Security Scanning System with High Usability

在本研究中，我们针对网路安全的相关议题，进行以下三个主题的研究：1.高可用性的安全扫描系统的设计与实作为了提升系统的可用性，我们采用以下的设计准则：（1）为了避免安装与设定的负担，扫描器最好是以网路为基础，且仅需使用网页浏览器即可开始扫描与检视扫描结果。（2）用户界面的设计基于生理负荷的最新研究成果。（3）扫描网站分布在Internet上，避免了网络延迟。为了实现这一点，我们还考虑了扫描系统的便携性。本研究的第一个贡献是建立了上述扫描系统，并通过在真实的环境中的运行实验对其进行了评估。2.分布式拒绝服务攻击的防御方案基于Web的上述系统本身就容易受到分布式拒绝服务（DDoS）攻击，即大量的数据包被发送到 ...更多信息 目标主机来自许多位于不同位置的攻击者主机。本研究的第二个成果是提出了一种新的DDoS攻击防御方案。在该方案中，我们利用攻击数据包欺骗其源地址来隐藏其身份，攻击者发送一个查询目标系统的IP地址在攻击前的特点。该方案是一个拒绝服务的数据包过滤方案，通过检查的源地址与DNS响应的传入数据包。我们实现了该方案的原型系统，并对该方案的吞吐效率进行了评估。3.一种新的Web应用中的推荐式垃圾邮件攻击防御方案Weblog作为一种新的Web应用，近年来得到了广泛的应用。因此，一种新类型的欺诈行为，垃圾邮件，它利用网络日志的一个功能，创建一个反向链接到垃圾URL，旨在诱导无辜的访问者到他/她的网站。本研究成果之三是利用贝叶斯过滤器来过滤垃圾邮件，以开发垃圾邮件拦截系统。我们实现了原型系统，并评估其假阳性/阴性率。少

In this research, we study the following three themes in regard to network security.1.Design and Implementation of Security Scanning System with High UsabilityTo enhance usability, we adopt the following design criteria (1)to avoid the burden of installation and settings, it is desirable the scanner is network based and only web browser is needed for starting scanning and viewing the scanning result. (2)User interface is designed based on the latest study for physiological workload, (3)Scanning web sites are distributed in the Internet to avoid network delay. To attain this, we also consider portability of the scanning system. The first contribution of this research is to establish the above scanning system and to evaluate it through the operational experiment in a real environment.2.Defense Scheme against Distributed Denial of Service AttackWeb based system like the above is inherently vulnerable to the distributed denial of service (DDoS) attack that enormous packets are sent to the … More target host from many attacker hosts which reside in various places. The second result of this research is to propose a new defense scheme against DDoS attack. In the scheme, we utilize the characteristics that the attack packets spoof their source addresses to hide their identity and the attackers send a query of the target system's IP address before attack. The proposed scheme is a DoS packet filtering scheme by checking the source address of the incoming packets with DNS response. We implement the prototype system of the proposed scheme and evaluate the throughput efficiency.3.Referrer Spam Attack Defense Scheme for a New Web ApplicationsRecently, Weblog becomes very popular as a new web application. Accordingly, a new type of fraud, referrer spam, which exploits a feature of weblog that create a backlink to the referrer URL, to aim to induce innocent visitors to his/her web site. The third result of this research is to develop the referrer spam blocking system by utilizing baysian filter which is used for filtering spam mail. We implement the prototype system and evaluate its false positive/negative rate. Less