2012 2013
’12 7 8 9 10 11 12 1 2 3 4 5 6 ’13

19,570 1,937 2,173 1,273 1,608 1,586 1,444 1,258 992 991 947 868 1,090 6,146

6 1,090 25.6% 2
.
2,500
2,000
1,500
1,258
992
1,510
1,702
1,419
1,534
2,174
1,937
2,173
1,273
1,444
1,000
500
0
1 2 3 4 5 6 7 8 9 10 11 12
20122013
STATISTICS
TCP/3389 6.40%
TCP/22 6.20%
TCP/1433 28.10%
TCP/445 16.90%
33.9%
, IP /(62.6%),
(36.7%) 99.3% .
: (co,com), (ac), (or,org), (re), /(net, pe, IP )

6 203,715
26,028(11.3%) , .
[ 3]
[ 2]

2013
1 2 3 4 5 6 7 8 9 10 11 12 ’13

[ 4]

(‘13 6 )
STATISTICS
1,024
805
246
483
1,310
1,682
917

6 345, 27.8%
.
42.3% .
: (, , KISA ), (, , ), (, )
[ 4]
DDoS Agent 30,479(15.0%)
, OnlineGameHack 18,090(8.9%) .
Downloader ,
,
.

2012 2013
’12 7 8 9 10 11 12 1 2 3 4 5 6 ’13
2,646 39 46 61 63 99 83 169 73 161 181 132 144 860
4,242 240 232 314 182 238 192 848 729 868 844 345 199 3,833
56 4 5 7 3 7 2 7 3 10 7 1 2 30
6,900 286 286 384 255 348 287 1,024 805 1,039 1,032 478 345 4,723
STATISTICS
2012 2013
’12 7 8 9 10 11 12 1 2 3 4 5 6 ’13
3,270 187 469 443 477 577 418 353 208 355 397 429 527 2,269
9,748 534 1,026 939 1,220 1,141 1,534 1,197 785 1,489 1,189 2,535 2,029 9,224
13,018 194 477 452 487 588 430 1,550 993 1,844 1,586 2,964 2,556 11,493

6 2,556 13.8% .
PC 527,
2,029 .
: (URL) PC

6 23.0% ,
, .
[ 6]
[ 5]
1,844
1,550
993
207
433
387
1,678
721
1,495
1,382
1,697
1,718
1,952
0
500
1,000
1,500
2,000
2,500
3,000
3,500
121110987654321
2,964
2,556
1,586
20122013
912
436
STATISTICS
[ 6]
47.7%
30.6%
14.3%

6 KISA 5.2% , 3
, IP 97.5%
.
KISA ,
IP , , , , ,
TCP/445, TCP/139, ICMP .
682
872
1,058
361
568
STATISTICS
24.4%
23.0%
DNS IP
6 DNS (C&C) 1,490 13.4%
, C&C IP 101,503
2.3% .
DNS : ISP PC (C&C)
KISA DNS
50,000
100,000
114,769
200,000
250,000
300,000
350,000
400,000
450,000
500,000
0
438,092
414,161
364,740
359,648
319,672
254,434
217,612
201,967
165,160
129,731
137,788
1 2 3 4 5 6 7 8 9 10 11 12
238,930