Please enable JavaScript.

Coggle requires JavaScript to display documents.

보안 (공격 (모바일 기반 공격 (malware (viruses, trojans, ransomware, spyware),…

- - - - based on SMS and MMS
      - based on communication networks
    - - web browser
      - operating system
    - - electromagnetic waveform
      - juice jacking
    - - viruses
      - trojans
      - ransomware
      - spyware
  - - - IDA PRO
      - OllyDbg
    - - heap overflow
      - stack overflow
    - - c# keyboard event hooking
      - directDraw hooking
      - JMP hooking
      - netfilter hooking
    - - text input
      - command line input
      - untrusted data
  - - - IP spoofing
      - ARP spoofing
      - DNS spoofing
      - Email Spoofing
      - Search engine Spoofing
    - - whaling(high level target phishing)
      - spear phishing attack
      - watering hole attack
      - vishing(voice phishing)
    - - ICMP flood attack(ping flood)
      - Ping of Death(PoD)
      - Smuf Attack(different IP)
      - SYN flood attack
  - - - session fixation
      - session prediction
      - session hijacking attack
      - EAR(execution after redirect)
      - XSRF=CSRF(Cross-Site request forgery)
    - - blind sql injection
      - blind xpath injection
      - code injection
      - command
      - comment injection attack
      - Cross-site Scripting(XSS)
      - foramt string attack
      - full path disclosure
      - function injection
      - php object injection
      - SQL injection
      - server side includes(SSI) injection
      - XPATH injection
- - - - NIST
      - ISO
      - IEC
      - COBIT
      - SNAS
      - CSC
    - - cryptography
      - secure system build
      - secure application developemnt
      - network design
      - data protection
      - cloud secuirty
      - access control
        
        identity management
      - security engineering
    - - training
    - - extrenal
      - internal
    - - audit
      - policy
      - procedure
      - standard
      - guideline
      - compliance
      - enforcement
      - laws and regulations
        
        federal
        
        state
    - - vulnerability scan
      - assets inventory
      - 3d part risk
      - source code scan
        
        blackbox
        
        whitebox
      - data-centric risk assessment
    - - protection
      - detection
      - prevention
      - recovery
      - vulnerability management
      - incident response
        
        breach notification
        
        containment
        
        eradication
        
        forensics
      - active defense
  - - - DRM
      - Antivirus
      - NAC
      - VPN
      - IPS
      - honey pot
      - IDS
        
        reporting and response
        
        anlysis and intrusion detection
        
        data reduction and filtering
        
        raw data collection
      - packet filtering
      - Dual homed gateway
      - single homed gateway
      - screening router
      - firewall
      - DMZ
      - cloud service
    - - Clang TSA
      - BOF Elimination
      - didfail
      - rosecheckers
      - secure coding validation suite
      - air integer model
    - - symmetric-key algorithm
        
        DES
        
        AES
        
        3DES
        
        SEED
        
        HIGHT
        
        ARIA
        
        LEA
      - public-key Cryptography
        
        RSA
        
        ECC