System information comparison and analysis technology for cyber attacks

Abstract

Although info-communication technologies are improving the quality of life, the damage due to insufficient security polices and various and powerful hacking techniques are increasing, affecting the national infrastructure. In this paper, we describe a technique to integrate digital forensic technology and an attack tree when a cyber attack is performed on any system, and to reveal the method and path of the attack through the storage, comparison, and analysis of a system’s volatile information based on the time difference. The proposed technology is expected to help assess the damage to the institutional systems networks, which will therefore allow solutions to be quickly determined.