{"created":"2025-01-19T01:12:23.952444+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00211213","sets":["581:10433:10438"]},"path":["10438"],"owner":"44499","recid":"211213","title":["DGAマルウェアにより自動生成された悪性ドメインの判別"],"pubdate":{"attribute_name":"公開日","attribute_value":"2021-05-15"},"_buckets":{"deposit":"4111e453-5df5-49dc-b065-c588ca2249a2"},"_deposit":{"id":"211213","pid":{"type":"depid","value":"211213","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"DGAマルウェアにより自動生成された悪性ドメインの判別","author_link":["536253","536251","536249","536254","536256","536255","536252","536250"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"DGAマルウェアにより自動生成された悪性ドメインの判別"},{"subitem_title":"An Approach for Identifying Malicious Domain Names Automatically Generated by DGA Malware","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"[一般論文] マルウェア，C&C，ドメイン生成アルゴリズム，ドメイン名，ネットワークセキュリティ","subitem_subject_scheme":"Other"}]},"item_type_id":"2","publish_date":"2021-05-15","item_2_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"九州工業大学"},{"subitem_text_value":"九州工業大学"},{"subitem_text_value":"九州工業大学"},{"subitem_text_value":"九州工業大学"}]},"item_2_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Kyushu Institute of Technology","subitem_text_language":"en"},{"subitem_text_value":"Kyushu Institute of Technology","subitem_text_language":"en"},{"subitem_text_value":"Kyushu Institute of Technology","subitem_text_language":"en"},{"subitem_text_value":"Kyushu Institute of Technology","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/211213/files/IPSJ-JNL6205020.pdf","label":"IPSJ-JNL6205020.pdf"},"date":[{"dateType":"Available","dateValue":"2023-05-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-JNL6205020.pdf","filesize":[{"value":"1.1 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"8"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"4109edb3-4a1a-4235-898d-1c4ad4b21b3f","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2021 by the Information Processing Society of Japan"}]},"item_2_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"佐藤, 彰洋"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"林, 豊洋"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"和田, 数字郎"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"福田, 豊"}],"nameIdentifiers":[{}]}]},"item_2_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Akihiro, Satoh","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Toyohiro, Hayashi","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Sujiro, Wada","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yutaka, Fukuda","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_2_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN00116647","subitem_source_identifier_type":"NCID"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_6501","resourcetype":"journal article"}]},"item_2_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"1882-7764","subitem_source_identifier_type":"ISSN"}]},"item_2_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"マルウェアはインターネットにおける重大な脅威の1つである．多くのマルウェアには，検出を回避するための機能としてDGA（Domain Generation Algorithm）が実装されている．DGAとは，C&C（Command-and-Control Server）のドメインを頻繁に変更することで，マルウェアからC&Cへ向けた通信であるコールバックを隠蔽するための仕組みである．本稿では，表層的なドメイン文字列の解析により，DGAマルウェアのコールバックのために自動生成した悪性ドメインの判別を試みる．本手法の独自性は，DGAに関する事前情報をまったく必要とせず，ドメイン文字列の意味の有無からドメインの良性と悪性を推定する点にある．また実験を通じて，提案手法が0.9960の再現率と0.9029の適合率で悪性ドメインを判別可能であることを確認した．この結果から，ネットワークに内在するマルウェアへの迅速な対処が可能となるため，ネットワークにおける安全性の向上が期待できる．","subitem_description_type":"Other"}]},"item_2_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Some of the most serious security threats facing computer networks involve malware. Many types of malware have DGAs (Domain Generation Algorithms) to avoid detection. A DGA is a mechanism for hiding the callback communications of malware by frequently changing the domain name of a C&C (Command-and-Control Server). In this paper, we attempt to detect the callback communications of DGA malware by superficially analyzing domain names. Our approach distinguishes between benign and malicious domains based on the meaning of their character string and does not require any prior knowledge about the DGAs. Our evaluation indicates high performance, with a recall of 0.9960 and a precision of 0.9029. By enabling one to swiftly address various malware, our approach contributes to dramatically improving network security.","subitem_description_type":"Other"}]},"item_2_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"1349","bibliographic_titles":[{"bibliographic_title":"情報処理学会論文誌"}],"bibliographicPageStart":"1341","bibliographicIssueDates":{"bibliographicIssueDate":"2021-05-15","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"5","bibliographicVolumeNumber":"62"}]},"relation_version_is_last":true,"item_2_identifier_registration":{"attribute_name":"ID登録","attribute_value_mlt":[{"subitem_identifier_reg_text":"10.20729/00211107","subitem_identifier_reg_type":"JaLC"}]},"weko_creator_id":"44499"},"id":211213,"updated":"2025-01-19T17:48:09.258117+00:00","links":{}}