earticle

영어

Critical infrastructure is the backbone of our nation's economy and security. Cyber security and Communication works to prevent or minimize disruptions to critical information infrastructure in order to protect the public, the economy, and government services. And Software vulnerabilities can make possibility of a critical threat. There is lots of research being a large scale of software vulnerability. Critical infrastructure's security requirements are to process the large amounts of data in a short time. Taint analysis is becoming major technique in security analysis. In particular, proposed system focuses on tracing a taint analysis. Therefore, we proposed taint analysis method to determine by a single set of instruction and operands for threats detection. We proposed classification of binary level taint analysis that can find two types of threats, are control flow hijack and arbitrary memory write. Our evaluation results show that we can reduce number of instruction check.