{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00213619","sets":["1164:5251:10517:10742"]},"path":["10742"],"owner":"44499","recid":"213619","title":["IoTマルウェア感染解析における通信形態及びアップリンク速度の推定手法"],"pubdate":{"attribute_name":"公開日","attribute_value":"2021-11-01"},"_buckets":{"deposit":"f9c333d1-1d14-4a1f-85ce-dfb2c7d01e40"},"_deposit":{"id":"213619","pid":{"type":"depid","value":"213619","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"IoTマルウェア感染解析における通信形態及びアップリンク速度の推定手法","author_link":["546864","546865","546863"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"IoTマルウェア感染解析における通信形態及びアップリンク速度の推定手法"},{"subitem_title":"IoT Malware Infection Analysis for Network Identification and Uplink Speed Estimation","subitem_title_language":"en"}]},"item_type_id":"4","publish_date":"2021-11-01","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"Advanced Institute of Industrial Technology／Yokohama National University"},{"subitem_text_value":"NTT Data Mathematical Systems Inc."},{"subitem_text_value":"Yokohama National University"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Advanced Institute of Industrial Technology / Yokohama National University","subitem_text_language":"en"},{"subitem_text_value":"NTT Data Mathematical Systems Inc.","subitem_text_language":"en"},{"subitem_text_value":"Yokohama National University","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/213619/files/IPSJ-EIP21094018.pdf","label":"IPSJ-EIP21094018.pdf"},"date":[{"dateType":"Available","dateValue":"2023-11-01"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-EIP21094018.pdf","filesize":[{"value":"1.5 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"26"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"4a5dc127-b7af-4b42-9215-1a7be14913e0","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2021 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"黄, 緒平"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"望月, 俊輔"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"吉岡, 克成"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA11238429","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8647","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"近年，IoT 機器を狙ったサイバー攻撃が増加している．マルウェアに感染した機器が踏み台として悪用され，不正な無線通信を大量に発生させる恐れがある．本研究はマルウェア感染による不正無線通信を抑制するため，収集した感染ログデータを解析し，IP アドレスから通信形態及びアップリンク通信速度を推定する手法を提案する．具体的に，GeoIP2 Connection Type DB による有線無線判定と自律システム（AS）番号を組み合わせてアドレスブロックを分割し，それぞれの範囲で Network Diagnostic Tool（NDT）の計測データと紐づけを行い，アップリンク通信速度を推定するメカニズムである．また，提案手法を IoT ハニーポットの実測値に適用し，接続形態を特定した後，無線通信の平均アップリンク推定速度が 40.6Mbps になり，プロバイダーの公称データと概ね合致した．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"IoT botnets such as Mirai and its variants continue to evolve and keep consuming network resources, especially valuable radio resources. We show our approach to estimate the radio resources wasted by the IoT botnets. This paper proposes a cellular threats identification mechanism to identify the connection types, and to estimate the wireless uplink speed using IoT honeypot log, aiming developing a novel system to simulate the threat, by crosschecking Connection Type Database of Maxmind's GeoIP2, a well-known industrial resource for IP address related information, with uplink speed measurement data. Mobile Network Identification is approached by dividing IP addresses into IP ranges using Autonomous System (AS) numbers, combining the reverse DNS lookup solution. Network diagnostic tool database using IP ranges is used to calculate the uplink speed. To evaluate and verify the precision of the proposed method, we analyzed the IoT honeypot log as an alternation target application. The connection types are classified as ”Cable/DSL”, ”Corporate”, and ”Cellular”, and the maximum average uplink speed of cellular connection of the infected IPs is 40.6 Mbps, which is aligned with the average uplink speed of smartphone users of Softbank survey as 32 Mbps. Connection types and uplink speed is available using IP address as the input data by the proposed method, which may be used to estimate the attack scale.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告電子化知的財産・社会基盤（EIP）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2021-11-01","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"18","bibliographicVolumeNumber":"2021-EIP-94"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":213619,"updated":"2025-01-19T17:05:47.676163+00:00","links":{},"created":"2025-01-19T01:14:28.609700+00:00"}