{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00217228","sets":["1164:2822:10894:10895"]},"path":["10895"],"owner":"44499","recid":"217228","title":["コンテナ型仮想化を利用した分散アクセス制御システムの実装と評価"],"pubdate":{"attribute_name":"公開日","attribute_value":"2022-03-03"},"_buckets":{"deposit":"4261e2cf-9c4e-4799-89a0-a71f7bc9f26d"},"_deposit":{"id":"217228","pid":{"type":"depid","value":"217228","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"コンテナ型仮想化を利用した分散アクセス制御システムの実装と評価","author_link":["562435","562433","562434","562438","562437","562436"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"コンテナ型仮想化を利用した分散アクセス制御システムの実装と評価"},{"subitem_title":"Implementation and evaluation of decentralized information flow control system using container-based virtualization","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"仮想化技術","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2022-03-03","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"東京大学大学院情報理工学系研究科"},{"subitem_text_value":"東京大学大学院情報理工学系研究科"},{"subitem_text_value":"東京大学大学院情報理工学系研究科"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Graduate School of Information Science and Technology The University of Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Information Science and Technology The University of Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Graduate School of Information Science and Technology The University of Tokyo","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/217228/files/IPSJ-EMB22059008.pdf","label":"IPSJ-EMB22059008.pdf"},"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-EMB22059008.pdf","filesize":[{"value":"1.9 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"0","billingrole":"42"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_login","version_id":"43add8a6-6c38-4cd9-bf02-b4938c516d16","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2022 by the Institute of Electronics, Information and Communication Engineers This SIG report is only available to those in membership of the SIG."}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"立花, 斐斗"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"入江, 英嗣"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"坂井, 修一"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Ayato, Tachibana","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Hidetsugu, Irie","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Shuichi, Sakai","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12149313","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-868X","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"分散アクセス制御 (DIFC) はポリシーをアプリケーション開発者によって設定することで，強制アクセス制御（MAC）に比べ効果的に脆弱性被害を防ぐ手法である．しかし既存手法による DIFC の実装では OS の改変が必要になり，導入の障壁が高いことが課題となっている．ここで OS への改変が必要ない手法として，我々は DIFC システムをコンテナ型仮想化環境上に実装する手法が提案している．本研究ではこの手法をコンテナ型仮想化環境上に実装し，そのシステム上で実用 Web アプリケーションを動作させてセキュリティおよびパフォーマンス評価を行った．セキュリティ評価の結果，実用プログラムの脆弱性を防げることが示された．さらにパフォーマンス評価を行った結果， 既存のコンテナ環境に対して 33% 程度のオーバーヘッドであり，既存手法より影響は小さかった．","subitem_description_type":"Other"}]},"item_4_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Decentralized Information Flow Control (DIFC) is a method to prevent vulnerabilities more effectively than Mandatory Access Control (MAC) by allowing application developers to set policies. However, the implementation of DIFC using existing methods requires modifications to the operating system, which creates a high barrier to implementation. As a method that does not require any modification to the OS, we proposed a method of implementing the DIFC system on a Container-based virtualization environment. In this study, we implemented this method on a Container-based virtualization environment and evaluated it by running a practical web application on the system. The results of the security evaluation showed that the method can prevent vulnerabilities of a practical web application. In addition, the performance evaluation showed that the overhead was about 33% compared to the existing container environment, and there was less impact than existing methods.","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"6","bibliographic_titles":[{"bibliographic_title":"研究報告組込みシステム（EMB）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2022-03-03","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"8","bibliographicVolumeNumber":"2022-EMB-59"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":217228,"updated":"2025-01-19T15:34:29.325079+00:00","links":{},"created":"2025-01-19T01:17:43.869052+00:00"}