{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00194949","sets":["1164:6389:9696:9719"]},"path":["9719"],"owner":"44499","recid":"194949","title":["サイバー攻撃のインシデント対応におけるリスク認知とコミュニケーションの支援方法の検討"],"pubdate":{"attribute_name":"公開日","attribute_value":"2019-02-28"},"_buckets":{"deposit":"65856265-98e2-4364-93d9-a15d0588d965"},"_deposit":{"id":"194949","pid":{"type":"depid","value":"194949","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"サイバー攻撃のインシデント対応におけるリスク認知とコミュニケーションの支援方法の検討","author_link":["462907","462908","462903","462901","462905","462904","462909","462898","462900","462906","462902","462899"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"サイバー攻撃のインシデント対応におけるリスク認知とコミュニケーションの支援方法の検討"},{"subitem_title":"Study of Supporting Risk Perception and Communication in Cybersecurity Incident Response","subitem_title_language":"en"}]},"item_type_id":"4","publish_date":"2019-02-28","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"日本電信電話株式会社"},{"subitem_text_value":"日本電信電話株式会社"},{"subitem_text_value":"日本電信電話株式会社"},{"subitem_text_value":"日本電信電話株式会社"},{"subitem_text_value":"日本電信電話株式会社"},{"subitem_text_value":"日本電信電話株式会社"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"},{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"},{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"},{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"},{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"},{"subitem_text_value":"NIPPON TELEGRAPH AND TELEPHONE CORPORATION","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/194949/files/IPSJ-SPT19032023.pdf","label":"IPSJ-SPT19032023.pdf"},"date":[{"dateType":"Available","dateValue":"2021-02-28"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-SPT19032023.pdf","filesize":[{"value":"2.2 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"21dc9f52-fb3f-47f9-ad50-a5c560c50964","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2019 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"池田, 美穂"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"高橋, 慧"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"上川, 先之"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"倉, 恒子"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"爰川, 知宏"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"岸, 晃司"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Miho, Ikeda","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Satoshi, Takahashi","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Hiroyuki, Uekawa","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tsuneko, Kura","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tomohiro, Kokogawa","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kouji, Kishi","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12628305","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8671","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"本稿では，サイバー攻撃を受けた組織において，複数の部署が協働してインシデント対応と事業継続の各作業を行うときの問題を認知的側面から分析する．サイバー攻撃のインシデント管理プロセスは，起点となる状況認識における CSIRT 関連部署のリスク認知 －サイバー攻撃が引き起こす可能性のある事象やその結果をどのように認識して判断するかという認知プロセス－ に依存していることを示す．また，部署間でコミュニケーションのミスが生じるのは，CSIRT 関連部署から伝達される情報が，彼らのリスク認知に依存した内容であり，彼らとは異なるリスク認知を有する CSIRT 以外の部署にとって理解しやすいとは限らないためであると考察する．この考察に基づき，サイバー攻撃が引き起こす IT システム障害と事業影響を各人が理解しやすい表現方法で提示することで，サイバー攻撃が発生したときの状況認識における組織のリスク認知とコミュニケーションを支援するシステムを提案する．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"We analyze the cognitive problems in multiple departments of an organization collaborating in incident response and normal business operations when cyberattacks happen. We show that the incident management process of cyberattacks depends on CSIRT's risk perception in situation awareness that is the start point of the process. We discuss that communication mistakes and mismatched situation awareness between departments would occur due to the difference in the risk perception about cyberattack: information based on CSIRT's risk perception may not be easy for other departments to understand. On the basis of the discussion, we propose a risk perception and communication assistance system for organizations in cyberattack response, which provides information about a cyberattack and its impact in various ways of expression easy for each person to understand.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"8","bibliographic_titles":[{"bibliographic_title":"研究報告セキュリティ心理学とトラスト（SPT）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2019-02-28","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"23","bibliographicVolumeNumber":"2019-SPT-32"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":194949,"updated":"2025-01-19T23:16:33.422416+00:00","links":{},"created":"2025-01-19T00:59:58.264100+00:00"}