公开(公告)号：US20230114705A1

公开(公告)日：2023-04-13

申请号：US17960246

申请日：2022-10-05

Applicant: Korea Advanced Institute of Science and Technology

Inventor： Yongdae KIM ,  CheolJun PARK ,  Sangwook BAE ,  BeomSeok OH ,  Jiho LEE ,  Mincheol SON ,  Insu YUN

IPC: G06F21/57

Abstract: Disclosed are a negative testing-based security analysis system for protocol implementation of an LTE device, and a method thereof. According to an embodiment, a negative testing-based security analyzing method for protocol implementation of an LTE device performed by a computer device includes redefining a state of user equipment (UE) as a security abstraction state for a negative test and composing a test case generation rule by analyzing a specification document in redefining the state of the UE as the security abstraction state.

公开(公告)号：US20200213854A1

公开(公告)日：2020-07-02

申请号：US16716055

申请日：2019-12-16

Applicant: Korea Advanced Institute of Science and Technology

Inventor： Yongdae KIM ,  Hongil KIM ,  Jiho LEE ,  Eunkyu LEE

IPC: H04W12/10 ,  H04L29/06 ,  G06F11/36 ,  H04L9/32 ,  G06K9/62 ,  H04B1/00 ,  H04W12/12

Abstract: A security analysis method for a control plane and a system therefor are disclosed. The method includes generating a test case for a security property unsuitable for a control plane operation, transmitting the generated test case to target equipment and receiving a response of the control plane for the test case from the target equipment, and diagnosing security for the security property of the target equipment by analyzing the received response. The generating includes generating the test case for the security property by modulating a value of a specific field in a control plane protocol header into a value unsuitable for an operation on standards.