목차

국문 요약 ···············································································································1
1. 서론 ····················································································································2
2. 관련 연구 ··········································································································4
2.1. 접촉자 추적 기술 ···················································································4
2.1.1. 블루투스 기반 중앙집중형 방식 ············································4
2.1.1.1. ROBERT ······································································5
2.1.1.2. NTK ··············································································5
2.1.1.3. BlueTrace ····································································6
2.1.2. 블루투스 기반 탈중앙형 방식 ················································7
2.1.2.1. DP-3T ··········································································7
2.1.2.2. Exposure Notification ···············································7
2.1.3. 위치정보 기반 방식 ··································································8
2.1.3.1. KOR 방식 ····································································9
2.2. 보안 위협 모델링 ·················································································10
2.2.1. STRIDE ·····················································································10
2.2.2. LINDDUN ·················································································11
3. Attack Library 구축 ····················································································13
3.1. 내부자 위협 ···························································································13
3.1.1. DUCT 무결성 위배 ································································13
3.1.2. DUCT 기밀성 위배 ································································13
3.2. 외부자 위협 ···························································································14
3.2.1. 릴레이/리플레이 공격 ·····························································14
3.2.2. 자원 고갈 공격 ········································································14
3.2.3. Service Server DoS ·······························································15
3.2.4. 외부자에 의한 거짓 감염 공격 ············································15
3.2.5. Service Server 가장 공격 ·····················································15
3.2.6. 블루투스 중간자 공격 ····························································15
3.2.7. 블루투스 취약점 공격 ····························································16
3.2.8. 외부자에 의한 Linking 공격 ················································16
3.2.9. Tracking 공격 ··········································································16
3.2.10. 어깨너머공격 ··········································································16
3.3. 사용자 위협 ···························································································17
3.3.1. Trolling 공격 ···········································································17
3.3.2. GPS 조작 ··················································································17
3.3.3. 시스템 시간 조작 ····································································18
3.3.4. 접촉 가능성 무시 ····································································18
3.3.5. 사용자에 의한 거짓 감염 공격 ············································18
4. 접촉자 추적 기술에 대한 보안 위협 모델링 ··········································19
4.1. 블루투스 기반 중앙집중형 방식 ·······················································19
4.1.1. 데이터 흐름도 ··········································································19
4.1.2. STRIDE 보안 위협 분석 ·······················································20
4.1.3. LINDDUN 보안 위협 분석 ···················································22
4.2. 블루투스 기반 탈중앙형 방식 ···························································22
4.1.1. 데이터 흐름도 ··········································································24
4.1.2. STRIDE 보안 위협 분석 ·······················································24
4.1.3. LINDDUN 보안 위협 분석 ···················································26
4.3. 위치정보 기반 방식 ·············································································27
4.3.1. 데이터 흐름도 ··········································································28
4.3.2. STRIDE 보안 위협 분석 ·······················································28
4.3.3. LINDDUN 보안 위협 분석 ···················································30
5. 접촉자 추적 기술에 대한 평가 기준 제안 및 비교 분석 ····················31
6. 결론 ··················································································································38
참고문헌 ···············································································································39