CAJ | 학술논문

自2007年以来，高级持续威胁（advancedpersistentthreat，APT）攻击不断被发现。例如，2009年的Ghost Net攻击专门盗取各国大使馆、外交部等政府机构以及银行的机密信息，两年内就已渗透到至少103个国家的1295台政府和重要人物的电脑中；2010年6月，Stuxnet首次被发现，是已知的第一个以关键工业基础设施为目标的蠕虫，其感染并破坏了伊朗纳坦兹核设施，并最终使伊朗布什尔核电站推迟启动；2011年9月发现的Duqu病毒用于从工业控制系统制造商收集情报信息，目前已监测到法国、荷兰、瑞士及印度等8个国家的6家组织受到该病毒感染。APT攻击已经成为近几年给国家、社会、企业、组织及个人造成重大损失和影响的攻击形式。文章首先介绍APT攻击的定义，之后给出APT攻击的技术特点，最后介绍目前APT攻击中针对手机的最新攻击方式，以提高人们应对此类攻击的防范意识。
자2007년이래，고급지속위협（advancedpersistentthreat，APT）공격불단피발현。례여，2009년적Ghost Net공격전문도취각국대사관、외교부등정부궤구이급은행적궤밀신식，량년내취이삼투도지소103개국가적1295태정부화중요인물적전뇌중；2010년6월，Stuxnet수차피발현，시이지적제일개이관건공업기출설시위목표적연충，기감염병파배료이랑납탄자핵설시，병최종사이랑포십이핵전참추지계동；2011년9월발현적Duqu병독용우종공업공제계통제조상수집정보신식，목전이감측도법국、하란、서사급인도등8개국가적6가조직수도해병독감염。APT공격이경성위근궤년급국가、사회、기업、조직급개인조성중대손실화영향적공격형식。문장수선개소APT공격적정의，지후급출APT공격적기술특점，최후개소목전APT공격중침대수궤적최신공격방식，이제고인문응대차류공격적방범의식。
Since 2007, advanced persistent threats (APT) attacks continue to be discovered. For example, in 2009, Ghost Net attack speciifcally stole conifdential information of embassies, the Foreign Ministries and banks, within two years, the attack had penetrated into the 1295 computers of the governments and important persons in at least 103 countries. In 2010, Stuxnet was ifrstly discovered, which was the worm aiming at the key industrial infrastructures for ifrstly known. Stuxnet infected and destroyed the Natanz nuclear facility, and ultimately delayed the start-up of Bushehr nuclear power plant. At September 2011, Duqu virus was discovered to gather information from manufacturers of industrial control systems, and six organizations from eight countries such as France, the Netherlands, Switzerland and India had been monitored to be infected by the virus. APT attacks have caused significant damages and impacts to the states, societies, businesses, organizations and individuals in recent years. This article ifrst introduces the deifnition of APT attack and then gives the technical characteristics of APT. Finally, this article introduces the latest attack forms of the APT attack against smartphones, in order to enhance the people’s awareness against the attack.