CSI/FBI 2003 ?????????

1
??????

• ???
• ???????????
• ?????

2
???????
????
??????
???????
???????
?????? ??
??????????
????
3
CSI/FBI 2003 ?????????

• ????????????,????????????,???????????????????

4
??????? - STRIDE
???? ??
Spoofing (??) ?????? ???????? Fishing????
Tampering (??) ?????????? ????????(????)
Repudiation (??) ???????????? ??????,???????
Information Disclosure (????) ?????????? ?????????????
Denial of Service (????) ?? SYN ?????? ????? ICMP ??????
Elevation of Privilege (????) ?????????????? ???????????
5
????????

• ??????
• ??????????
• ????????????

?
?????
ACL???..
??
????
?????????..
??OS?????????HIDS
??
?????IPSec?NIDS
????
????VPN..
????
????????.
????????,??.
6
??????????? (1)
?,????????????????????????
??????????????????????
????????????
????????????????,??????
7
??????????? (2)
?,??????????????????????
?,????????????
?,???????! ?????????
???????????????????????
8
???????
???????
??????????
???? ??
??????????????,???????????,?????
????????? ??
????????????????????????
9
?????????
?????????
??????
????????
??????
????????
?????????????
10
????????
Transparent firewall
Non-transparent firewall (NAT)
VPN
IDS
IDP
????
11
????????
??????
????
??????
???????????
?????????,??????
??????
12
??????
??????
??????,?????????
?????????????
????
????????
??????????
13
????????
???????????
??????????????
????????????
?????????????
14
??????
????
???????????????
?????????
???????????
??????
??????????????????
15
?????

• ?????????
• ??????
• ??????
• ?????
• ???????????
• ??????????(??????)
• ????????
• ????????
• ??
• ?????????????????????????