{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00201317","sets":["6164:6165:6462:10022"]},"path":["10022"],"owner":"44499","recid":"201317","title":["ダミーファイルを利用した暗号化型ランサムウェア対策システムの実装"],"pubdate":{"attribute_name":"公開日","attribute_value":"2019-10-14"},"_buckets":{"deposit":"28af6438-0550-40f5-80c8-a2dd0805925c"},"_deposit":{"id":"201317","pid":{"type":"depid","value":"201317","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"ダミーファイルを利用した暗号化型ランサムウェア対策システムの実装","author_link":["491818","491824","491823","491817","491819","491822","491820","491821"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"ダミーファイルを利用した暗号化型ランサムウェア対策システムの実装"},{"subitem_title":"Implementation of Encryption Type Ransomware Protection System Using Dummy File","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"ランサムウェア，マルウェア，暗号化順，ダミーファイル，対策システム","subitem_subject_scheme":"Other"}]},"item_type_id":"18","publish_date":"2019-10-14","item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_18_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"工学院大学"},{"subitem_text_value":"工学院大学"},{"subitem_text_value":"工学院大学"},{"subitem_text_value":"長崎県立大学"}]},"item_18_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Kogakuin University","subitem_text_language":"en"},{"subitem_text_value":"Kogakuin University","subitem_text_language":"en"},{"subitem_text_value":"Kogakuin University","subitem_text_language":"en"},{"subitem_text_value":"University of Nagasaki","subitem_text_language":"en"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/201317/files/IPSJCSS2019024.pdf","label":"IPSJCSS2019024.pdf"},"date":[{"dateType":"Available","dateValue":"2021-10-14"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJCSS2019024.pdf","filesize":[{"value":"533.2 kB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"30"},{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"7732d06f-d326-49b4-af49-340f659ae0d0","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2019 by the Information Processing Society of Japan"}]},"item_18_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"田中, 智也"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"小池, 一樹"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"小林, 良太郎"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"加藤, 雅彦"}],"nameIdentifiers":[{}]}]},"item_18_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Tomoya, Tanaka","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Kazuki, Koike","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Ryotaro, Kobayashi","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Masahiko, Kato","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_18_relation_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_relation_type_id":{"subitem_relation_type_select":"NCID","subitem_relation_type_id_text":"ISSN　1882-0840"}}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_5794","resourcetype":"conference paper"}]},"item_18_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"近年ランサムウェアの被害は減少傾向にあるが未だ大きな脅威である. 中でも, 暗号化型ランサムウェアである WannaCry は世界中で猛威を振るった. しかし, 感染経路となった脆弱性に対するパッチは事前に配布済みであったことが判明している. 従って, パッチ適用前の状態でも暗号化型ランサムウェアに対応可能な予防策が求められる. 本研究では, 暗号化型ランサムウェアの暗号化順序に着目し, 最初に暗号化されるパスにダミーファイルを設置することで, 存在を知らせ, ランサムウェアによる暗号化を遮断する新しい手法を提案する. 本稿では, 実際に仮想マシン上でランサムウェアを感染させ本手法の有効性を検証した.","subitem_description_type":"Other"}]},"item_18_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Ransomware damage has been decreasing in recent years, but is still a major threat.  In particular, an encryption type WannaCry raged around the world. However, it has been found that patches for vulnerabilities that became the infection route had been distributed in advance. Therefore, there is a need for preventive measures that can handle an encryption type ransomware even before patch application. In this research, we focus on the encryption order of encryption type ransomware and propose a new method of notifying existence and blocking encryption due to ransomware by placing a dummy file in the path to be encrypted first. In this paper, we actually infect ransomware on a virtual machine and verified the effectiveness of this method.","subitem_description_type":"Other"}]},"item_18_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"169","bibliographic_titles":[{"bibliographic_title":"コンピュータセキュリティシンポジウム2019論文集"}],"bibliographicPageStart":"163","bibliographicIssueDates":{"bibliographicIssueDate":"2019-10-14","bibliographicIssueDateType":"Issued"},"bibliographicVolumeNumber":"2019"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":201317,"updated":"2025-01-19T21:05:46.560447+00:00","links":{},"created":"2025-01-19T01:04:35.511175+00:00"}