Vulnerabilities of Live-Streaming Services in Korea

Sensors

Tai-Ho Kim¹  Su-Hwan Myeong²  Tai-Sic Yun³  Seung-Min Yoon³  Ieck-Chae Euom⁴  Sun-Hong Hwang⁵  Ga-Yeong Kim⁵ 

[1]ALL IT ONE Inc., Seoul 08390, Korea

[2]Computer & Telecommunications Engineering, Mirae Campus, Yonsei University, Wonju 26493, Gangwon-do, Korea

[3]Department of Cyber Defense, Korea University, Seoul 02841, Korea

[4]Department of Data Science, Chonnam National University, Gwangju 61186, Korea

[5]System Security Research Center, Chonnam National University, Gwangju 61186, Korea

关键词: vulnerability analysis;    grid computing;    live-streaming service;    threat modeling;    STRIDE;   

DOI  :  10.3390/s22103766

来源: DOAJ

【 摘 要 】

Recently, the number of users and the demand for live-streaming services have increased. This has exponentially increased the traffic to such services, and live-streaming service platforms in Korea use a grid computing system that distributes traffic to users and reduces traffic loads. However, ensuring security with a grid computing system is difficult because the system exchanges general user traffic in a peer-to-peer (P2P) manner instead of receiving data from an authenticated server. Therefore, in this study, to explore the vulnerabilities of a grid computing system, we investigated a vulnerability discovery framework that involves a three-step analysis process and eight detailed activities. Four types of zero-day vulnerabilities, namely video stealing, information disclosure, denial of service, and remote code execution, were derived by analyzing a live-streaming platform in Korea, as a representative service, using grid computing.

【 授权许可】

Unknown