5103-toku1.indd

Size: px

Start display at page:

Download "5103-toku1.indd"

ゆあごみぶち
5 years ago
Views:

1 Web Malicious Software 2001 1 20 21 1 90 90 2001 7 CERT/CC 2 1 While we believe that this level of intruder activity is

1994 Spafford 2 3 90 If the source of the instructions was an individual who intended that the abnormal behavior occur,

1 1 Web Malicious Software CERT/CC 2 1 While we believe that this level of intruder activity is not unusual, additional concern may be warranted in light of a new emerging class of "malware" such as W32/Leaves Spafford If the source of the instructions was an individual who intended that the abnormal behavior occur, then we consider this malicious coding ; authorities have sometimes referred to this code as malware and vandalware

2 Rootkit Keylogger PC USB Windows OS 3 4 OS Web PC ZIP ransom scare Web PC 238

3 PC Microsoft Word 5 6 PC PC 7 IRC 8 HTTP DDoS 9 W32 Sobig.a Sobig.b SF 70 SF SF David Gerrold 1972 When HARLIE Was One 10 SF 11 John Brunner 1975 The Shockwave Rider tapeworm SF 1949 John von Neumann Neumann BBN Bob Thomas ARPANET Creeper Creeper "I'M THE CREEPER : CATCH ME IF YOU CAN" Reaper Creeper Reaper Creeper 1980 PARC John F. Shoch Jon A. Hupp PARC PARC 1982 Richard Skrenta Elk Cloner Elk Cloner Apple II 50 Elk Cloner : The program with a personality It will get on all your disks It will infiltrate your chips Yes it's Cloner! It will stick to you like glue It will modify ram too Send in the Cloner! 1

4 Year Malware Creeper (1 st worm) 1972 # The term virus first appeared in a SF novel When HARLIE Was One # The term worm first appeared in a SF novel The Shockwave Rider Xerox PARC Worm Elk Cloner (1 st virus) # Cohen defined virus in his paper Computer Viruses - Theory and Experiments Brain (1 st IBM PC virus), PC-Write (1 st Trojan horse), Virdem 1987 Cascade, Jerusalem, Lehigh, Christmas Tree, MacMag 1988 Byte Bandit, Stoned, Scores, Morris Worm 1989 AIDS (1 st ransomware), Yankee Doodle, WANK (1 st polymorphic virus), Form, Whale 1991 Tequila, Michelangelo, Anti-Telefonica, Eliza 1992 Peach (1 st anti-antivirus programs), Win.Vir_1_4 (1 st Windows virus) 1993 PMBS 1994 Good Times (1 st hoax) 1995 Concept (1 st macro virus) 1996 Laroux, Staog (1 st Linux m.w.) 1997 ShareFun, Homer, Esperanto 1998 Accessiv, StrangeBrew (1 st Java m.w.), Chernobyl 1999 Happy99, Tristate, Melissa, ExploreZip, BubbleBoy, Babylonia 2000 Loveletter, Resume, MTX, Hybris 2001 Anna Kournikova, BadTrans, CodeRed I, Sircam, CodeRed II, Nimda, Klez 2002 LFM-926 (1 st Flash m.w.), Chick, Fbound, Shakira, Bugbear 2003 Sobig, SQLSlammer, Deloder, Sdbot, Mimail, Antinny, MSBlaster, Welchia, Agobot, Swen, Sober Bagle, MyDoom, Doomjuice, Netsky, WildJP, Witty, Sasser, Wallon, Bobax, Rbot, Cabir (1 st Symbian m.w.), Amus, Upchan, Revcuss, Lunii, Minuka, Vundo Bropia, Locknut, BankAsh, Banbra, Anicmoo, Commwarrior, Pgpcoder, Zotob, Gargafx, Peerload, Cardblock, PSPBrick (1 st PSP m.w), DSBrick (1 st Nintendo DS m.w.), Dasher Kaiten, Leap (1 st Mac OS X m.w.), Redbrowser, Cxover, Exponny, Mdropper, Flexispy, Spaceflash, Stration, Mocbot, Fujacks, Allaple 2007 Storm Worm, Pirlames, Zlob, Srizbi (1 st full-kernel m.w.), Silly, Pidief 2008 Mebroot, Infomeiti, Conficker 2009 Virux, Yxes, Gumbler, Induc 2010 Zimuse 240

5 1984 Fred Cohen "Computer Viruses - Theory and Experiments" Farooq Alvi IBM PC Brain Brain PC Brain Brain Welcome to the Dungeon 1986 Basit * Amjad pvt Ltd. BRAIN COMPUTER SERVICES 730 NIZAM BLOCK ALLAMA IQBAL TOWN LAHORE-PAKISTAN PHONE: ,443248, Beware of this VIRUS... Contact us for vaccination... PC-Write PC-Write FAT 1988 sendmail fingerd rsh/rexec Morris 6,000 UNIX 10% CERT/CC 1990 Virus Exchange BBS MtE 13 VCL 14 PS-MPC 15 1 Polymorphic Concept Microsoft Word Concept 1999 Melissa Word Word NORMAL.DOT Word PC Outlook 50 Word Melissa 2000 Windows Windows CodeRed I Windows 16 NT/2000 IIS HTTP 1 30 Web Nimda Nimda CodeRed IIS CodeRed II CodeRed I Windows Nimda Internet Explorer Nimda Web PC Microsoft SQL Server MSDE SQLSlammer 1

6 376 Byte 1 UDP 10 75,000 SQL Windows RPC MSBlaster Microsoft 800 MSBlaster Windows Update DDoS Microsoft DNS windowsupdate.com 19 Welchia MSBlaster MSBlaster Windows Update 2000 Sobig MyDoom NetSky Sasser P2P Winny Antinny 2004 PC Sdbot Agobot Rbot Windows IRC 2000 MSBlaster SQL Conficker Conficker MSBlaster Arbor Networks , Conficker USB URL PC P2P Web Web PC Gumblar Gumblar Web PC FTP FTP Web Gumblar Web

7 1 ISBN : (2007). 2 CERT/CC : W32/Leaves : Exploitation of Previously Installed SubSeven Trojan Horses, CERT Incident Note IN (2001). 3 Spafford, E. H. : Computer Viruses as Artificial Life, MIT Press, Volume 1, Issue 3 pp (1994). 4 NIST : Guide to Malware Incident Prevention and Handling, NIST Special Publication (2005) nicter KDD KDDI NICT

スライド 1

スライド 1 2012 年 2 月 10 日 NICT 情報セキュリティシンポジウム 2012 サイバー攻撃に対する NICT の最新の取り組みと今後の課題独立行政法人情報通信研究機構 (NICT) ネットワークセキュリティ研究所サイバーセキュリティ研究室井上大介 1 サイバー攻撃のツール : マルウェア Malware = Malicious( 悪意のある )+ Software - 情報漏えいやデータの破壊