Method and Apparatus for Identifying Vulnerability Information Using Keyword Analysis for Banner of Open Port

The present embodiments relate to a method for identifying vulnerability information through a keyword analysis for a banner of an open port and an apparatus thereof. The apparatus can process information of a banner of an open port of a computer system, analyze a CPE dictionary to generate a CPE tr...

Full description

Saved in:
Bibliographic Details
Main Authors KIM, TAE EUN, NA, SA RANG, JANG, DAE IL, JURN, JEE SOO, KIM, HWAN KUK, KO, EUN HYE, LEE, EUN BYUL
Format Patent
LanguageEnglish
Korean
Published 14.05.2018
Subjects
CALCULATING
COMPUTING
COUNTING
ELECTRIC DIGITAL DATA PROCESSING
PHYSICS
Online AccessGet full text

Cover

More Information
Summary:The present embodiments relate to a method for identifying vulnerability information through a keyword analysis for a banner of an open port and an apparatus thereof. The apparatus can process information of a banner of an open port of a computer system, analyze a CPE dictionary to generate a CPE tree, search the banner for keywords at each level of the CPE tree, and translate from the CPE tree into CPEs conforming to a format of a CPE dictionary. Therefore, the CPEs matching the most with information of an operating system or an application program of a specific computer system can be selected among various CPE candidates, and vulnerability information of a CPE type, which can be linked with CVE vulnerability information, can be quickly and easily identified. 본 실시예들은 컴퓨터 시스템의 오픈 포트 배너 정보를 가공하고, CPE 사전을 분석하여 CPE 트리를 생성하고, CPE 트리 각 레벨의 키워드들을 배너에서 검색하여, CPE 트리로부터 CPE 사전의 포맷을 준수하는 CPE들로 변환함으로써, 다양한 CPE 후보들 중에서 특정 컴퓨터 시스템의 운영체제 또는 응용프로그램의 정보와 가장 많이 매칭된 CPE들을 선정할 수 있으며, CVE 취약점 정보와 연동할 수 있는 CPE 형태의 취약점 정보를 신속 용이하게 식별할 수 있는 컴퓨터 시스템 정보 식별 방법 및 장치를 제공한다.
Bibliography:Application Number: KR20170116301