Security Scanning System with High Usability

在本研究中，我们研究了以下三个关于网络安全的主题。高可用性安全扫描系统的设计与实现为了提高可用性，我们采用了以下设计准则：(1)为了避免安装和设置的负担，扫描器最好是基于网络的，只需要web浏览器就可以开始扫描和查看扫描结果。(2)用户界面设计基于生理工作量的最新研究；(3)扫描网站分布在互联网上，避免网络延迟。为了达到这一点，我们还考虑了扫描系统的可移植性。本研究的第一个贡献是建立上述扫描系统，并通过实际环境中的操作实验对其进行评估。针对分布式拒绝服务攻击的防御方案基于web的系统天生就容易受到分布式拒绝服务（DDoS）攻击，大量的数据包从分布在不同地方的许多攻击者主机发送到更多的目标主机。本研究的第二个结果是提出了一种新的DDoS攻击防御方案。在该方案中，我们利用攻击报文欺骗源地址的特点来隐藏其身份，攻击者在攻击前发送对目标系统IP地址的查询。该方案是一种DoS包过滤方案，通过对传入报文的DNS响应进行源地址检查。我们实现了该方案的原型系统，并对其吞吐量效率进行了评估。一种新型Web应用的Referrer Spam攻击防御方案最近，Weblog作为一种新型Web应用变得非常流行。因此，一种新型的欺诈，推荐垃圾邮件，利用博客的一个特性，创建一个反向链接到推荐的URL，目的是诱导无辜的访问者到他/她的网站。本研究的第三个成果是利用贝叶斯过滤器对垃圾邮件进行过滤，开发了推荐人垃圾邮件拦截系统。我们实现了原型系统，并评估了它的假阳性/阴性率。少

In this research, we study the following three themes in regard to network security.1.Design and Implementation of Security Scanning System with High UsabilityTo enhance usability, we adopt the following design criteria (1)to avoid the burden of installation and settings, it is desirable the scanner is network based and only web browser is needed for starting scanning and viewing the scanning result. (2)User interface is designed based on the latest study for physiological workload, (3)Scanning web sites are distributed in the Internet to avoid network delay. To attain this, we also consider portability of the scanning system. The first contribution of this research is to establish the above scanning system and to evaluate it through the operational experiment in a real environment.2.Defense Scheme against Distributed Denial of Service AttackWeb based system like the above is inherently vulnerable to the distributed denial of service (DDoS) attack that enormous packets are sent to the … More target host from many attacker hosts which reside in various places. The second result of this research is to propose a new defense scheme against DDoS attack. In the scheme, we utilize the characteristics that the attack packets spoof their source addresses to hide their identity and the attackers send a query of the target system's IP address before attack. The proposed scheme is a DoS packet filtering scheme by checking the source address of the incoming packets with DNS response. We implement the prototype system of the proposed scheme and evaluate the throughput efficiency.3.Referrer Spam Attack Defense Scheme for a New Web ApplicationsRecently, Weblog becomes very popular as a new web application. Accordingly, a new type of fraud, referrer spam, which exploits a feature of weblog that create a backlink to the referrer URL, to aim to induce innocent visitors to his/her web site. The third result of this research is to develop the referrer spam blocking system by utilizing baysian filter which is used for filtering spam mail. We implement the prototype system and evaluate its false positive/negative rate. Less