{"metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00229416","sets":["581:11107:11120"]},"path":["11120"],"owner":"44499","recid":"229416","title":["日本国内におけるメールセキュリティに関する実態把握"],"pubdate":{"attribute_name":"公開日","attribute_value":"2023-11-15"},"_buckets":{"deposit":"17b622d5-cbc7-42d1-8c82-1592dd6a2799"},"_deposit":{"id":"229416","pid":{"type":"depid","value":"229416","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"日本国内におけるメールセキュリティに関する実態把握","author_link":["616922","616924","616927","616920","616926","616919","616923","616918","616925","616921"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"日本国内におけるメールセキュリティに関する実態把握"},{"subitem_title":"A Study on Email Security Practices in Japan","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"[一般論文（推薦論文，特選論文）] 暗号化ZIP添付送付，PPAP，セキュリティシアター，メールセキュリティ","subitem_subject_scheme":"Other"}]},"item_type_id":"2","publish_date":"2023-11-15","item_2_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"大阪公立大学大学院情報学研究科"},{"subitem_text_value":"東京大学空間情報科学研究センター"},{"subitem_text_value":"東京大学大学院情報理工学系研究科ソーシャルICT研究センター"},{"subitem_text_value":"東京大学大学院情報理工学系研究科ソーシャルICT研究センター"},{"subitem_text_value":"株式会社国際電気通信基礎技術研究所"}]},"item_2_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"Graduate School of Informatics, Osaka Metropolitan University","subitem_text_language":"en"},{"subitem_text_value":"Center for Spatial Information Science, The University of Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Social ICT Research Center, Graduate School of Information Science and Technology, The University of Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Social ICT Research Center, Graduate School of Information Science and Technology, The University of Tokyo","subitem_text_language":"en"},{"subitem_text_value":"Advanced Telecommunications Research Institute International","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/229416/files/IPSJ-JNL6411011.pdf","label":"IPSJ-JNL6411011.pdf"},"date":[{"dateType":"Available","dateValue":"2025-11-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-JNL6411011.pdf","filesize":[{"value":"1.5 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"8"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"faba9b87-8156-4c20-8f1f-e2bf6e8198e1","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2023 by the Information Processing Society of Japan"}]},"item_2_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"近藤, 大嗣"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"澁谷, 遊野"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"山口, 利恵"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"中田, 登志之"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"浅見, 徹"}],"nameIdentifiers":[{}]}]},"item_2_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Daishi, Kondo","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Yuya, Shibuya","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Rie, Yamaguchi","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Toshiyuki, Nakata","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Tohru, Asami","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_2_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN00116647","subitem_source_identifier_type":"NCID"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_6501","resourcetype":"journal article"}]},"item_2_publisher_15":{"attribute_name":"公開者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"item_2_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"1882-7764","subitem_source_identifier_type":"ISSN"}]},"item_2_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"メールにおける添付ファイルの送信手法として用いられる，暗号化したZIPファイルを送付するセキュリティ対策手法（通称「PPAP」）はセキュリティリスク削減効果がないうえ，有害である場合もあるものの，国内の企業や公共団体を中心に広く利用されていて社会的課題となっている．そこで本研究では，国内企業・団体を対象とした質問紙調査およびメールセキュリティ解析に基づき，PPAP等のメールセキュリティ対策の国内での利用状況の実態を明らかにする．本稿では調査の結果概要を速報値的に報告する．調査の結果，2022年6月現在，質問紙調査に回答した組織344件のうち約64%がPPAPを利用していて，PPAP利用組織の88%がPPAPの有害性・無効性を認識しているにもかかわらず利用を続けていることが明らかになった．また，PPAPに対する攻撃に対して脆弱なメール運用を行っている組織が多いことも明らかになった．","subitem_description_type":"Other"}]},"item_2_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Japanese companies and organizations widely use PPAP (i.e., attaching an encrypted ZIP file to a first email and then sending its password in a second email) as a security measure, despite the ineffectiveness and potential harm of the method. This study aims to clarify how, by whom, and why PPAP and other email security measures are chosen on the basis of a questionnaire survey and an email security analysis. We provide a preliminary summary of the survey results. We revealed that approximately 64% of the 344 organizations that responded to the survey were still using PPAP (as of June 2022). Furthermore, 88% of the organizations that were using PPAP continued to use it even though they were aware of its harmfulness and ineffectiveness. We also revealed that many organizations performed email operations vulnerable to attacks against PPAP.","subitem_description_type":"Other"}]},"item_2_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"1547","bibliographic_titles":[{"bibliographic_title":"情報処理学会論文誌"}],"bibliographicPageStart":"1537","bibliographicIssueDates":{"bibliographicIssueDate":"2023-11-15","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"11","bibliographicVolumeNumber":"64"}]},"relation_version_is_last":true,"item_2_identifier_registration":{"attribute_name":"ID登録","attribute_value_mlt":[{"subitem_identifier_reg_text":"10.20729/00229306","subitem_identifier_reg_type":"JaLC"}]},"weko_creator_id":"44499"},"id":229416,"updated":"2025-01-19T11:31:38.466768+00:00","links":{},"created":"2025-01-19T01:28:33.361714+00:00"}