보안 취약성 IoT 디바이스의 IP 노출 위협 예방 시스템 연구

Abstract

As times become increasingly digitized and the importance of IoT (Internet of Things) technology is increasing, the number of IP-based IoT devices is also sharply increasing. IoT technologies, selected by Gartner’s top 10 strategic technologies, enable the interaction between people and things. While IoT technologies are improving the quality of our life, these also have a problem about IP exposure. Because most of IoT devices have IP addresses for communication, the risks of IP exposure has been increased, but the systems for preventing these risks are insufficient. In this paper, we suggest IP Exposure Threat Prevention System for mitigating the threat of IP-based IoT Devices. First, we search about trends of IoT devices and other security technology. And we also search about IP search engine like ‘Shodan’ or ‘Thingful’. After that, we investigate the damaged case of IP-based IoT devices in terms of the IP exposure and analyze the problem of IP exposed through it. Finally, we develop an IP Exposure Threat Prevention System. We develop the IP Address Searching Module for searching IP-based IoT devices using Python script and Shodan search engine. In addition, we also develop a IP Exposure Notification Module for expressing the exposed IP-based IoT devices. Combined with IP Exposure Risk, we develop a final system of this study. In the future, we can use this system for public organization or company. In public organization, we can use for managing exposed IP-based IoT devices. If some of IoT devices have a high risk of IP exposure, officials can notice to their manager or user. For a company, we can use this system to combine with their security solution.