.1186/1869-0238-4-5.
5. P. Chen, L. Desmet and C. Huygens, A Study on Advanced Persistent Threats, 15th IFIP International Conference on Communications and Multimedia Security, Aveiro, Portugal, 2014, pp. 63-72.
6. F. Skopik, I. Friedberg and R. Fiedler, Dealing with Advanced Persistent Threats in Smart Grid ICT Networks, 2014 IEEE PES Innovative Smart Grid Technologies Conference, Washington, DC, 2014, doi: 10.1109/ISGT.2014.6816388.
7. R. Brewer, Advanced Persistent Threats: Minimising the Damage, Network Security, Vol. 2014, No. 4, pp. 5-9, April, 2014.
8. Kaspersky Lab, Kaspersky Security Bulletin 2015, 2015, https://kas.pr/KSB2015-pdf
9. A. Kharraz, W. Robertson, D. Balzarotti, L. Bilge and E. Kirda, Cutting the Gordian Knot: A Look under the Hood of Ransomware Attacks, 12th International Conference on Detection of Intrusions and Malware, and Vulnerability Assessment, Milan, Italy, 2015, pp. 3-24.
10. D. Kim and S. Kim, Design of Quantification Model for Ransom Ware Prevent, World Journal of Engineering and Technology, Vol. 3, No. 3, pp. 203- 207, September, 2015.
11. S. Song, B. King and S. Lee, The Effective Ransomware Prevention Technique Using Process Monitoring on Android Platform, Mobile Information Systems, Vol. 2016, March, 2016, doi: 10.1155/2016/2946735.
12. Cyber Threat Alliance, CryptoWall Version 3 Threat, 2015, http://cyberthreatalliance.org/cryptowall-report.pdf
13. C.-N. Kao, Y.-C. Chang, N.-F. Huang, I. Salim S, I.-J. Liao, R.-T. Liu and H.-W. Hung, A Predictive Zero-Day Network Defense Using Long-Term Port-Scan Recording, 2015 IEEE Conference on Communications and Network Security, Florence, Italy, 2015, pp. 695-696.
14. L. Bilge and D. Tudor, Before We Knew It: An Empirical Study of Zero-Day Attacks in the Real World, 2012 ACM Conference on Computer and Communications Security, Raleigh, NC, 2012, pp. 833-844.
15. L. Wang, S. Jajodia, A. Singhal, P. Cheng and S. Noel, K-Zero Day Safety: A Network Security Metric for Measuring the Risk of Unknown Vulnerabilities, IEEE Transactions on Dependable and Secure Computing, Vol. 11, No. 1, pp. 30-44, January, 2014.
16. Symantec, Internet Security Threat Report, 2016, https://www.symantec.com/security-center/threatreport
17. FireEye, SPEAR-PHISHING ATTACKS, 2016, https://www2.fireeye.com/rs/fireye/images/fireeye-howstop- spearphishing.pdf
18. D. B. Amsler, N. Allen, S. Messer and T. Healy, Automated Internet Threat Detection and Mitigation System and Associated Methods, US Patent 9258321, February, 2016.
19. K. M. Prasad, A. Reddy and V. Jyothsna, IP Traceback for Flooding Attacks on Internet Threat Monitors (ITM) Using Honeypots, International Journal of Network Security & Its Applications, Vol. 4, No. 1, January, 2012, pp. 13-27.
20. K. M. Prasad, A. R. M. Reddy and K. V. Rao, An Efficient Detection of Flooding Attacks to Internet Threat Monitors (ITM) Using Entropy Variations under Low Traffic, 2012 Third International Conference on Computing Communication & Networking Technologies, Coimbatore, India, 2012, pp. 1-11.
21. Arbor Network, Worldwide Infrastructure Security Report, 2016, https://www.arbornetworks.com/images/documents/WISR2016-EN-Web.pdf
22. Y. Oh and T. Obi, Identifying Phishing Threats in Government Web Services, International Journal of Information and Network Security, Vol. 2, No. 1, pp. 32-43, February, 2013.
23. A. A. Aldossary and A. M. Zeki, Web User' Knowledge and Their Behavior towards Security Threats and Vulnerabilities, 2015 4th International Conference on Advanced Computer Science Applications and Technologies, Kuala Lumpur, Malaysia, 2015, pp. 256-260.
24. L. R. Bays, R. R. Oliveira, M. P. Barcellos, L. P. Gaspary and E. R. M. Madeira, Virtual Network Security: Threats, Countermeasures, and Challenges, Journal of Internet Services and Applications, Vol. 6, No. 1, January, 2015, doi: 10.1186/s13174-014- 0015-z.
25. R. Hussain and H. Oh, Cooperation-Aware VANET Clouds: Providing Secure Cloud Services to Vehicular Ad Hoc Networks, Journal of Information Processing Systems, Vol. 10, No. 1, pp. 103-118, March, 2014.
26. McAfee, Mobile Threat Report, http://www. mcafee.com/us/resources/reports/rp-mobile-threatreport- 2016.pdf
27. J. W. Joo, J. K. Lee and J. H. Park, Security Considerations for a Connected Car, Journal of Convergence, Vol. 6, No. 2, pp. 1-9, June, 2015.
28. A. Dahane, N.-E. Berrached and A. Loukil, A Virtual Laboratory to Practice Mobile Wireless Sensor Networks: A Case Study on Energy Efficient and Safe Weighted Clustering Algorithm, Journal of Information Processing Systems, Vol. 11, No. 2, pp. 205-228, June, 2015.
29. H. Im, J. Kang and J. H. Park, Certificateless Based Public Key Infrastructure Using a DNSSEC, Journal of Convergence, Vol. 6, No. 3, pp. 26-33, September, 2015.
30. T. Kwon, J. Lee, H. Choi, O. Yi and S. Ju, Efficiency of LEA compared with AES, Journal of Convergence, Vol. 6, No. 3, pp. 16-25, September, 2015.
31. Hewlett Packard Enterprise, Internet of Things Research Study 2015 Report, 2015, http://www8. hp.com/h20195/V2/GetPDF.aspx/4AA5-4759ENW.pdf
32. I. S. Bayram and I. Papapanagiotou, A Survey on Communication Technologies and Requirements for Internet of Electric Vehicles, EURASIP Journal on Wireless Communications and Networking, Vol. 2014, No. 1, December, 2014, doi: 10.1186/1687-1499- 2014-223.
33. E. Verlinde and V. Herman, Passing through the Firewall, 2013, https://arxiv.org/pdf/1306.0515v2.pdf
34. M. A. Abramowicz, W. Kluźniak and J.-P. Lasota, Mass of a Black Hole Firewall, Physical Review Letters, Vol. 112, No. 9, March, 2014, doi: 10.1103/PhysRevLett.112.091301.
35. H. Hu, G.-J. Ahn and K. Kulkarni, Detecting and Resolving Firewall Policy Anomalies, IEEE Transactions on Dependable and Secure Computing, Vol. 9, No. 3, pp. 318-331, May-June, 2012.
36. I. Butun, S. D. Morgera and R. Sankar, A Survey of Intrusion Detection Systems in Wireless Sensor Networks, IEEE Communications Surveys & Tutorials, Vol. 16, No. 1, pp. 266-282, May, 2014.
37. E. M. Shakshuki, N. Kang and T. R. Sheltami. EAACK - A Secure Intrusion-Detection System for MANETs, IEEE Transactions on Industrial Electronics, Vol. 60, No. 3, pp. 1089-1098, March, 2013.
38. A. Jamdagni, Z. Tan, X. He, P. Nanda and R. P. Liu, RePIDS: A Multi Tier Real-Time Payload-Based Intrusion Detection System, Computer Networks, Vol. 57, No. 3, pp. 811-824, February, 2013.
39. T. Xing, D. Huang, L. Xu, C.-J. Chung and P. Khatkar, Snortflow: A Openflow-Based Intrusion Prevention System in Cloud Environment, 2013 Second GENI Research and Educational Experiment Workshop, Salt Lake City, UT, 2013, pp. 89-92.
40. L. Zhang, G. Shou, Y. Hu and Z. Guo, Deployment of Intrusion Prevention System Based on Software Defined Networking, 2013 15th IEEE International Conference on Communication Technology, Guilin, China, 2013, pp. 26-31.