CCC DATAset 2009 によるマルウェア配布元の可視化
|
|
|
- みいか しげい
- 9 years ago
- Views:
Transcription
1 CCC DATAset F CCC DATAset URL Visualization of the Malware distribution by CCC DATAset 2009 Takahiro Matsuki Yuu Arai Risk Research Institute of Cyber Space, Little earth Corporation Co., Ltd Toranomon Minato-Ku Tokyo Japan [email protected], [email protected] Abstract The domestic BOTs infection decreases by continuation of the attention by the Cyber Clean Center. However, most undetectable malware are distributed from foreign countries. In this paper, promote the grasp of the actual situation by making the geographical distribution of the malware distribution visible with CCC DATAset Also downloader and infection to plural malware are increasing recently. Because make a URL list of the distribution of the malware and examine a method to prevent infection expansion with the downloader. 1 Web Web USB MWS 2008 [1]
2 CCC DATAset 2009 URL 2 CCC DATAset 2009 IP Geolocation GeoLite City [3] Google Maps API [4] 1 F-Secure [6] 2.1 IP ,494 IP IP 357 IP 1 1 1: IP IP % 274 IP 1 10 IP 94% IP 11 IP IP 5 IP IP 1 1 IP IP IP, 5 IP % 2.2 1,494 IP % 1 IP
3 1: 2: IP IP 1 1, , ,001 5,000 4 IP TSPY KOLABC.CH TSPY KOLABC.CH 11 2,084 IP A 923 IP B 2 TSPY KOLABC.CH IP 2 A B TSPY KOLABC.CH A B : TSPY KOLABC.CH TSPY KOLABC.CH BKDR POEBOT.GN WORM SWTYMLAI.CD Web [7] BKDR POEBOT.GN 569 WORM SWTYMLAI.CD 1 IP TSPY KOLABC.CH KML Google Earth [5]
4 3: TSPY KOLABC.CH 2.3 Web 80 Web Web IP 4 Web CCC DATAset 2009 CCC DATAset 2009 Web IP 80 1 CCC DATAset , , % 5 X Y IP BKDR PROTUX.AHB [2] HTTP HTTP 3 CCC DATAset , , % CCC DATAset ,942,221 1,157, % CCC DATAset :
5 4: Web 4 URL 80 CCC DATAset 2009 HTTP URL URL URL % % HTTP GET URL 3 URL 2.2 TSPY KOLABC.CH URL ICQ AIM Firefox URL 4 PE BOBAX.AF-O [8] 3: HTTP GET URL 3/13 honeypot honeypot /14 honeypot honeypot URL URL 22 URL 4.1 DB Web Web IP URL
6 URL 4: URL AIM.exe Win95 98 NT4/ICQ 4/Lite Edition/icq4 setup.exe TSPY KOLABC.CH URL Stopbadware.org surbl.org Norton Safe Web Trend Micro Smart Protection Network 5 CCC DATAset 2009 URL NICT Telecom-ISAC Japan [1] (2008). Vol No.8 [2] /0812monthly.html [3] MaxMind - GeoLite City [4] Google Maps API [5] Google Earth API - Google Code [6] F-Secure Weblog : News from the Lab html [7] Trend Micto TSPY KOLABC.CH ve graywaredetails.asp?gname=tspy%5fkolabc %2ECH&VSect=Td [8] Avira Worm/Bobic.K.3 fulldetails/id vir/1189/worm bobic.k.3.html [9] StopBadware.org [10] surbl.org [11] Norton Safe Web
![Vol.2008. No.8 [2] 2008 12 https://www.ccc.go.jp/report/ 200812/0812monthly.html [3] MaxMind - GeoLite City http://www.maxmind.com/app/geolitecity [4] Google Maps API http://code.google.](/docs-images/47/20489052/images/page_6.jpg "com/intl/ja/apis/maps [5] Google Earth API - Google Code http://code.google.com/intl/ja/apis/earth [6] F-Secure Weblog : News from the Lab http://www.f-secure.com/weblog/archives/ 00001606.")
2 [2] Flow Visualizer 1 DbD 2. DbD [4] Web (PV) Web Web Web 3 ( 1) ( 1 ) Web ( 2 ) Web Web ( 3 ) Web DbD DbD () DbD DbD DbD 2.1 DbD DbD URL URL Google
![2 [2] Flow Visualizer 1 DbD 2. DbD [4] Web (PV) Web Web Web 3 ( 1) ( 1 ) Web ( 2 ) Web Web ( 3 ) Web DbD DbD () DbD DbD DbD 2.1 DbD DbD URL URL Google](/thumbs/39/20194526.jpg "2 [2] Flow Visualizer 1 DbD 2. DbD [4] Web (PV) Web Web Web 3 ( 1) ( 1 ) Web ( 2 ) Web Web ( 3 ) Web DbD DbD () DbD DbD DbD 2.1 DbD DbD URL URL Google")
Drive-by Download 1,a) 1,b) Web Drive-by Download(DbD) DbD Web DbD HTTP DbD Web DbD, Drive-by Download The Network Visualization Tool for detecting the Drive-by Download attacks. Amako Katsuhiro 1,a) Takada
29 jjencode JavaScript
Kochi University of Technology Aca Title jjencode で難読化された JavaScript の検知 Author(s) 中村, 弘亮 Citation Date of 2018-03 issue URL http://hdl.handle.net/10173/1975 Rights Text version author Kochi, JAPAN http://kutarr.lib.kochi-tech.ac.jp/dspa
表紙４＿１／山道 小川内 小川内 芦塚
1 2008.1Vol.23 2008.1Vol.23 2 2008.1Vol.23 3 2008.1Vol.23 4 5 2008.1Vol.23 2008.1Vol.23 6 7 2008.1Vol.23 2008.1Vol.23 8 9 2008.1Vol.23 10 2008.1Vol.23 11 2008.1Vol.23 12 2008.1Vol.23 Center 13 2008.1Vol.23
IPSJ SIG Technical Report Vol.2014-EIP-63 No /2/21 1,a) Wi-Fi Probe Request MAC MAC Probe Request MAC A dynamic ads control based on tra
1,a) 1 1 2 1 Wi-Fi Probe Request MAC MAC Probe Request MAC A dynamic ads control based on traffic Abstract: The equipment with Wi-Fi communication function such as a smart phone which are send on a regular
DEIM Forum 2010 D Development of a La
DEIM Forum 2010 D5-3 432-8011 3-5-1 E-mail: {cs06062,cs06015}@s.inf.shizuoka.ac.jp, {yokoyama,fukuta,ishikawa}@.inf.shizuoka.ac.jp Development of a Large-scale Visualization System Based on Sensor Network
H1-2-3-4.indd
1 1 1 2 3 9 9 10 10 12 12 14 14 16 16 17 18 19 21 28 1 26 11 22 26 11 23 26 11 24 Web 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 4 4 8 2 2 4 20 4 4 8 4 4 8 2 2 4 4 4 32 4 4 12 4 4 4 4 4 4 4 4 8 2
平常時火災における消火栓の放水能力に関する研究
Discharge Ability of Hydrant to Ordinary Fire Yoshiro Namba *1,Kenjiro Yasuno *2,Yoshiteru Murosaki *3,Akihiko Hokugo *4, Masahiro Fujiwara *5, Akihiro Kasuya *6,Hideo Matsuoka* 7 * 1 Department of Architecture,
, IT.,.,..,.. i
25 To construct the system that promote a interactive method as a knowledge acquisition 1140317 2014 2 28 , IT.,.,..,.. i Abstract To construct the system that promote a interactive method as a knowledge
17 Multiple video streams control for the synchronous delivery and playback 1085404 2006 3 10 Web IP 1 1 1 3,,, i Abstract Multiple video streams control for the synchronous delivery and playback Yoshiyuki
28 Docker Design and Implementation of Program Evaluation System Using Docker Virtualized Environment
28 Docker Design and Implementation of Program Evaluation System Using Docker Virtualized Environment 1170288 2017 2 28 Docker,.,,.,,.,,.,. Docker.,..,., Web, Web.,.,.,, CPU,,. i ., OS..,, OS, VirtualBox,.,
Web Web Web Web Web, i
22 Web Research of a Web search support system based on individual sensitivity 1135117 2011 2 14 Web Web Web Web Web, i Abstract Research of a Web search support system based on individual sensitivity
農研機構 食品総合研究所 研究報告 77号
Rep. Natl Food Res. InstNo 技 術 報 告 食 品 害 虫 サイトの 長 期 間 アクセス 解 析 --- A Long-Term Analysis of Access Trend to Food-Insect Site Yukio Magariyama, Kumiko Shichiri, Akihiro Miyanoshita, Taro Imamura, Satoshi
258 5) GPS 1 GPS 6) GPS DP 7) 8) 10) GPS GPS 2 3 4 5 2. 2.1 3 1) GPS Global Positioning System
Vol. 52 No. 1 257 268 (Jan. 2011) 1 2, 1 1 measurement. In this paper, a dynamic road map making system is proposed. The proposition system uses probe-cars which has an in-vehicle camera and a GPS receiver.
7,, i
23 Research of the authentication method on the two dimensional code 1145111 2012 2 13 7,, i Abstract Research of the authentication method on the two dimensional code Karita Koichiro Recently, the two
Core Ethics Vol. J O J O J O J O J O J O J O P C L P C L J O J O J O J O
Core Ethics Vol. J O * J O J O J O J O J O Core Ethics Vol. J O J O J O J O J O J O J O P C L P C L J O J O J O J O BGM P C L J O J O Core Ethics Vol. J O J O J O J O J O J O J O J O J O J O J O J O J
NA-F80D2S/F70D2S取扱説明書
NA-F80D2S NA-F70D2S C C B B B B B C C C C C C C C C C C C C C C C C C C C C C C C C C C C C 1 3 4 C C 2 2 C C CC C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C C B BB B B B B BB
評論・社会科学 ８４号（よこ）（Ｐ）／３．金子
1 1 1 23 2 3 3 4 3 5 CP 1 CP 3 1 1 6 2 CP OS Windows Mac Mac Windows SafariWindows Internet Explorer 3 1 1 CP 2 2. 1 1CP MacProMacOS 10.4.7. 9177 J/A 20 2 Epson GT X 900 Canon ip 4300 Fujifilm FinePix
3D UbiCode (Ubiquitous+Code) RFID ResBe (Remote entertainment space Behavior evaluation) 2 UbiCode Fig. 2 UbiCode 2. UbiCode 2. 1 UbiCode UbiCode 2. 2
THE INSTITUTE OF ELECTRONICS, INFORMATION AND COMMUNICATION ENGINEERS HCG HUMAN COMMUNICATION GROUP SYMPOSIUM. UbiCode 243 0292 1030 E-mail: {ubicode,koide}@shirai.la, {otsuka,shirai}@ic.kanagawa-it.ac.jp
Kyushu Communication Studies 第２号
Kyushu Communication Studies. 2004. 2:1-11 2004 How College Students Use and Perceive Pictographs in Cell Phone E-mail Messages IGARASHI Noriko (Niigata University of Health and Welfare) ITOI Emi (Bunkyo
IP S ( :H ) ( ) ( :H22 4
90 30 440 8515 4 101 0532 54 5111 0532 53 1379 IP 1. 2. 3. 11 1 1. 2. 12 0 1 2 3 8 0 8 0 8 S 5 5 0 5 2 1 13 0 5 0 4 (:H22 4 28 ) 1 1 0 5 () (:H22 4 28 ) 1 2 5 0 (: ) ー (: ) ー1 0 0 0 0 (: ) 1/26 50P7 21
<332D985F95B62D8FAC93638BA795DB90E690B62E706466>
No.50 pp.5568, 2014 Komazawa Journal of Geography Geography of Religion in Postwar Japan (2) ODA Masayasu 1 10 200211 1219972006 Keywords: geography of religion, Bibliography of Geography, Islam, sacred
Transformation and Various Aspects of Community Popular Education in Tokyo in Meiji Era Takeo Matsuda The purpose of this paper is to examine the variety and transformation of community popular education
(a) (b) 1 JavaScript Web Web Web CGI Web Web JavaScript Web mixi facebook SNS Web URL ID Web 1 JavaScript Web 1(a) 1(b) JavaScript & Web Web Web Webji
Webjig Web 1 1 1 1 Webjig / Web Web Web Web Web / Web Webjig Web DOM Web Webjig / Web Web Webjig: a visualization tool for analyzing user behaviors in dynamic web sites Mikio Kiura, 1 Masao Ohira, 1 Hidetake
Japanese Journal of Family Sociology, 29(1): (2017)
29 1 2017.4 要 約 47 1 2 3 4 2017291: 19 33 Relation of Social Stratum to Parental Education Strategies in Small Cities in Modern China: A Case Study of Shadow Education in Cixi City, Zhejiang Province,
1 Fig. 2 2 Fig. 1 Sample of tab UI 1 Fig. 1 that changes by clicking tab 5 2. Web HTML Adobe Flash Web ( 1 ) ( 2 ) ( 3 ) ( 4 ) ( 5 ) 3 Web 2.1 Web Goo
Web 1,a) 1,b) Web Web HTML Indicating Important Parts in Searched Web Pages by Retrieval Terms Yokoo Shunichi 1,a) Yoshiura Noriaki 1,b) Abstract: Users cannot always find retrieval terms immediately in
untitled
Studies in Human Geography 32 Geoenvironmental Sciences, Graduate School of Life and Environmental Sciences, University of Tsukuba, Japan ArcGIS Geography Network ArcGIS ArcGIS ArcGIS Geography Network
BJ-No.7 01 三好秀和.indd
Vol. 72013 1 1 AIJ 1 AIJ AIJ AIJ AIJ 1 2 3 4 AIJ 2 1986 1986 1 21986 2007 7 2 Vol. 7 3 4 1986 1986 5 5 6 31981 1984 1986 23 3 23 3 247 502 6 22 17 26.4 19.8 5 4 18 7 12 16 10915 200737 41 AIJ 52007 7 62011
2 33,**. + : +/* /++** +/* /++** +/* /++** /** /** F+ +*** F+ +*** / 1*42.,43 /14+,*42 /, , 134,.,43 / 0-41,*42.4, -/41,*43,34,,+4. +
1 BSE *,**+ 3 BSE,**- +23,2 + +,3 3+,**, * 2 33,**. + : +/* /++** +/* /++** +/* /++** /** /** F+ +*** F+ +*** / 1*42.,43 /14+,*42 /,341 24-14+ 24- +-4, 134,.,43 / 0-41,*42.4, -/41,*43,34,,+4. +/4../42,240
先端社会研究所紀要 第９号☆／２．島村
Kwansei Gakuin University Rep Title Author(s) Citation 熊 本 河 原 町 国 際 繊 維 街 の 社 会 史 : 闇 市 から 問 屋 街 そしてア ートの 街 へ Shimamura, Takanori, 島 村, 恭 則 関 西 学 院 大 学 先 端 社 会 研 究 所 紀 要 = Annual review of advanced social
ウイルスバスター2012 クラウド ガイドブック
インストール ときは Windows 2012 2012 2012 30/60/90 基本的な使いかたこんな ...3...5...9...13...16...18...20...21...23 2...24...26...27...30...33...37...40...43...44...48 2 基本的な使いかたこんなときは 1. 5 2. 9 3. 13 4. 21 3 インストール 1 3
:- Ofer Feldman,Feldman : -
- -- E-mail: [email protected] : - :- Ofer Feldman,Feldman : - : : : Mueller : - Mueller :.. : ... :........ .. : : : - : Kawano & Matsuo: - : - : - : : No. Feldman, Ofer (), The Political
![宅建練馬表478号1_4ol [更新済み].eps](/thumbs/39/20197934.jpg "宅建練馬表478号1_4ol [更新済み].eps")
Core Ethics Vol. -
Core Ethics Vol. - Core Ethics Vol. - AV LSSLSS, CIL CIL, Core Ethics Vol. , Core Ethics Vol.,, K ALS Core Ethics Vol. emotional labor Hochschild : Core Ethics Vol. QOL ALS - / ALS ALS - vol.. vol. :
<95DB8C9288E397C389C88A E696E6462>
2011 Vol.60 No.2 p.138 147 Performance of the Japanese long-term care benefit: An International comparison based on OECD health data Mie MORIKAWA[1] Takako TSUTSUI[2] [1]National Institute of Public Health,
1 DHT Fig. 1 Example of DHT 2 Successor Fig. 2 Example of Successor 2.1 Distributed Hash Table key key value O(1) DHT DHT 1 DHT 1 ID key ID IP value D
P2P 1,a) 1 1 Peer-to-Peer P2P P2P P2P Chord P2P Chord Consideration for Efficient Construction of Distributed Hash Trees on P2P Systems Taihei Higuchi 1,a) Masakazu Soshi 1 Tomoyuki Asaeda 1 Abstract:
GN151-200.doc
Good News No.151 Good News No.152 Good News No.153 Good News No.154 Good News No.155 Good News No.156 Good News No.157 Good News No.158 Good News No.159 CO2 Good News No.160 Good News No.161 Good
IPSJ SIG Technical Report Vol.2013-CE-122 No.16 Vol.2013-CLE-11 No /12/14 Android 1,a) 1 1 GPS LAN 2 LAN Android,,, Android, HTML5 LAN 1. ICT(I
Android 1,a) 1 1 GPS LAN 2 LAN Android,,, Android, HTML5 LAN 1. ICT(Information and Communication Technology) (Google [2] [5] ) 2. Google 2.1 Google Google [2]( 1) Google Web, Google Web Google Chrome
No.208_honbun.indd
ISSN 0386-7889 No.208 interview 2016.3 March special issue topics info 1 2 challenge trend Japan Data Communications Association CONTENTS 2016.3 March No.208 foreword 1 interview 2 special issue 8 topics
少子化の動向と出生率に関する研究サーベイ
ESRI Research Note No.17 March 2011 Economic and Social Research Institute Cabinet Office Tokyo, Japan ESRI Research Note ESRI 03-3581-0919 1 1 2 3 4 5 6 2 3 18 50 2005 6 1 7 12,482 8,734 70.0 50 2005
004-paper-maeda.indd
4 A study of historical transition on the producer system in Japanese film industries : A view for the redefinition of film producers 立 命 館 大 学 大 学 院 政 策 科 学 研 究 科 博 士 後 期 課 程 前 田 耕 作 MAEDA, Kosaku 立 命
先端社会研究 ★５★号／４．山崎
71 72 5 1 2005 7 8 47 14 2,379 2,440 1 2 3 2 73 4 3 1 4 1 5 1 5 8 3 2002 79 232 2 1999 249 265 74 5 3 5. 1 1 3. 1 1 2004 4. 1 23 2 75 52 5,000 2 500 250 250 125 3 1995 1998 76 5 1 2 1 100 2004 4 100 200
WebRTC P2P Web Proxy P2P Web Proxy WebRTC WebRTC Web, HTTP, WebRTC, P2P i
26 WebRTC The data distribution system using browser cache sharing and WebRTC 1150361 2015/02/27 WebRTC P2P Web Proxy P2P Web Proxy WebRTC WebRTC Web, HTTP, WebRTC, P2P i Abstract The data distribution
1 Web [2] Web [3] [4] [5], [6] [7] [8] S.W. [9] 3. MeetingShelf Web MeetingShelf MeetingShelf (1) (2) (3) (4) (5) Web MeetingShelf
![1 Web [2] Web [3] [4] [5], [6] [7] [8] S.W. [9] 3. MeetingShelf Web MeetingShelf MeetingShelf (1) (2) (3) (4) (5) Web MeetingShelf](/thumbs/79/80104027.jpg "1 Web [2] Web [3] [4] [5], [6] [7] [8] S.W. [9] 3. MeetingShelf Web MeetingShelf MeetingShelf (1) (2) (3) (4) (5) Web MeetingShelf")
1,a) 2,b) 4,c) 3,d) 4,e) Web A Review Supporting System for Whiteboard Logging Movies Based on Notes Timeline Taniguchi Yoshihide 1,a) Horiguchi Satoshi 2,b) Inoue Akifumi 4,c) Igaki Hiroshi 3,d) Hoshi
Google Social Influences and Legal Issues of Google Street View Hiroshi Takada
Social Influences and Legal Issues of Google Street View Hiroshi Takada Sanno University Bulletin Vol. No. September Social Influences and Legal Issues of Google Street View Hiroshi Takada In this paper,
63 Author s Address: A Study on the Activities and Characteristics of Johnny s fans in china WEI Ran, LU Yijing Foreign Lang
63 Author s E-mail Address: [email protected] A Study on the Activities and Characteristics of Johnny s fans in china WEI Ran, LU Yijing Foreign Language Education Center, Kobe Shoin Women s University
10_細川直史.indd
GIS Theory and Applications of GIS, 2010, Vol. 18, No.1, pp.79-85 電子タグによる屋内測位を利用した携帯電話からの通報システム 細川直史 * 高梨健一 ** 滝澤修 *** Emergency Call System by Cellular-phone equipped with RFID Positioning Masafumi HOSOKAWA*,
Cisco Identity Services Engine Supported Mac OS X AV/AS Products Version 3.6.10591.2
Cisco Identity Services Engine Supported Mac OS X AV/AS Products Compliance Module Version 3.6. 10591.2 This document provides Mac OS X AV/AS support information on the Cisco NAC Agent versions 4.9.2.701-4.9.5.x.
Core Ethics Vol. Epstein, CI CI CI CI CI CI CI CI Epstein, CI CI CI CI CI CI CI CI CI CI Schindler, CI CI CI CI NIH CI Finn FDA / M CI N CI N / M, CI
Core Ethics Vol. Cochlear Implant CI,, CI CI,,, CI CI CI CI CI, CI CI CI CI CI CI CI CI CI CI CI CI CI Core Ethics Vol. Epstein, CI CI CI CI CI CI CI CI Epstein, CI CI CI CI CI CI CI CI CI CI Schindler,
目 次
1 2 3 t 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 IP 169 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67
IPSJ SIG Technical Report Vol.2011-EC-19 No /3/ ,.,., Peg-Scope Viewer,,.,,,,. Utilization of Watching Logs for Support of Multi-
1 3 5 4 1 2 1,.,., Peg-Scope Viewer,,.,,,,. Utilization of Watching Logs for Support of Multi-View Video Contents Kosuke Niwa, 1 Shogo Tokai, 3 Tetsuya Kawamoto, 5 Toshiaki Fujii, 4 Marutani Takafumi,
