{"id":751,"date":"2009-09-30T06:43:22","date_gmt":"2009-09-30T06:43:22","guid":{"rendered":"http:\/\/pchero21.com\/?p=751"},"modified":"2009-09-30T06:43:22","modified_gmt":"2009-09-30T06:43:22","slug":"4-%ec%96%b4%ed%94%8c%eb%a6%ac%ec%bc%80%ec%9d%b4%ec%85%98-%ea%b3%84%ec%b8%b5-%ea%b3%b5%ea%b2%a9%ea%b3%bc-%eb%b0%a9%ec%96%b4","status":"publish","type":"post","link":"http:\/\/pchero21.com\/?p=751","title":{"rendered":"4. \uc5b4\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uacfc \ubc29\uc5b4"},"content":{"rendered":"

 * iptables\ub97c \uc774\uc6a9\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \ubb38\uc790\uc5f4 \ub9e4\uce6d<\/span><\/p>\n

 \ubaa8\ub4e0 IDS\uac00 \uac00\uc9c0\ub294 \uac00\uc7a5 \uc911\uc694\ud55c \uae30\ub2a5 \uc911 \ud558\ub098\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \ub370\uc774\ud130\uc5d0\uc11c \uc545\uc758\uc801\uc778 \ubc14\uc774\ud2b8\ub97c \uc554\uc2dc\ub77c\ub294 \ubc14\uc774\ud2b8 \ub098\uc5f4\uc744 \uac80\uc0c9\ud558\ub294 \uac83\uc774\ub2e4. \uadf8\ub7ec\ub098 \uc77c\ubc18\uc801\uc73c\ub85c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uad6c\uc870\ub294 \ub124\ud2b8\uc6cc\ud06c\ub098 \uc804\uc1a1 \uacc4\uce35 \ud504\ub85c\ud1a0\ucf5c\ubcf4\ub2e4 \ud6e8\uc52c \ub35c \uc5c4\uaca9\ud558\uac8c \uc815\uc758\ub418\uae30 \ub54c\ubb38\uc5d0 \uce68\uc785 \ud0d0\uc9c0 \uc2dc\uc2a4\ud15c\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \ub370\uc774\ud130\ub97c \uc870\uc0ac\ud560 \ub54c \uc735\ud1b5\uc131\uc744 \uac00\uc838\uc57c \ud55c\ub2e4.<\/p>\n

 \ub124\ud2b8\uc6cc\ud06c \ud2b8\ub798\ud53d\uc5d0\uc11c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubd80\ubd84 \uc804\uccb4\uc5d0 \ub300\ud574 \ubb38\uc790\uc5f4 \ub9e4\uce6d\uc744 \uc218\ud589\ud558\ub294 \uac83\uc740 \uc88b\uc740 \ucd9c\ubc1c\uc810\uc774\uba70, iptables \uc758 \ubb38\uc790\uc5f4 \ub9e4\uce6d \ud655\uc7a5\uc774 \uc774\ub97c \uc81c\uacf5\ud55c\ub2e4.<\/p>\n

 – \ubb38\uc790\uc5f4 \ub9e4\uce6d \ud655\uc7a5\uc758 \ub3d9\uc791
 \ub2e4\uc74c\uc758 \uaddc\uce59\uc740 TCP \ud3ec\ud2b8 5001\uc5d0\uc11c \ub300\uae30 \uc911\uc778 Netcat \uc11c\ubc84\ub85c \ubb38\uc790\uc5f4 “tester”\uac00 \uc804\uc1a1\ub420 \ub54c syslog \uba54\uc2dc\uc9c0\ub97c \uc0dd\uc131\ud558\uae30 \uc704\ud574 iptables LOG \ud0c0\uac9f\uc744 \uc0ac\uc6a9\ud55c\ub2e4<\/p>\n

 #iptables -I INPUT 1 -p tcp –dport 5001 -m string –string “tester” –algo bm -m state –state ESTABLISHED -j LOG –log-prefix “tester”<\/p>\n

 # iptables -I INPUT 2 -p tcp –dport 5001 -j ACCEPT<\/p><\/blockquote>\n

  \uba85\ub839\uc5b4\uc758 –algo bm \uc778\uc790\uc5d0 \uc8fc\ubaa9\ud558\uc790. \ubb38\uc790\uc5f4 \ub9e4\uce6d \ud655\uc7a5\uc740 \ub9ac\ub205\uc2a4 \ucee4\ub110\uc758 \ud14d\uc2a4\ud2b8 \uac80\uc0c9 \uae30\ub2a5 \uc704\uc5d0\uc11c \uad6c\ud604\ub41c\ub2e4. \ub9ac\ub205\uc2a4 \ucee4\ub110\uc758 \ud14d\uc2a4\ud2b8 \uac80\uc0c9 \uae30\ub2a5\uc740 \ubcf4\uc774\uc5b4-\ubb34\uc5b4 \ubb38\uc790\uc5f4 \uac80\uc0c9 \uc54c\uace0\ub9ac\uc998(\uc704\uc758 bm)\uacfc \ud06c\ub204\uc2a4-\ubaa8\ub9ac\uc2a4-\ud504\ub7ab \ubb38\uc790\uc5f4 \uac80\uc0c9 \uc54c\uace0\ub9ac\uc998(kmp) \ub4f1\uacfc \uac19\uc774 \ub2e4\uc591\ud55c \uc54c\uace0\ub9ac\uc998\uc744 \uc9c0\uc6d0\ud55c\ub2e4.<\/p>\n

 * \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9 \uc815\uc758<\/span>
 
 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158, \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc0ac\uc6a9\uc790, \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uad00\ub9ac\ud558\ub294 \ub370\uc774\ud130\ub97c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc18c\uc720\uc790\ub098 \uad00\ub9ac\uc790\uac00 \ud5c8\uc6a9\ud558\ub294 \uac83 \uc774\uc678\uc758 \ubaa9\uc801\uc73c\ub85c \uc804\ubcf5\ud558\ub824\ub294 \uc2dc\ub3c4\ub85c \uc815\uc758\ud55c\ub2e4.<\/p>\n

 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc740 \ub2e4\uc74c\uc758 \uc138 \uac00\uc9c0\ub85c \ubd84\ub958\ud560 \uc218 \uc788\ub2e4.<\/p>\n

 — \ud504\ub85c\uadf8\ub798\ubc0d \ubc84\uadf8\uc5d0 \ub300\ud55c \uacf5\uaca9 : \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uac1c\ubc1c\uc740 \ubcf5\uc7a1\ud55c \uacfc\uc815\uc774\uba70 \ud504\ub85c\uadf8\ub798\ubc0d \uc624\ub958\ub294 \ubc18\ub4dc\uc2dc \uc874\uc7ac\ud55c\ub2e4. \uc5b4\ub5a4 \uacbd\uc6b0\uc5d0\ub294 \uc774\ub7f0 \ubc84\uadf8\uac00 \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574 \uc6d0\uaca9\uc73c\ub85c \uc811\uadfc \uac00\ub2a5\ud55c \uc2ec\uac01\ud55c \ucde8\uc57d\uc810\uc744 \uc720\ubc1c\ud560 \uc218 \uc788\ub2e4. \uc88b\uc740 \uc608\ub85c \uc548\uc804\ud558\uc9c0 \uc54a\uc740 C \ub77c\uc774\ube0c\ub7ec\ub9ac \ud568\uc218\uc758 \uc0ac\uc6a9\uc73c\ub85c\ubd80\ud130 \uc57c\uae30\ub418\ub294 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0 \ucde8\uc57d\uc810, \ubd80\uc801\uc808\ud55c \uc9c8\uc758\ub97c \uc81c\ub300\ub85c \uc81c\uac70\ud558\uc9c0 \uc54a\uace0 \ud6c4\ub2e8 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub85c \ub118\uae30\uac70\ub098(SQL \uc778\uc81d\uc158 \uacf5\uaca9\uc73c\ub85c \uc774\uc5b4\uc9c8 \uc218 \uc788\ub2e4), \uc0ac\uc6a9\uc790\uac00 \uc785\ub825\ud55c \ud544\ud130\ub9c1\ub418\uc9c0 \uc54a\uc740 \ub0b4\uc6a9\uc744 \uc0ac\uc774\ud2b8\uc5d0 \uc138\uc7ac\ud558\ub294(\ud06c\ub85c\uc2a4 \uc0ac\uc774\ud2b8 \uc2a4\ud06c\ub9bd\ud305\uc774\ub098 XSS \uacf5\uaca9\uc744 \uc57c\uae30\ud560 \uc218 \uc788\ub2e4) \uc6f9\uc11c\ubc84\uc640 \uac19\uc774 \uc6f9 \uc911\uc2ec \ucde8\uc57d\uc810\uc774 \uc788\ub2e4.<\/p>\n

 — \uc2e0\ub8b0 \uad00\uacc4\uc5d0 \ub300\ud55c \uacf5\uaca9 : \uc5b4\ub5a4 \uacf5\uaca9\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ud504\ub85c\uadf8\ub798\ubc0d \ubc84\uadf8 \ub300\uc2e0 \uc2e0\ub8b0 \uad00\uacc4\ub97c \uacf5\uaca9\ud55c\ub2e4. \uc774\ub7ec\ud55c \uacf5\uaca9\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uadf8 \uc790\uccb4\uc640\uc758 \uc5f0\ub3d9\ub9cc \uace0\ub824\ud558\uba74 \uc644\uc804\ud558\uac8c \uc815\ub2f9\ud55c \uac83\ucc98\ub7fc \ubcf4\uc778\ub2e4. \ud558\uc9c0\ub9cc \uacf5\uaca9\uc740 \ud574\ub2f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uc0ac\uc6a9\uc790\ub4e4\uc774 \uac00\uc9c0\ub294 \uc2e0\ub8b0\ub97c \ub300\uc0c1\uc73c\ub85c \uc0bc\ub294\ub2e4. \ud53c\uc2f1 \uacf5\uaca9\uc774 \ub300\ud45c\uc801\uc774\ub2e4. \ud53c\uc2f1\uc758 \ubaa9\ud45c\ub294 \uc6f9 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774\ub098 \uba54\uc77c \uc11c\ubc84\uac00 \uc544\ub2c8\ub77c \ud53c\uc2f1 \uc6f9\uc0ac\uc774\ud2b8\ub098 \uba54\uc77c \uba54\uc2dc\uc9c0\ub97c \ud574\uc11d\ud558\ub294 \uc0ac\ub78c\uc774\ub2e4.<\/p>\n

 — \uc790\uc6d0 \uc18c\uc9c4 : \ub124\ud2b8\uc6cc\ud06c\ub098 \uc804\uc1a1 \uacc4\uce35 DoS \uacf5\uaca9\uacfc \uac19\uc774 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\ub3c4 \ub54c\ub54c\ub85c \ub2e4\ub7c9\uc758 \ub370\uc774\ud130 \uc785\ub825\uc744 \ubc1b\uc744 \uc218 \uc788\ub2e4. \uc774\ub7ec\ud55c \uacf5\uaca9\uc740 \ubaa8\ub4e0 \uc0ac\uc6a9\uc790\uac00 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\uac8c \ud55c\ub2e4.<\/p>\n

 * \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uc545\uc6a9<\/span><\/p>\n

 \uc77c\ubc18\uc801\uc778 \ub124\ud2b8\uc6cc\ud06c\uc640 \uc804\uc1a1 \uacc4\uce35 \ud504\ub85c\ud1a0\ucf5c\uc758 \uad6c\ud604\uc774 RFC\uc5d0 \uc815\uc758\ub41c \uc0ac\ud56d\uc744 \uac70\uc758 \ub530\ub974\ub294 \ubc18\uba74 \ud2b9\uc815 CGI \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc6f9\uc11c\ubc84\ub97c \ud1b5\ud574 \uc0ac\uc6a9\uc790 \uc785\ub825\uc744 \ucc98\ub9ac\ud558\ub294 \ubc29\ubc95\uc744 \uc81c\uc5b4\ud558\uac70\ub098 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774 \uc790\ub3d9 \uacbd\uacc4 \uac80\uc0ac\ub098 \uba54\ubaa8\ub9ac \uad00\ub9ac\ub97c \uc218\ud589\ud558\uc9c0 \uc54a\ub294 \ud504\ub85c\uadf8\ub798\ubc0d \uc5b8\uc5b4(C \ub4f1)\ub85c \uc791\uc131\ub410\ub294\uc9c0 \uc81c\uc5b4\ud558\ub294 \ud45c\uc900\uc740 \uc5c6\ub2e4.<\/p>\n

 – \uc2a4\ub178\ud2b8 \uc11c\uba85
 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc744 \uc774\ud574\ud558\ub294 \uac00\uc7a5 \uc88b\uc740 \ubc29\ubc95\uc758 \ud558\ub098\ub294 \uc2a4\ub178\ud2b8 \uc11c\uba85 \uc9d1\ud569\uc744 \uc0b4\ud3b4\ubcf4\ub294 \uac83\uc774\ub2e4. \ucd5c\uadfc\uc758 \uc2a4\ub178\ud2b8 \uc11c\uba85\uc740 \uc2a4\ub178\ud2b8 \uc18c\uc2a4 \ucf54\ub4dc\uc640 \ud568\uaed8 \ubc30\ud3ec\ub418\uc9c0 \uc54a\uc9c0\ub9cc \ube14\ub9ac\ub529 \uc2a4\ub178\ud2b8(Bleeding Snort) \ud504\ub85c\uc81d\ud2b8\uc5d0\uc11c \ucd5c\uc2e0 \uacf5\uaca9\uc5d0 \ub300\ud55c \uc11c\uba85\uc744 \uc2a4\ub178\ud2b8 \ud615\uc2dd\uc73c\ub85c \uc0dd\uc131\ud558\uace0 \uc788\ub2e4(http:\/\/www.bleedingsnort.com \ucc38\uc870)<\/p>\n

 – \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0 \uacf5\uaca9
 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0 \uacf5\uaca9\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc18c\uc2a4 \ucf54\ub4dc\uc5d0\uc11c \ubc84\ud37c\uc5d0 \ubcf5\uc0ac\ub418\ub294 \ub370\uc774\ud130\uc758 \uc591\uc744 \ucda9\ub2f9\ud558\uae30\uc5d0 \ubc84\ud37c\uc758 \ud06c\uae30\uac00 \ucda9\ubd84\ud558\uc9c0 \uc54a\uc740 \ubd80\ubd84\uc5d0\uc11c \ubc1c\uc0dd\ud558\ub294 \ud504\ub85c\uadf8\ub798\ubc0d \uc624\ub958\ub97c \uc774\uc6a9\ud558\ub294 \uacf5\uaca9\uc774\ub2e4. \uadf8\ub7ec\ubbc0\ub85c \uc624\ubc84\ud50c\ub85c\uc6b0\ub77c\ub294 \uc6a9\uc5b4\ub294 \uc778\uc811\ud55c \uba54\ubaa8\ub9ac \uc704\uce58\uac00 \ub36e\uc5b4\uc4f0\uc77c \ub54c \uc0ac\uc6a9\ub41c\ub2e4. \uc2a4\ud0dd \uae30\ubc18 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0\uc758 \uacbd\uc6b0 \uc131\uacf5\uc801\uc778 \uacf5\uaca9\uc740 \ud568\uc218\uc758 \ubcf5\uadc0 \uc8fc\uc18c(\uc2a4\ud0dd\uc5d0 \uc874\uc7ac)\uac00 \uacf5\uaca9\uc790\uc758 \ucf54\ub4dc\ub97c \uac00\ub9ac\ud0a4\uac8c \ub36e\uc5b4 \uc4f4\ub2e4. \uc774\ub97c \ud1b5\ud574 \uacf5\uaca9\uc790\ub294 \uadf8\ub54c\ubd80\ud130 \ucb49 \ud504\ub85c\uc138\uc2a4\uc758 \uc2e4\ud589\uc744 \uc81c\uc5b4\ud560 \uc218 \uc788\ub2e4. \ub610 \ub2e4\ub978 \ubd84\ub958\uc758 \ubc84\ud37c \uc624\ubc84\ud50c\ub85c\uc6b0 \uacf5\uaca9\uc740 \ud799\uc73c\ub85c\ubd80\ud130 \ub3d9\uc801\uc73c\ub85c \ud560\ub2f9\ub418\ub294 \uba54\ubaa8\ub9ac \uc601\uc5ed\uc5d0 \uc801\uc6a9\ub41c\ub2e4.<\/p>\n

 – SQL \uc778\uc81d\uc158 \uacf5\uaca9
 SQL \uc778\uc81d\uc158 \uacf5\uaca9\uc740 \uc0ac\uc6a9\uc790 \uc785\ub825\uc774 \ub370\uc774\ud130\ubca0\uc774\uc2a4 \uc9c8\uc758\uc5d0 \ud3ec\ud568\ub418\uae30 \uc804\uc5d0 \uc774\uac83\uc774 \uc62c\ubc14\ub978\uc9c0 \ud655\uc778\ud558\uac70\ub098 \ud544\ud130\ub9c1\ud558\uc9c0 \uc54a\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uacf5\uaca9\ud55c\ub2e4. \uc601\uc545\ud55c \uacf5\uaca9\uc790\ub294 \uc0c8\ub85c\uc6b4 \uc9c8\uc758\ub97c \uc0dd\uc131\ud574\uc11c \uc7a0\uc7ac\uc801\uc73c\ub85c \ub370\uc774\ud130\ubca0\uc774\uc2a4\uc758 \uc815\ubcf4\ub97c \uc218\uc815\ud558\uac70\ub098 \ucd94\ucd9c\ud558\uae30 \uc704\ud574 SQL \uc5b8\uc5b4\uc758 \ucda9\ucca9(nesting) \uae30\ub2a5\uc744 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4. SQL \uc778\uc81d\uc158 \uacf5\uaca9\uc758 \uc77c\ubc18\uc801\uc778 \ubaa9\ud45c\ub294 \uc6f9\uc11c\ubc84\ub97c \ud1b5\ud574 \uc2e4\ud589\ub418\uba70, \ud6c4\ub2e8 \ub370\uc774\ud130\ubca0\uc774\uc2a4\ub85c\uc758 \uc778\ud130\ud398\uc774\uc2a4\ub97c \uc81c\uacf5\ud558\ub294 CGI \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc774\ub2e4.<\/p>\n

 – \uadf8\ub808\uc774 \ub9e4\ud130 \ud574\ud0b9(Gray Metter Hacking)
 \uc624\ub298\ub0a0 \uc778\ud130\ub137\uc5d0\uc11c \uac00\uc7a5 \ubb38\uc81c\uac00 \ub418\ub294 \uacf5\uaca9\uc758 \uc77c\ubd80\ub294 \uc9c1\uc811 \uc0ac\ub78c\ub4e4\uc774 \uc0ac\uc6a9\ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ud1b5\ud574\uc11c \uc0ac\ub78c\ub4e4\uc744 \ubaa9\ud45c\ub85c \ud558\ub294 \uacf5\uaca9\uc774\ub2e4. \uac15\ub825\ud55c \uc2dc\uc2a4\ud15c, \uc560\ud50c\ub9ac\ucf00\uc774\uc158, \uc554\ud638\ud654 \uae30\ubc95\uc758 \ucde8\uc57d\uc810\uc744 \ucc3e\ub294 \uac83\ubcf4\ub2e4 \uc0ac\ub78c\uc744 \uacf5\uaca9\ud558\ub294 \uac83\uc774 \ub54c\ub85c\ub294 \uc27d\ub2e4.<\/p>\n

 — \ud53c\uc2f1(Phishing)
 \ud53c\uc2f1(Phishing)\uc740 \uc0ac\uc6a9\uc790\uac00 \uc740\ud589\uacfc \uac19\uc740 \uc628\ub77c\uc778 \uacc4\uc88c\uc5d0 \ub300\ud55c \uc778\uc99d \uc815\ubcf4\ub97c \uc2e0\ub8b0\ud560 \uc218 \uc5c6\ub294 \uacf3\uc5d0 \uc81c\uacf5\ud558\uac8c \uc18d\uc774\ub294 \uacf5\uaca9\uc774\ub2e4. \uc774 \uacf5\uaca9\uc740 \uc8fc\ub85c \uacf5\uc2dd\uc801\uc778 \uac83\ucc98\ub7fc \ubcf4\uc774\ub294 \uba54\uc77c\uc744 \uc0ac\uc6a9\uc790\uac8c \uc804\uc1a1\ud574\uc11c \uc774\ub904\uc9c0\ub294\ub370, \uba54\uc77c\uc758 \ub0b4\uc6a9\uc740 \uc0ac\uc6a9\uc790\uac00 \uc628\ub77c\uc778 \uacc4\uc88c\uc5d0 \uc811\uc18d\ud574\uc11c \ubcf4\uc548\uc0c1 “\uae34\uae09\ud55c” \uc791\uc5c5(\uc608\ub97c \ub4e4\uc5b4 \uc554\ud638 \ubcc0\uacbd)\uc744 \uc218\ud589\ud574\uc57c \ud55c\ub2e4\ub294 \uac83\uc774\ub2e4. \uc815\uc0c1\uc801\uc778 \uac83\ucc98\ub7fc \ubcf4\uc774\ub294 \uc6f9 \ub9c1\ud06c\uac00 \uc81c\uacf5\ub418\uc9c0\ub9cc \uc774\ub294 \uc6d0\ub798\uc758 \uc6f9\uc0ac\uc774\ud2b8\ub97c \ube44\uc2b7\ud558\uac8c \ud749\ub0b4\ub0b8 \uacf5\uaca9\uc790 \uc81c\uc5b4\ud558\uc758 \uc6f9\uc0ac\uc774\ud2b8\ub85c \uc0ac\uc6a9\uc790\ub97c \uc720\ub3c4\ud558\ub294 \uad50\ubb18\ud55c \ub9c1\ud06c\ub2e4. \uc77c\ub2e8 \ud53c\uc2f1 \uacf5\uaca9\uc744 \ub2f9\ud558\ub294 \uc0ac\uc6a9\uc790\uac00 \uc0ac\uc774\ud2b8\uc5d0 \ubc29\ubb38\ud574\uc11c \uc790\uc2e0\uc758 \uacc4\uc815 \uc815\ubcf4\ub97c \uc785\ub825\ud558\ub294 \uacf5\uaca9\uc790\ub294 \uc7ac\ube68\ub9ac \uacc4\uc815 \uc815\ubcf4\ub97c \uac00\ub85c\ucc48\ub2e4.<\/p>\n

 — \ubc31\ub3c4\uc5b4\uc640 \ud0a4\ubcf4\ub4dc \uc785\ub825 \ub85c\uae45
 \ubc31\ub3c4\uc5b4(backdoor)\ub780 \uacf5\uaca9\uc790\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc788\uc9c0\ub9cc \uc815\ub2f9\ud55c \uc0ac\uc6a9\uc790\ub294 \uc0ac\uc6a9\ud560 \uc218 \uc5c6\ub294 \uae30\ub2a5\uc744 \ud3ec\ud568\ud558\ub294 \uc2e4\ud589 \ud30c\uc77c\uc774\ub2e4.  \uc608\ub97c \ub4e4\uc5b4 Sdbot \ud2b8\ub85c\uc774\ubaa9\ub9c8\ub294 \uacf5\uaca9\uc790\uc758 \uba85\ub839\uc5b4 \uc804\uc1a1\uc744 \uae30\uc790\ub9ac\ub294 IRC \ucc44\ub110\ub85c \uc5f0\uacb0\ud558\uae30 \uc704\ud574 \ud2b9\uc815 IRC \ud074\ub77c\uc774\uc5b8\ud2b8\ub97c \uc0ac\uc6a9\ud574\uc11c \ubc31\ub3c4\uc5b4\ub97c \uc5f0\ub2e4. \ud558\uc9c0\ub9cc \ubc31\ub3c4\uc5b4\ub294 \uc5b4\ub5a4 \ub3d9\uc791\ub3c4 \ucde8\ud558\uae30 \uc804\uc5d0 \uacf5\uaca9\uc790\uac00 \uc720\ud6a8\ud55c \uc554\ud638\ub97c \uc785\ub825\ud558\uac8c \ub9cc\ub4e0 \ud504\ub85c\uadf8\ub7a8\uc774\ub2e4. \uc774\ub294 \ubc31\ub3c4\uc5b4 \ud1b5\uc2e0\uc758 \uc778\uc99d \uc218\uc900\uc744 \ub192\uc5ec\uc8fc\uba70, \uc2dc\uc2a4\ud15c\uc5d0 \uc131\uacf5\uc801\uc73c\ub85c \uce68\ud22c\ud55c \uacf5\uaca9\uc790\ub9cc\uc774 \uadf8 \uc2dc\uc2a4\ud15c\uc744 \uc81c\uc5b4\ud560 \uc218 \uc788\uac8c \ud574\uc900\ub2e4.<\/p>\n

 * \uc554\ud638\ud638\uc640 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc778\ucf54\ub529<\/span><\/p>\n

 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc744 \ud0d0\uc9c0\ud558\uae30 \uc5b4\ub835\uac8c \ub9cc\ub4dc\ub294 \uc694\uc18c\ub85c \uc554\ud638\ud654\uc640 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc778\ucf54\ub529 \uae30\ubc95\uc758 \ub450 \uac00\uc9c0\ub97c \uacf1\uc744 \uc218 \uc788\ub2e4. \uc554\ud638\ud654\ub294 \uc554\ud638 \ud0a4\uac00 \uc5c6\ub294 \ud55c \uc554\ud638\ub97c \ud3c9\ubb38\ud654\ud558\ub294 \uac83\uc774 \ud604\uc2e4\uc801\uc73c\ub85c \ubd88\uac00\ub2a5\ud558\uac8c \uc124\uacc4\ub418\uba70, \ubcf4\ud1b5\uc758 IDS, IPS \ubc29\ud654\ubcbd \uc7a5\uce58\ub294 \uc774\ub7ec\ud55c \ud0a4\uc5d0 \uc811\uadfc\ud560 \uc218 \uc5c6\uae30 \ub54c\ubb38\uc5d0 \ud2b9\ud788 \ubb38\uc81c\uac00 \ub41c\ub2e4.<\/p>\n

 \uadf8\ub7ec\ub098 \uc77c\ubd80 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc758 \uacbd\uc6b0\uc5d0\ub294 \uc131\uacf5\uc744 \uc704\ud574 \uc554\ud638\ud654\uac00 \ud544\uc694\uac00 \uc5c6\ub2e4. \uc608\ub97c \ub4e4\uc5b4 SSH \uc11c\ubc84\uc5d0 \ub300\ud55c \ud2b9\uc815 \uacf5\uaca9\uc744 \ud0d0\uc9c0\ud558\ub294 \uc2a4\ub178\ud2b8 \uc11c\uba85(“\ud3c9\ubb38 \uc0c1\ud0dc”\uc5d0\uc11c \ub3d9\uc791\ud574\uc57c \ud568)\uc774 \uc788\ub2e4. \uc774\ub7ec\ud55c \uc11c\uba85\uc774 \uc0ac\uc6a9\ub418\uba74 \uc2a4\ub178\ud2b8\ub294 SSH \uc554\ud638\ud654 \ud0a4\uc5d0 \uc811\uadfc\ud558\uc9c0 \uc54a\uace0 \ud398\uc774\ub85c\ub4dc \ub370\uc774\ud130\ub97c \uac80\uc0c9\ud55c\ub2e4. \uc774\ub7ec\ud55c \uc11c\uba85\uc758 \uc874\uc7ac\ub294 \uc554\ud638\ud654\ub9cc\uc73c\ub85c\ub294 \uc644\ubcbd\ud55c \ubc29\uc5b4\ub97c \ud560 \uc218 \uc5c6\ub2e4\ub294 \uac83\uc744 \uc758\ubbf8\ud558\uba70, \ub54c\ub54c\ub85c \uacf5\uaca9\uc790\ub294 \ud1b5\uc0c1\uc801\uc73c\ub85c \uc694\uad6c\ub418\ub294 \uc554\ud638\ud654 \uacc4\uce35\uc774 \uc5b4\ub5a4 \ucc28\uc774\ub3c4 \ub9cc\ub4e4\uc5b4\ub0b4\uc9c0 \ubabb\ud558\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ucde8\uc57d\uc810\uc744 \uacf5\uaca9\ud560 \uc218 \uc788\ub2e4. \uc989, \uc554\ud638\ud654\ub418\uc9c0 \uc54a\uc740 \uc218\ub2e8\uc744 \ud1b5\ud574 \uc811\uadfc \uac00\ub2a5\ud55c \ud568\uc218 \ub0b4\ubd80\uc5d0 \ucde8\uc57d\uc810\uc774 \uc874\uc7ac\ud560 \uc218\ub3c4 \uc788\ub2e4.<\/p>\n

 \uc778\ucf54\ub529 \uae30\uc220 \uc5ed\uc2dc IDS\uac00 \ub2e4\ub8e8\uae30 \uc5b4\ub824\uc6b8 \uc218 \uc788\ub2e4. \uc608\ub97c \ub4e4\uc5b4 \ubcf4\ud1b5 \ub290\ub9b0 \ub124\ud2b8\uc6cc\ud06c\ub85c \uc555\ucd95\ud558\uc9c0 \uc54a\uc740 \ub370\uc774\ud130\ub97c \uc804\uc1a1\ud558\ub294 \uac83\ubcf4\ub2e4 \ube60\ub978 CPU\ub85c \ub370\uc774\ud130\ub97c \uc555\ucd95\ud558\uac70\ub098 \uc555\ucd95 \ud574\uc81c\ud558\ub294 \uac83\uc774 \ube60\ub974\uae30 \ub54c\ubb38\uc5d0 \ub9ce\uc740 \uc6f9 \ube0c\ub77c\uc6b0\uc800\uac00 \ub124\ud2b8\uc6cc\ud06c\ub97c \ud1b5\ud574 \uc804\uc1a1\ub418\ub294 \ub370\uc774\ud130\uc758 \ud06c\uae30\ub97c \uc904\uc774\uae30 \uc704\ud574 gzip \uc778\ucf54\ub529\uc744 \uc9c0\uc6d0\ud55c\ub2e4. \uacf5\uaca9\uc790\uac00 \uc57d\uac04\uc758 \ubb34\uc791\uc704 \ub370\uc774\ud130\ub97c \uc11e\uc740 \ud6c4 gzip\uc73c\ub85c \uc555\ucd95\ud558\uba74 IDS\ub294 \uacf5\uaca9\uc744 \ud0d0\uc9c0\ud558\uae30 \uc704\ud574 \uc774 \ub370\uc774\ud130\uac00 \ub124\ud2b8\uc6cc\ud06c\ub85c \uc804\uc1a1\ub420 \ub54c \ud574\ub2f9 \ub370\uc774\ud130\uc758 \uc555\ucd95\uc744 \ud574\uc81c\ud574\uc57c \ud55c\ub2e4. \ubb34\uc791\uc704 \ub370\uc774\ud130\ub294 \uc555\ucd95\ub41c \uacf5\uaca9\uc774 \ub9e4\ubc88 \ub2ec\ub77c \ubcf4\uc774\uac8c \ud55c\ub2e4. \uc774\ub7ec\ud55c \ubb34\uc791\uc704\ud654\ub97c \uac70\uce58\uc9c0 \uc54a\uc73c\uba74 IDS\ub294 \uacf5\uaca9\uc744 \uc2dd\ubcc4\ud558\uae30 \uc704\ud574 \uc555\ucd95 \ubb38\uc790\uc5f4 \uc790\uccb4\ub97c \uac80\uc0c9\ud560 \uc218 \uc788\ub2e4. \ubd84\uc8fc\ud55c \ub124\ud2b8\uc6cc\ud06c\uc5d0\ub294 \uc545\uc758\uc801\uc774\uc9c0 \uc54a\uc740 \ub300\uc6a9\ub7c9 \uc555\ucd95 \ud30c\uc77c\uc744 \ub2e4\uc6b4\ub85c\ub4dc \ud558\ub294 \uc6f9 \uc138\uc158\uc774 \ub9e4\uc6b0 \ub9ce\uae30 \ub54c\ubb38\uc5d0 \ubaa8\ub4e0 \uc6f9 \uc138\uc158\uc744 \uc2dc\uc2dc\uac04\uc73c\ub85c \uc555\ucd95 \ud574\uc81c\ud558\ub294 \uac83\uc740 \uacc4\uc0b0\uc0c1 \ube44\ud604\uc2e4\uc801\uc774\ub2e4.<\/p>\n

 – IDS\uac00 \ubaa8\ub4e0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc778\ucf54\ub529\uc744 \ub514\ucf54\ub529\ud560 \uc218 \uc5c6\ub294 \uac83\uc740 \uc544\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4 \uc6f9 \uc138\uc158\uc5d0\uc11c URL \uc778\ucf54\ub529\ub41c \ub370\uc774\ud130\ub294 \uc2a4\ub178\ud2b8 \uc11c\uba85 \uc5b8\uc5b4\uc758 uricontent \ud0a4\uc6cc\ub4dc\ub97c \uc774\uc6a9\ud574\uc11c \uc2a4\ub178\ud2b8 HTTP \uc804\ucc98\ub9ac\uae30\uc5d0 \uc758\ud574 \uc2e4\uc2dc\uac04\uc73c\ub85c \ub514\ucf54\ub529\ub41c\ub2e4. \uc774\ub294 URL \uc778\ucf54\ub529\uc774 16\uc9c4\uc218 \ucf54\ub4dc\uc640 % \uae30\ud638\ub97c \uc0ac\uc6a9\ud558\ub294 \ub2e8\uc21c\ud55c \uce58\ud658 \uc5f0\uc0b0\uc744 \ud1b5\ud574 \uc218\ud589\ub418\uae30 \ub54c\ubb38\uc5d0 \uac00\ub2a5\ud558\ub2e4. \uc608\ub97c \ub4e4\uc5b4 A\ub294 %41\uc774 \ub418\uba70, \uc774\ub294 \ub3d9\uc77c\ud55c \ubc29\uc2dd\uc73c\ub85c \uc27d\uac8c \ubcf5\uc6d0\ud560 \uc218 \uc788\ub2e4. \uc774\ub7ec\ud55c \uc778\ucf54\ub529 \uae30\ubc95\uc740 \ub9ce\uc740 \uacc4\uc0b0\uc744 \ud544\uc694\ub85c \ud558\uc9c0 \uc54a\ub294\ub2e4.<\/p><\/blockquote>\n

 * \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uc751\ub2f5<\/span><\/p>\n

 \uae30\uc220\uc801\uc73c\ub85c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc5d0 \ub300\ud55c \uc21c\uc218\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uc751\ub2f5\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35\uc5d0 \uc874\uc7ac\ud558\ub294 \uad6c\uc131\uc18c\ub9cc\uc744 \ud3ec\ud568\ud574\uc57c \ud55c\ub2e4. \uc608\ub97c \ub4e4\uc5b4 \uc0ac\uc6a9\uc790\uac00 \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \uc545\uc6a9\ud558\uace0 \uc788\ub2e4\uba74 \ub2e8\uc21c\ud788 \ud574\ub2f9 \uacc4\uc815\uc744 \ube44\ud65c\uc131\ud574\uc57c \ub418\uba70, \uacf5\uaca9\uc790\uac00 \uc6f9\uc11c\ubc84\uc5d0\uc11c \uc2e4\ud589\ub418\ub294 CGI \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc744 \ud1b5\ud574 SQL \uc778\uc81d\uc158\uc744 \uc2dc\ub3c4\ud55c\ub2e4\uba74 \uc9c8\uc758\ub97c \ubb34\uc2dc\ud558\uace0 \ud074\ub77c\uc774\uc5b8\ud2b8\ub85c HTTP \uc624\ub958 \ucf54\ub4dc\ub97c \ubc18\ud658\ud574\uc57c \ud55c\ub2e4. \uc774\ub7ec\ud55c \uc751\ub2f5\uc740 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uc544\ub798\uc5d0 \uc874\uc7ac\ud558\ub294 \ud328\ud0b7 \ud5e4\ub354 \uc815\ubcf4\uc758 \ubcc0\uacbd\uc744 \ud544\uc694\ub85c \ud558\uc9c0 \uc54a\ub294\ub2e4.<\/p>\n

 \uadf8\ub7ec\ub098 \uc5c4\uaca9\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uc751\ub2f5\uc740 \ubc29\ud654\ubcbd\uacfc \ub124\ud2b8\uc6cc\ud06c \uce68\uc785 \ubc29\uc9c0 \uc2dc\uc2a4\ud15c\uc5d0 \uc801\ud569\ud558\uc9c0 \uc54a\ub2e4. \uc774\ub294 \ubc29\ud654\ubcbd\uacfc \ub124\ud2b8\uc6cc\ud06c \uce68\uc785 \ubc29\uc9c0 \uc2dc\uc2a4\ud15c\uc774 \ubcf4\ud1b5 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uc790\uccb4\uc640 \uae34\ubc00\ud788 \ud1b5\ud569\ub3fc \uc788\uc9c0 \uc54a\uae30 \ub54c\ubb38\uc774\ub2e4. \ub354\uc6b1\uc774(\uc591\ubc29\ud5a5 \ud1b5\uc2e0\uc744 \ud544\uc694\ub85c \ud558\ub294) TCP \uc138\uc158\uc0c1\uc5d0\uc11c \ud2b9\uc815 IP \uc8fc\uc18c\ub85c\ubd80\ud130 \ub9e4\uc6b0 \uc545\uc758\uc801\uc778 \uacf5\uaca9\uc774 \ubc1c\uacac\ub410\ub2e4\uba74 \uadf8\ub54c\ubd80\ud130\ub294 \uacf5\uaca9\uc790 IP \uc8fc\uc18c\ub85c\ubd80\ud130\uc758 \ubaa8\ub4e0 \ud1b5\uc2e0\uc744 \ucc28\ub2e8\ud558\ub294 \uac83\uc774 \uc880 \ub354 \uc720\uc6a9\ud560 \uc218 \uc788\ub2e4. \uc774\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \uacf5\uaca9\uc5d0 \ub300\ud55c \ub124\ud2b8\uc6cc\ud06c \uacc4\uce35 \uc751\ub2f5\uc774\ub2e4.<\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

 * iptables\ub97c \uc774\uc6a9\ud55c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \ubb38\uc790\uc5f4 \ub9e4\uce6d  \ubaa8\ub4e0 IDS\uac00 \uac00\uc9c0\ub294 \uac00\uc7a5 \uc911\uc694\ud55c \uae30\ub2a5 \uc911 \ud558\ub098\ub294 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \uacc4\uce35 \ub370\uc774\ud130\uc5d0\uc11c \uc545\uc758\uc801\uc778 \ubc14\uc774\ud2b8\ub97c \uc554\uc2dc\ub77c\ub294 \ubc14\uc774\ud2b8 \ub098\uc5f4\uc744 \uac80\uc0c9\ud558\ub294 \uac83\uc774\ub2e4. \uadf8\ub7ec\ub098 \uc77c\ubc18\uc801\uc73c\ub85c \uc560\ud50c\ub9ac\ucf00\uc774\uc158\uc758 \uad6c\uc870\ub294 \ub124\ud2b8\uc6cc\ud06c\ub098 \uc804\uc1a1 \uacc4\uce35 \ud504\ub85c\ud1a0\ucf5c\ubcf4\ub2e4 \ud6e8\uc52c \ub35c \uc5c4\uaca9\ud558\uac8c \uc815\uc758\ub418\uae30 \ub54c\ubb38\uc5d0 \uce68\uc785 \ud0d0\uc9c0 … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[52],"tags":[218],"_links":{"self":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/751"}],"collection":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=751"}],"version-history":[{"count":0,"href":"http:\/\/pchero21.com\/index.php?rest_route=\/wp\/v2\/posts\/751\/revisions"}],"wp:attachment":[{"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=751"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=751"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/pchero21.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=751"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}