{"updated":"2025-01-20T00:14:19.726553+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00192240","sets":["6164:6165:6462:9599"]},"path":["9599"],"owner":"44499","recid":"192240","title":["動的な関数アドレス解決APIの呼び出しログを用いたマルウェア分類"],"pubdate":{"attribute_name":"公開日","attribute_value":"2018-10-15"},"_buckets":{"deposit":"70cf2104-6b88-4cf9-992a-e06a1249d31b"},"_deposit":{"id":"192240","pid":{"type":"depid","value":"192240","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"動的な関数アドレス解決APIの呼び出しログを用いたマルウェア分類","author_link":["447400","447402","447401","447403"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"動的な関数アドレス解決APIの呼び出しログを用いたマルウェア分類"},{"subitem_title":"Malware Classification Using the Call Log of an API for Dynamic Function Address Resolution","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"マルウェア分類，動的解析，アドレス解決，機械学習","subitem_subject_scheme":"Other"}]},"item_type_id":"18","publish_date":"2018-10-15","item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_18_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"筑波大学"},{"subitem_text_value":"筑波大学"}]},"item_18_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"University of Tsukuba","subitem_text_language":"en"},{"subitem_text_value":"University of Tsukuba","subitem_text_language":"en"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/192240/files/IPSJCSS2018145.pdf","label":"IPSJCSS2018145.pdf"},"date":[{"dateType":"Available","dateValue":"2020-10-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJCSS2018145.pdf","filesize":[{"value":"362.8 kB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"30"},{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"8b6b5a46-7b9b-497b-9411-76711884e79b","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2018 by the Information Processing Society of Japan"}]},"item_18_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"前田, 優人"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"大山, 恵弘"}],"nameIdentifiers":[{}]}]},"item_18_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Yuto, Maeda","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yoshihiro, Oyama","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_18_relation_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_relation_type_id":{"subitem_relation_type_select":"NCID","subitem_relation_type_id_text":"ISSN　1882-0840"}}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_5794","resourcetype":"conference paper"}]},"item_18_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"本研究ではマルウェアの動的解析の結果に含まれる LdrGetProcedureAddress の呼び出しログを用いてマルウェアの分類を行う手法を提案する．LdrGetProcedureAddress は動的に関数アドレスを解決するための API である．この API の引数として渡された関数名を収集することで，動的解析時にフックされなかった API の情報を収集することができる．収集した情報を元に，機械学習を用いることでマルウェアの分類を行う．実際に FFRI Dataset に含まれる動的解析の結果に本手法を適用し，静的解析による分類および通常の動的解析による分類と性能を比較した．","subitem_description_type":"Other"}]},"item_18_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"1037","bibliographic_titles":[{"bibliographic_title":"コンピュータセキュリティシンポジウム2018論文集"}],"bibliographicPageStart":"1032","bibliographicIssueNumber":"2","bibliographicVolumeNumber":"2018"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"created":"2025-01-19T00:57:59.440067+00:00","id":192240,"links":{}}