- 學位論文
整合式網路威脅情資分享系統平台之研究與製作
Research and Implementation of Integrated Cyber Threat Intelligence Sharing System Platform
摘要
近年來網路攻擊事件不斷發生，在網際網路上，每天都會發生相當多次的網路攻擊，使得網路安全在資訊的領域之中成為了一個相當重要的主軸，任何的服務和連線都不能遠離網路安全，然而網路攻擊百百種，如何才能在駭客攻擊之前就察覺可能發生的攻擊事件，如何在嚴重的損失造成之前發現正在進行中的攻擊，單靠企業或組織本身所擁有的資訊安全防護是很難達成的，需要利用信任夥伴們所分享的網路威脅情資來進行更好的應對，如何獲取和閱讀網路威脅情資，這對網路安全人員來說是相當重要的一環。 本研究是以ASP.NET的MVC搭建網頁平台，並利用MOTP加強使用者身分驗證，在網頁伺服器之中建立TAXII伺服器，以此為基礎進行網路威脅情資的分享和觀看，使用者們可以透過這個平台免費地獲得網路威脅情資，也可以利用伺服器的功能與其他伺服器的互動，輕鬆地觀看內容相當複雜且多樣的STIX格式之網路威脅情資，不必自己手動建立MySQL資料庫和TAXII伺服器，只需要連上本研究創建之平台即可輕鬆使用，網路威脅情資已經在資訊安全領域中開始佔有一席之地，相信在未來網路威脅情資可以成為對抗駭客們的利器。
並列摘要
In recent years, cyberattacks continue to happen. On the internet, a considerable number of cyberattacks happen every day, making cybersecurity a key element in the field of information. No services and network connections can be apart from cybersecurity. However, there are numerous types of cyberattacks. In this case, how can attacks be detected before hackers launch them and ongoing attacks be discovered before they cause serious damage? These can hardly be achieved simply by relying on the information security defense that enterprises or organizations have in place. They require better responses based on cybersecurity intelligence shared by trusted partners. Therefore, how to obtain and read cyberthreat intelligence is an important question for cybersecurity professionals. In this study, a ASP.NET MVC web platform is built with MOTP for enhanced user identify authentication and a TAXII server built among the web servers. Based on this, cyberthreat intelligence is shared and viewed. Users can get free cyberthreat intelligence through this platform and use the server function to interact with servers and easily view cyberthreat intelligence in the STIX format with complicated and diverse content. They can easily use the platform created in this study simply by connecting to it without manual creation of a STIX database and a TAXII server. Cyberthreat intelligence is beginning to play an important role in the field of cybersecurity and it is believed that it can become a key weapon in the fight against hackers.