VIRTUAL SERVER AND METHOD FOR IDENTIFYING ZOMBIES AND SINKHOLE SERVER AND METHOD FOR MANAGING ZOMBIE INFORMATION INTEGRATELY BASED ON THE VIRTUAL SERVER
摘要
PURPOSE: A virtual server and method for zombie discrimination and a sinkhole server and method for managing zombie information in an integrated way based on the virtual server are provided to utilize the virtual server, thereby discriminating zombie hosts which are abnormally connected to a web server. CONSTITUTION: An authentication process module(220) certifies a host using an automatic access prevention test. The authentication process module supplies a cookie to the certified host. A cookie value verification module(240) verifies a detected cookie value by extracting the cookie value from a web server access request message. A web page access induction module(250) induces access to a web server of the host in a case of cookie value verification success. A zombie discrimination module(260) blocks the access of the host in a case of cookie value verification failure. The zombie discrimination module identifies the host as a zombie when the number of blockings exceeds a critical value.
申请公布号
KR20110119915(A)
申请公布日期
2011.11.03
申请号
KR20100039332
申请日期
2010.04.28
申请人
ELECTRONICS AND TELECOMMUNICATIONS RESEARCH INSTITUTE
发明人
NOH, SANG KYUN;YUN, YOUNG TAE;KIM, DONG SOO;KIM, YO SIK;CHUNG, YOON JUNG;KIM, WON HO;HAN, YU JUNG;LEE, CHEOL WON