{"updated":"2025-01-19T23:19:44.384909+00:00","links":{},"created":"2025-01-19T00:59:50.578380+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00194813","sets":["1164:4088:9695:9718"]},"path":["9718"],"owner":"44499","recid":"194813","title":["Doc2vecによるパラグラフベクトルを用いたマルウェア感染端末の検出"],"pubdate":{"attribute_name":"公開日","attribute_value":"2019-02-28"},"_buckets":{"deposit":"8766c491-fc5c-4b6d-b165-6b7a8ee6d8ee"},"_deposit":{"id":"194813","pid":{"type":"depid","value":"194813","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"Doc2vecによるパラグラフベクトルを用いたマルウェア感染端末の検出","author_link":["462160","462164","462159","462161","462162","462163"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"Doc2vecによるパラグラフベクトルを用いたマルウェア感染端末の検出"},{"subitem_title":"Detection of malware infected host using paragraph vector by Doc2vec","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"マルウェア","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2019-02-28","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"大阪府立大学大学院人間社会システム科学研究科"},{"subitem_text_value":"大阪府立大学大学院人間社会システム科学研究科"},{"subitem_text_value":"大阪府立大学大学院人間社会システム科学研究科"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Graduate School of Humanities and Sustainable System Sciences, Osaka Prifecture University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Humanities and Sustainable System Sciences, Osaka Prifecture University","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Humanities and Sustainable System Sciences, Osaka Prifecture University","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/194813/files/IPSJ-IOT19044004.pdf","label":"IPSJ-IOT19044004.pdf"},"date":[{"dateType":"Available","dateValue":"2021-02-28"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-IOT19044004.pdf","filesize":[{"value":"1.2 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"43"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"a6107911-ad43-452d-b707-7de75490820c","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2019 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"南, 辰典"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"青木, 茂樹"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"宮本, 貴朗"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Tatsunori, Minami","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Shigeki, Aoki","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Takao, Miyamoto","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12326962","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8787","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"近年，標的型攻撃による被害が深刻化している．標的型攻撃はシグネチャベースによる事前対策だけでは検出が困難なため，マルウェアに感染した後の感染端末の早期発見が重要視されている．感染端末は感染前と感染後では異なる通信をするため，感染前の端末の通信ログを学習することで，動きの違いを検知できると考えられる．そこで本稿では，感染前の端末の通信ログを学習し，不審な動きを検出する手法を提案する．本手法では，端末毎の Firewall ログと Proxy ログに Doc2vec を適用してパラグラフベクトルを抽出し，そのベクトルを One-Class SVM で学習して外れ値を検出することで，不審な動きを検出する．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"APT (Advanced Persistent Threat) attacks has become serious problem in the world. Attackers infect targeted hosts with malware and remotely control them. The Attackers investigate network to which the infected hosts belong using their hosts before stealing confidential information. The infected hosts that operated by the attackers behave differently than before malware infection. Such behaviors are recorded to network log. Thus, we thought that we can detect different behaviors by learning the network log of before infection. In this paper, we propose a method to detect malware infected hosts by learning the behaviors from the network log of the hosts before infection. In this method, we learn behaviors before infection from firewall log and proxy server log using Doc2vec. Further, we detect malware infected hosts by learning the vectors using One-Class SVM and detecting outliers.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"7","bibliographic_titles":[{"bibliographic_title":"研究報告インターネットと運用技術（IOT）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2019-02-28","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"4","bibliographicVolumeNumber":"2019-IOT-44"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":194813}