應用於無線網際網路威脅之端點安全框架;Insulator: A Client-side Security Framework for the Wireless Internet Access

NCU Institutional Repository > 資訊電機學院 > 資訊工程研究所 > 博碩士論文 > Item 987654321/86676

jsp.display-item.identifier=請使用永久網址來引用或連結此文件: http://ir.lib.ncu.edu.tw/handle/987654321/86676

题名:	應用於無線網際網路威脅之端點安全框架;Insulator: A Client-side Security Framework for the Wireless Internet Access
作者:	王傳陞;Wang, Chuan-Sheng
贡献者:	資訊工程學系
关键词:	網路資訊安全;無線存取點;惡意網站;資訊洩漏;cyber security;wireless access point;web security;information leakage
日期:	2021-08-13
上传时间:	2021-12-07 13:06:29 (UTC+8)
出版者:	國立中央大學
摘要:	網際網路的資訊安全一直是被廣泛討論的問題，近年來網路資訊安全受威脅情況越演越烈，根據研究，針對個人及中小企業的網路攻擊數量、威脅程度、遭受的經濟損失皆有增加。面對這些威脅，實際企業所採用的對抗方式，通常為伺服器端的入侵偵測、防火牆過濾、又或者於端點安裝防毒軟體。然而研究統計實際防禦的效果並不明顯。與此同時，因為新冠病毒的影響，遠距離辦公的需求亦增加了可能被入侵的風險。使用者僅僅是連線到一個網站，便須面對多種不同的資安威脅。在此情況下，此論文提出絕緣體(Insulator)，一個應用於無線網際網路威脅之端點安全框架，絕緣體一詞意味著通過阻止網際網路上的威脅來保護用戶。絕緣體將提供使用者一種可以完全由端點自行偵測、防護的安全框架。針對正常使用者連線容易遇到的資安威脅，此論文提供一種不依賴伺服器端支援，可同時偵測防禦數種攻擊的端點工具，令使用者可使用自身之設備於不信任的網路環境中偵測攻擊者並迴避危險。此論文所提出之端點安全框架，由四種核心模組完成。這四種模組將分別進行無線網路偵測惡意AP、互聯網域名偵測惡意的快速變動網域、互聯網網站偵測釣魚網站、以及使用者信息洩漏這四層防護。透過事前安裝此安全框架，使用者可以在不信任的網路環境下偵測及迴避攻擊者，保護自身不受這些網路威脅的危害而安全的完成連線目標。;The risk of accessing the Internet and wireless networks is increasing. In recent years, cyberattacks on individuals and businesses have become more and more serious. To make matters worse, as work from home (WFH) has become popular due to the threat of COVID-19, cyberattacks have also increased dramatically. Due to WFH, the defense mechanism against cyberattacks is limited. In general, the company has administrator rights to control devices and local networks. However, when the user connects back to the company through a personal device, certain defense methods will not be available. In this case, companies usually can only perform some monitoring. According to survey statistics, companies usually use identity verification, intrusion detection systems, and anti-virus solutions. However, about half of the organizations stated that exploits and malware have evaded their solutions. And almost a third of organizations do not require their remote workers to use authentication methods. In order to solve the above problems, this paper proposes Insulator, a client security framework that protects client users from cyberattacks. The term insulator means to protect users by blocking threats on the Internet. Insulator satisfies the constraints of detecting cyberattacks in untrusted network environments based on user-side functions. In order to provide complete protection, Insulator includes four modules for detecting and defending evil twins, fast-flux domain, phishing and information leakage. Through the above modules, Insulator can detect and defend the most popular cyberattacks.
显示于类别:	[資訊工程研究所] 博碩士論文

文件中的档案:

档案	描述	大小	格式	浏览次数
index.html		0Kb	HTML	41	检视/开启

在NCUIR中所有的数据项都受到原著作权保护.

社群 sharing

数据加载中.....