{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00227032","sets":["1164:6389:11170:11294"]},"path":["11294"],"owner":"44499","recid":"227032","title":["内部不正対策に資する欺瞞選定スキームの提案（その2）"],"pubdate":{"attribute_name":"公開日","attribute_value":"2023-07-17"},"_buckets":{"deposit":"07f7c67d-3f84-4f2c-96c6-bea8e74c3e75"},"_deposit":{"id":"227032","pid":{"type":"depid","value":"227032","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"内部不正対策に資する欺瞞選定スキームの提案（その2）","author_link":["604056","604054","604067","604055","604058","604064","604065","604066","604063","604060","604061","604057","604059","604062"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"内部不正対策に資する欺瞞選定スキームの提案（その2）"},{"subitem_title":"A scheme for selection of deceptions as a countermeasure for insider threats(part 2)","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"SPT","subitem_subject_scheme":"Other"}]},"item_type_id":"4","publish_date":"2023-07-17","item_4_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"静岡大学"},{"subitem_text_value":"静岡大学"},{"subitem_text_value":"静岡大学"},{"subitem_text_value":"三菱電機株式会社"},{"subitem_text_value":"三菱電機株式会社"},{"subitem_text_value":"静岡大学"},{"subitem_text_value":"静岡大学"}]},"item_4_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Shizuoka University","subitem_text_language":"en"},{"subitem_text_value":"Shizuoka University","subitem_text_language":"en"},{"subitem_text_value":"Shizuoka University","subitem_text_language":"en"},{"subitem_text_value":"Information Technology R&D Center, Mitsubishi Electric Corp.","subitem_text_language":"en"},{"subitem_text_value":"Information Technology R&D Center, Mitsubishi Electric Corp.","subitem_text_language":"en"},{"subitem_text_value":"Shizuoka University","subitem_text_language":"en"},{"subitem_text_value":"Shizuoka University","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_publisher":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/227032/files/IPSJ-SPT23052025.pdf","label":"IPSJ-SPT23052025.pdf"},"date":[{"dateType":"Available","dateValue":"2025-07-17"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-SPT23052025.pdf","filesize":[{"value":"698.2 kB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"46"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"35a884d2-1ae5-4245-a501-85b474a7a546","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2023 by the Information Processing Society of Japan"}]},"item_4_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"奥村, 紗名"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"天笠, 智哉"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"芝田, 翔"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"山本, 匠"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"山中, 忠和"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"大木, 哲史"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"西垣, 正勝"}],"nameIdentifiers":[{}]}]},"item_4_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Sana, Okumura","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tomoya, Amagasa","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tsubasa, Shibata","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Takumi, Yamamoto","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tadakazu, Yamanaka","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tetsushi, Ohki","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Masakatsu, Nishigaki","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_4_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AA12628305","subitem_source_identifier_type":"NCID"}]},"item_4_textarea_12":{"attribute_name":"Notice","attribute_value_mlt":[{"subitem_textarea_value":"SIG Technical Reports are nonrefereed and hence may later appear in any journals, conferences, symposia, etc."}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_18gh","resourcetype":"technical report"}]},"item_4_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"2188-8671","subitem_source_identifier_type":"ISSN"}]},"item_4_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"内部不正の発生件数や対応コストは年々増加しており，内部不正への対策が必須であり，特に悪意を持って不正を行う内部者に対しては，心理的なアプローチで臨む必要がある．心理的なアプローチは内部犯の動機を消失させるアプローチ，内部犯を惑わすアプローチ，内部犯をおびき出すアプローチに分類され，これら 3 つのアプローチを同時に達成する技術として欺瞞機構がある．しかし，欺瞞機構は正規ユーザにとっては著しい利便性低下要因となるため，適用に際しては慎重な判断が求められる．然るに欺瞞型の内部犯対策の設計にあたっては，費用対効果の観点から利便性と安全性をバランスさせることが肝要となる．セキュリティ対策の費用対効果を評価する方法として，「資産」「脅威」「対策案」の関係をモデル化し，対策選定問題を離散最適化問題として定式化する手法が提案されているが，想定されているのは外部からの侵入者であり，悪意を持って不正を行う内部者に対する対策選定を陽に扱っている既存研究は，著者らが調査した限りでは存在しない．そこで本稿では内部不正対策としての欺瞞の最適な組合せを論理的に求めるスキームを提案する．既存手法と同様，「資産」「脅威」「対策案」の関係を離散最適化問題として定式化していくが，提案手法では「脅威」として内部犯を，「対策案」として欺瞞を陽に含める．また，内部犯対策の効果を評価する際には，悪意のない正規ユーザの利便性も含めてモデル化する必要がある．そこで提案手法では，「資産」「脅威」「対策案」に「業務」を加える．選択された対策が業務の「利便性」に及ぼす制約条件として既存手法の目的関数を最大化するという定式化を行うことによって，既存手法を内部犯対策（欺瞞機構）を包含するセキュリティ対策選定手法へと昇華させる．","subitem_description_type":"Other"}]},"item_4_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"8","bibliographic_titles":[{"bibliographic_title":"研究報告セキュリティ心理学とトラスト（SPT）"}],"bibliographicPageStart":"1","bibliographicIssueDates":{"bibliographicIssueDate":"2023-07-17","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"25","bibliographicVolumeNumber":"2023-SPT-52"}]},"relation_version_is_last":true,"weko_creator_id":"44499"},"id":227032,"updated":"2025-01-19T12:18:00.265705+00:00","links":{},"created":"2025-01-19T01:26:20.908360+00:00"}