{"links":{},"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00178472","sets":["1164:6389:9100:9101"]},"path":["9101"],"owner":"11","recid":"178472","title":["パラメータのクラスタリングによる攻撃パターン抽出"],"pubdate":{"attribute_name":"公開日","attribute_value":"2017-03-06"},"_buckets":{"deposit":"c56578d1-3bc4-41ba-98ff-abec41719868"},"_deposit":{"id":"178472","pid":{"type":"depid","value":"178472","revision_id":0},"owners":[11],"status":"published","created_by":11},"item_title":"パラメータのクラスタリングによる攻撃パターン抽出","author_link":["382340","382339","382341","382336","382338","382337"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"パラメータのクラスタリングによる攻撃パターン抽出"},{"subitem_title":"Attack Pattern Extraction by Clustering Parameters","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"Web Security","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2017-03-06","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"NTTセキュアプラットフオーム研究所"},{"subitem_text_value":"NTTセキュアプラットフオーム研究所"},{"subitem_text_value":"NTTセキュアプラットフオーム研究所"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"NTT Secure Platform Laboratories","subitem_text_language":"en"},{"subitem_text_value":"NTT Secure Platform Laboratories","subitem_text_language":"en"},{"subitem_text_value":"NTT Secure Platform Laboratories","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/178472/files/IPSJ-SPT17022022.pdf","label":"IPSJ-SPT17022022.pdf"},"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-SPT17022022.pdf","filesize":[{"value":"1.4 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_login","version_id":"6a3e221d-698c-467f-a538-6647c7b7bb24","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2017 by the Institute of Electronics, Information and Communication Engineers This SIG report is only available to those in membership of the SIG."}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"折原, 慎吾"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"佐藤, 徹"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"谷川, 真樹"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Shingo, Orihara","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tohru, Sato","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Masaki, Tanikawa","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12628305","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8671","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"Web アプリケーションへの攻撃を検知するために MF が用いられるが,新たな攻撃を継続的に検知するためには WAF のシグネチャを更新し続ける必要がある.本研究では,攻撃を含む可能性のあるリクエストから得たパラメータをクラスタリングし,共通部分を抽出することで WAF シグネチヤの基となる攻撃パターンを抽出する.実サーバへのリクエストに本手法を適用し,攻撃と思われるパターンを抽出できるという実験結果を得た.","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Web Application Firewall (WAF) is widely used to detect attacks against Web applications. New sorts of attacks occur day by day and to detect such new attacks, it is required to update WAF signatures continuously. In this paper we introduce our method to extract attack pattems by clustering HTTP request parameters which may contain attack codes. Experimental result shows that our method has capabilities to extract several attack pattems which are likely real attacks.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告セキュリティ心理学とトラスト(SPT)"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2017-03-06","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"22","bibliographicVolumeNumber":"2017-SPT-22"}]},"relation_version_is_last":true,"weko_creator_id":"11"},"updated":"2025-01-20T05:06:48.732093+00:00","created":"2025-01-19T00:47:49.055206+00:00","id":178472}