KR20090015421A - System for management of phishing game and method thereof and record medium - Google Patents

Abstract

A phishing game operation system, a method thereof, and a recording medium for recording a program that executes the method are provided to collect phishing methods, and to construct a defending method for the collected phishing methods, thereby enhancing security for phishing. Participant terminals(110, 120, 130) perform phishing games. A phishing game operation server(300) carries out calculation and notification of game results after the phishing games. A participant DB(410) stores information on participants joining in the phishing games and registers who register phishing sites and phishing toolkits. A phishing registration DB(420) stores the phishing sites and the phishing toolkits. A phishing program DB(430) stores a phishing program.

Description

Phishing game operating system and method and a recording medium recording a program for executing the same {System for management of phishing game and method about and record medium}

The present invention relates to a phishing game operating system for enhancing the security against phishing by constructing a phishing method and establishing a defense method against the phishing method, and a recording medium recording a method for executing the same and a program for executing the phishing method. will be.

In general, phishing is a type of new fraud that attempts to collect personal or financial information through the Internet and use it after collecting personal or financial information.

Because phishing is primarily aimed at monetary gains, it can directly damage deposits and payments. Other indirect damages include advertising calls, spam mailing, and identity theft. In particular, once leaked personal information is not easily lost, prevention is more important.

If you look briefly at the domestic and international phishing types, foreigners pretend to send e-mails by prestigious organizations, and enter personal information by accessing the Internet address of the e-mail body. Domestically, prize events, credit loans, and game items are used. It is mainly used to post advertisements or send messages on large portal boards as a bait for charging, and to collect / sell personal information by impersonating large portal sites.

In order to prevent such phishing, individual users should be careful not to provide personal information by being deceived by phishing e-mails or fraudulent events, and make sure that Windows updates and antivirus programs are indispensable. While important, these preventive measures alone aren't safe from phishing.

Therefore, it is necessary to research and develop various security methods to enhance security against phishing.

The present invention has been proposed in accordance with the necessity as described above, and an object thereof is a phishing game operating system for enhancing the security against phishing by allowing a phishing method and a defense method for the phishing method. The present invention provides a method and a recording medium having recorded thereon a program for executing the method.

Another object of the present invention is to operate a phishing game in such a way that it is possible to change the attack according to the defense as in a real environment, away from the static attack, a phishing game operating system to find a way to enhance the security against phishing And a method and a recording medium having recorded thereon a program for executing the same.

Another object of the present invention is to select the awards in the order of the best performance among those attacked by the selected people within a given time, and, if all the attacks failed, ranking in the order of less detected in the detection process By operating a phishing competition in a game method of determining and awarding prizes, a phishing game operating system for inducing a large number of participants and a method thereof and a recording medium recording a program for executing the same.

"Phishing game operating system" according to the present invention for achieving the above objects,

A participant terminal connected to a server that operates a phishing game through a communication network to register a phishing site and a phishing toolkit, and if the participant is determined to be a phishing game participant, attack the phishing defense product to perform a phishing game;

Contest phishing methods online, evaluate phishing sites and phishing toolkits registered by participants who want to participate in the contest, determine phishing game participants through the evaluation, and modify phishing defense products in accordance with registered phishing toolkits A phishing game operating server for enhancing security and performing calculation and notification of game results after a phishing game;

A participant database for storing information about registrants who register the phishing site and phishing toolkit and participants who participate in a phishing game;

A phishing registration database for storing phishing sites and phishing toolkits requested by the participant;

And a phishing program database in which a phishing program for detecting the registered phishing site and the phishing toolkit is stored.

"Phishing game operating method" according to the present invention for achieving the above objects,

Registering a phishing site and a phishing toolkit requested by a phishing registration module through a participant terminal;

Testing the registered phishing site and phishing toolkit using a phishing program in a phishing detection module;

Analyzing the attack method detected by the control module based on the test result and selecting and registering a phishing method to be finally registered;

Determining a phishing game participant through evaluation in the control module, and modifying a phishing defense product in a phishing defense product modification module according to the selected phishing method to enhance security;

Publishing detailed contents of the selected phishing method through a video and an audio in a display module and a voice processing module;

When the phishing game ends after the phishing game is finished, the game result calculation module calculates the game result, and displays the calculated game result on the display module.

Furthermore, among the "phishing game operating method" according to the present invention, the selection of the phishing method detects the registered phishing site and the toolkit, extracts the attack method, analyzes the extracted attack method and drops out if it is a known method. In the case of a phishing method, a phishing method to be registered may be selected.

In addition, the method of calculating the game results, the game results are calculated so that the selected participant attacks the phishing defense product at the predetermined time, the highest ranking of the participant who performed the best performance, if all the attacks failed, the phishing site and In the phishing toolkit detection process, the results are calculated so that the number of phishing sites and phishing toolkits that are less detected are higher.

In addition, another aspect of the present invention is characterized by providing a recording medium in which the phishing game operating method is made into a computer executable program and recorded.

According to the present invention, there is an advantage that the defense against phishing can be strengthened by conspiring with a phishing method and implementing a defense method against the conspired phishing method.

In addition, by operating a phishing game in a way that allows you to change the attack according to the defense as in the real environment to escape the static attack, there is an advantage to find a way to enhance the security against phishing.

Also, those who are selected within a given time of time are attacked and ranked in the order of the best performance among them. If all the attacks fail, the ranking is determined in the order of the least detected during the detection process. By operating a phishing game in a manner, it is possible to induce a lot of participation of participants, as well as to obtain a variety of the latest phishing method has the advantage of enhancing the security.

Hereinafter, described in detail with reference to the accompanying drawings a preferred embodiment of the present invention. If it is determined that the detailed description of the known function or configuration related to the present invention may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted.

1 is a configuration diagram of a phishing game operating system according to the present invention, which includes a participant terminal 110, 120, and 130, a communication network 200, a phishing game operating server 300, and a participant database (DB) 410. ), A phishing registration database 420, and a phishing program database 430.

The participant terminal 110 is a terminal used by a participant who participates in a phishing game or a terminal used by a user to register a phishing site and a phishing toolkit and a user's manual by participating in a phishing method competition. Generally, a personal computer (PC) is used. It connects to a server that operates a phishing game through the communication network 200, registers a phishing site and a phishing toolkit, and evaluates a phishing defense product to play a phishing game when it is determined to be a phishing game participant through evaluation. .

Although only three participant terminals are illustrated in the drawing, this is only one embodiment, and any person skilled in the art may know that more than one participant terminal may be simultaneously connected. One participant terminal 110 will be described below for convenience of description. Use only) to register phishing sites and phishing toolkits, and explain how to play phishing games.

The communication network 200 is used to connect a site operated by the participant terminal 110 and the phishing game operation server 300 in a network environment, and it is preferable to use the Internet.

The phishing game operation server 300 invites phishing methods online, evaluates phishing sites and phishing toolkits registered by participants who want to participate in the competition, and determines phishing game participants through the evaluation, and registers phishing. According to the toolkit, the phishing defense product will be modified to enhance security, and produce and notify game results after phishing games.

As shown in FIG. 2, the phishing game operation server 300 includes a communication module 310 for performing data communication with the participant terminal 110 through the communication network 200, and registration and operation of a phishing game. Registers and manages phishing sites and phishing toolkits registered by participants in connection with the control module 320 and the participant database 410 in charge of overall control, and registers information of participants determined as participants in phishing games through evaluation and A participant management module 330 for managing and a phishing registration module 340 for registering a phishing site and a phishing toolkit registered by the participant in a phishing registration database 420; A phishing detection module (350) for testing a phishing toolkit registered in the phishing registration database (420) with a phishing program registered in a phishing program database (430); Phishing defense product modification module 360 to enhance the security by modifying the phishing defense product based on the phishing detection result.

In addition, the phishing game operation server 300, the game result calculation module 370 for calculating the game result after the end of the phishing game, the phishing attack method collected during the phishing detection process and phishing defense product modification process at the time of the announcement of the attack method A display module 380 for displaying an image on the monitor 381; When the announcement about the attack method, the selected participant further includes a voice processing module 390 that receives and processes the voice input through the microphone 392 and transmits it to the speaker 391.

Participant database (DB) 410 is an information storage medium that stores information of registrants who register the phishing site and phishing toolkit and participants who participate in a phishing game, and a phishing registration database 420 is a phishing site requested by the participant to register. And an information storage medium for storing the phishing toolkit, and the phishing program database 430 represents an information storage medium storing the registered phishing site and the phishing program for detecting the phishing toolkit.

3 is a flowchart illustrating a "phishing game operating method" according to the present invention, where S represents a step.

As shown in the drawing, the phishing registration module 340 registers a phishing site and a phishing toolkit requested through the participant terminal 110 (S101); Testing the registered phishing site and phishing toolkit in a phishing detection module (350) using a phishing program (S103); Analyzing only the attack method detected by the control module 320 based on the test result and selecting and registering only a phishing method to be finally registered (S105 to S107); Determining a phishing game participant corresponding to the phishing method selected by the control module 320, and reinforcing security by modifying a phishing defense product in the phishing defense product modification module 360 according to the selected phishing method (S109) S111); Revealing detailed information on the selected phishing method through the image and the audio in the display module 380 and the voice processing module 390 (S113 to S115); When the phishing game is finished after the phishing game is finished, the game result calculating module 370 calculates the game result, and displays the calculated game result on the display module 380 (S117 to S121).

In this way, the "phishing game operating system and method" according to the present invention, the organizer for hosting a phishing game (competition) first to notify the phishing competition through the promotion and advertisement of the phishing competition online and offline. In other words, they learn how to phish and conspire to create a defense.

Recognizing this information, participants participate in a phishing method competition site by using a phishing game operation server 300 through a communication network 200 using their terminal (eg, 110). Then, as shown in step S101, a phishing site (game) and a phishing toolkit capable of phishing a phishing target site, and registration of a user manual are requested. The phishing registration module 340 registers a phishing site and a phishing toolkit requested by a participant in connection with the control module 320 in the phishing registration database 420. The phishing sites and phishing toolkits registered as described above are not finally determined and registered phishing sites and phishing toolkits, and final phishing toolkits are determined through later evaluation, which will be described in detail later.

When a participant registers a phishing site and a phishing toolkit in order to participate in the contest, in step S103, the phishing detection module 350 registers with the phishing registration database 420 first by using a phishing program stored in the phishing program database 430 in advance. Detected phishing sites and phishing toolkits. In other words, phishing sites and phishing toolkits registered as phishing defense products are detected to extract the corresponding attack methods.

In step S105 and step S107, the control module 320 analyzes (evaluates) the detected attack method (phishing toolkit), and selects whether the attack method is a widely known attack method or a new phishing method. When the screening is completed, the phishing game participant is determined and registered in step S109. This not only ensures that valuable phishing methods are registered when registering phishing sites and phishing toolkits, but also limits the number of participants participating in phishing games to an appropriate level.

That is, in the present invention, the registration of phishing sites and phishing toolkits and the selection of participants for phishing game participation is to conspire to register phishing sites and phishing toolkits with participants online before the phishing competition is performed, and the participants participate in phishing sites and phishing. Registering the toolkit will test pre-stored phishing defense products to select the least detected participant / team, and if there are any products that are not pierced, drill the product. After the defense is made, other players will be able to penetrate and select the pierced team / participant as a phishing contest participant. If not, the team / participant that is least detected by the phishing defense product will be selected as a phishing contest participant.

Next, in step S111, when the phishing defense product (phishing program) does not detect a phishing attack, the phishing defense product modification module 360 modifies the phishing defense product to enhance security. Of course, in this case, the phishing defense product modification module 360 does not directly modify the phishing defense product, but the phishing defense product modification module 360 operates according to an operator's operation command to modify the phishing defense product. It will be obvious to those skilled in the art to enhance the security by performing the following.

Subsequently, in step S113, a phishing method that is not drilled by the phishing defense product is extracted with the latest phishing method, and the phishing method extracted in step S115 is announced through video and audio, thereby publicizing the latest phishing method.

In this case, the presentation through video is conducted by interviewing the participant determined as the final participant, and when the participant explains the phishing toolkit used by the participant with the participant's terminal, the screen capture method is used to acquire a video of the phishing toolkit. After acquiring a participant's video using the camera 382, the display module 380 may process the image using a general image processing technique and display the image on the monitor 381. In addition, the voice may use a method of receiving a participant's explanation voice through the microphone 392, processing the voice received by the voice processing module 390 using a general voice processing technique, and then transmitting the voice through the speaker 391. have.

Next, only the participants finally selected in step S117 proceeds to the phishing game for a predetermined time, and when the phishing game ends, the game result calculating module 370 calculates the phishing game result in step S119, and step S121 The display module 380 displays the ranking determined by the calculated game result on the monitor 381.

Here, the calculation method of the game results, the game results are calculated so that the selected participants to attack the phishing defense products at the predetermined time, the ranking of the best performers, if all the attacks failed, the phishing site and The phishing toolkit detection results will be calculated so that the number of phishing sites and phishing toolkits that are less detected are higher.

The present invention can collect the latest phishing methods by taking a collusion scheme for phishing methods, and can enhance security from phishing by modifying a phishing defense product based on the latest phishing methods thus collected.

On the other hand, by making a phishing game operating method according to the present invention as a computer executable program and recording it on a recording medium, a phishing game operating method according to the present invention can be easily implemented by those skilled in the art.

The present invention is not limited to the above-described specific preferred embodiments, and various modifications can be made by any person having ordinary skill in the art without departing from the gist of the present invention claimed in the claims. Of course, such changes will fall within the scope of the claims.

1 is a block diagram of a phishing game operating system according to the present invention.

Figure 2 is a block diagram showing an embodiment of the phishing game operating server of FIG.

3 is a flowchart showing a phishing game operating method according to the present invention.

<Explanation of symbols for the main parts of the drawings>

110, 120, 130... Participant terminal

200... Communication network

300... Phishing Game Operations Server

310... Communication module

320... Control module

330... Participant Management Module

340... Phishing Registration Module

350... Phishing Detection Module

360... Phishing Defense Product Modification Module

410... Participant database

420... Phishing Registration Database

430... Phishing Program Database

Claims (9)

In a system that runs phishing games, A participant terminal connected to a server that operates a phishing game through a communication network to register a phishing site and a phishing toolkit, and if the participant is determined to be a phishing game participant, attack the phishing defense product to perform a phishing game; Contest phishing methods online, evaluate phishing sites and phishing toolkits registered by participants who want to participate in the contest, determine phishing game participants through the evaluation, and modify phishing defense products in accordance with registered phishing toolkits A phishing game operating server for enhancing security and performing calculation and notification of game results after a phishing game; A participant database for storing information about registrants who register the phishing site and phishing toolkit and participants who participate in a phishing game; A phishing registration database for storing phishing sites and phishing toolkits requested by the participant; And a phishing program database in which a phishing program for detecting the registered phishing site and the phishing toolkit is stored. According to claim 1, The phishing game operating server, Phishing by searching for phishing methods online through the communication network and building defense methods against them, and performing a function to strengthen defense against phishing by creating a defense method according to the proposed phishing methods. Phishing game operating system, characterized in that for controlling the operation of the game. The phishing game operating server according to claim 1 or 2, A communication module for performing data communication with the participant terminal via a communication network; A control module for collaborating on phishing methods online and controlling overall control of registration and operation of a phishing game; A participant management module configured to register and manage a phishing site and a phishing toolkit registered by a participant in association with a participant database, and register and manage information of a participant determined as a participant in a phishing game through evaluation; A phishing registration module for registering phishing sites and phishing toolkits registered by the participant in a phishing registration database; A phishing detection module for testing a phishing toolkit registered in the phishing registration database with a phishing program registered in a phishing program database; A phishing defense product modification module for modifying a phishing defense product based on the phishing detection result to enhance security; A game result calculation module for calculating a game result after the phishing game ends; A display module for displaying on the monitor an image of the phishing attack method collected during the phishing detection process and the phishing defense product modification process when the attack method is presented; And a voice processing module for receiving a voice input through a microphone, processing the voice, and transmitting the voice to a speaker. In how to run a phishing game, Registering a phishing site and a phishing toolkit requested by a phishing registration module through a participant terminal; Testing the registered phishing site and phishing toolkit in a phishing detection module using a phishing program; Analyzing the attack method detected by the control module based on the test result and selecting and registering a phishing method to be finally registered; Determining a phishing game participant through evaluation in the control module, and modifying a phishing defense product in a phishing defense product modification module according to the selected phishing method to enhance security; Publishing detailed contents of the selected phishing method through a video and an audio in a display module and a voice processing module; Phishing game operation method comprising the step of calculating the game result in the game result calculation module, and displaying the calculated game result in the display module when the phishing game is finished after the phishing game. The method of claim 4, wherein the screening and registration of the phishing method detects a pre-registered phishing site and a toolkit, extracts an attack method, analyzes the extracted attack method, and drops it if it is a known method. A phishing game operating method, characterized in that the selected and registered as a phishing method to be registered last. The method of claim 4, wherein the testing of the registered phishing site and the phishing toolkit in the phishing detection module comprises: registering the phishing site by detecting the registered phishing site and the phishing toolkit with phishing defense products and extracting a corresponding attack method. A method of operating a phishing game, characterized by testing a site and a phishing toolkit. 5. The phishing game according to claim 4, wherein the method of calculating the game result calculates a game result such that the selected participants attack the phishing defense product at a predetermined time so that the ranking of the participant who has the best performance is high. Operating method. 8. The method of claim 4 or 7, wherein the method of calculating the game result is that when the selected participants attack the phishing defense product at a predetermined time and all the attacks fail, phishing sites detected less during phishing site and phishing toolkit detection process. And calculating a result so that the ranking of the participants who registered the phishing toolkit is high. A computer-readable recording medium having recorded thereon a program for executing the phishing game operating method according to any one of claims 4 to 8.

Images