()
1.... 4 2.... 5 3.... 6 3.1... 6 3.2... 7 4.... 8 4.1.1... 8 4.1.2... 10 4.1.3 ()... 11 4.1.4... 12 4.1.5... 14 4.2 2003... 15 4.2.1 2003... 17 5.... 19 5.1... 19 5.1.1 2002... 20 5.1.2... 21 5.1.3... 26 5.1.4... 28 5.1.5... 29 5.1.6... 30 5.2 ( 03)... 31 5.3... 31 5.3.1... 31 5.3.2 ( 03)... 33 5.4 ( 03)... 33 5.4.1... 33 5.4.2... 34 5.4.3... 34 5.5 2002... 35 5.5.1 ( 02)( 03)... 37 5.5.2 20022003... 37 6.... 40 6.1... 40 1
6.2... 41 6.3... 41 6.3.1... 41 6.3.2... 41 6.3.3... 44 6.4... 45 7. ()... 47 7.1... 47 7.1.1... 47 7.1.2... 47 7.2... 49 7.3... 57 7.4... 59 7.5... 59 8.... 60 2
JNSA NTT ELNIS SRA NPO (JNSA) JNSA sec@jnsa.org Copyright 2004. NPO (JNSA) 3
1. NPO (JNSA) () JNSA JNSA RISTEX IT 4
2. 5
3. 2002 3.1 6
3.2 7
4. 2003 2002 4.1.1 54 ( 95% ) 16 ( 28% ) 5 ( 5%) 8
4-12003 No. No. 1 1,000 1 2 FD 2 3 Email 202 3 4 Web 4 5 Email 190 5 6 FD 220 6 7 () Web 443 7 8 FD 7,381 8 9 1,500 9 10 () Web 450,000 10 11 () 92 11 12 () 574 12 13 Email 13 14 FD 15,000 14 15 2 15 16 1,300 16 17 950 17 18 Email 2,800 18 19 Email 98 19 20 () PC 100 20 21 800 21 22 () Email 170 22 23 Web 23,000 23 24 () Web 210 24 25 560,000 25 26 () PC 1,300 26 27 () Web 761 27 28 325 28 29 Email 573 29 30 FD 30 31 74 31 32 () Web 128 32 33 Email 480 33 34 126 34 35 FD 1,453 35 36 182,780 36 37 Web ID 37 38 Web 240 38 39 Email 173 39 40 Web 6,000 40 41 FTP 79,110 41 42 75 42 43 1,370 43 44 PC 3,974 44 45 FD 58,515 45 46 () 872 46 47 Web 1,912 47 48 10 48 49 PC 197 49 50 () Web 1,200 50 51 () PC 51 52 280 52 53 PC 4,312 53 54 131,742 54 55 Email 9 55 56 985 56 57 () FD 9,584 57 1,554,592 45 35 19 13 25 6 16 30,482.2 79% 61% 33% 23% 44% 11% 28% 9
4.1.2 4-2 79% % 33% % % % % 4-1 10
4-3 ID 4.1.3 () 4-2 11
4.1.4 4-3 4-2 12
4-4 13
4-3 4.1.5 (90%) (82%) (88%) (98%) (95%) (86%) (57%) 27% 39% 14
4.2 2003 2002 2003 5 4-1 2806,936 55,038 1554,592 3 482 15
4-4 4-42003 No. No. 1 1,000 2 1 11 2 2 3 66 66,000 1 2 2 1 11 1 1 1 6 2 3 202 1 1 2 2 1 3 6 1,212 3 4 1 1 2 1 1 3 3 4 5 190 1 1 2 1 1 1 1 190 5 6 220 2 1 11 1 1 6 33 7,260 6 7 () 443 1 1 2 1 1 1 1 443 7 8 7,381 2 1 11 1 1 3 17 121,787 8 9 1,500 1 1 2 2 1 6 12 18,000 9 10 () 450,000 1 1 2 1 1 6 6 2,700,000 10 11 () 92 1 1 2 2 1 1 2 184 11 12 () 574 1 2 6 2 1 6 36 20,664 12 13 2 1 11 2 1 3 33 13 14 15,000 2 3 35 2 1 6 210 3,150,000 14 15 2 1 1 2 2 1 1 2 4 15 16 1,300 3 1 101 2 1 6 606 787,800 16 17 950 1 1 2 1 1 3 3 2,850 17 18 2,800 1 1 2 2 1 1 2 5,600 18 19 98 3 1 101 2 1 6 606 59,388 19 20 () 100 2 2 15 2 1 3 45 4,500 20 21 800 2 2 15 2 1 6 90 72,000 21 22 () 170 1 1 2 1 1 1 1 170 22 23 23,000 1 1 2 1 1 1 1 23,000 23 24 () 210 1 1 2 2 1 6 12 2,520 24 25 560,000 1 1 2 1 1 6 6 3,360,000 25 26 () 1,300 3 1 101 2 1 6 606 787,800 26 27 () 761 1 3 26 2 1 6 156 118,716 27 28 325 1 2 6 2 1 6 36 11,700 28 29 573 1 1 2 2 1 1 2 1,146 29 30 3 1 101 1 1 6 303 30 31 74 1 2 6 2 1 6 36 2,664 31 32 () 128 1 1 2 2 1 6 12 1,536 32 33 480 1 1 2 2 1 1 2 960 33 34 126 1 3 26 2 1 6 156 19,656 34 35 1,453 1 3 26 2 1 6 156 226,668 35 36 182,780 1 1 2 1 1 6 6 1,096,680 36 37 1 1 2 2 1 6 12 37 38 240 3 1 101 2 1 3 303 72,720 38 39 173 1 1 2 2 1 1 2 346 39 40 6,000 2 1 11 1 1 6 33 198,000 40 41 79,110 2 2 15 2 1 6 90 7,119,900 41 42 75 2 2 15 2 1 6 90 6,750 42 43 1,370 1 1 2 2 1 3 6 8,220 43 44 3,974 1 2 6 2 1 3 18 71,532 44 45 58,515 1 1 2 2 1 6 12 702,180 45 46 () 872 2 1 11 2 1 6 66 57,552 46 47 1,912 1 1 2 1 1 6 6 11,472 47 48 10 2 2 15 2 1 6 90 900 48 49 197 2 1 11 1 1 6 33 6,501 49 50 () 1,200 2 1 11 2 1 6 66 79,200 50 51 () 2 2 15 1 1 6 45 51 52 280 2 3 35 2 1 6 210 58,800 52 53 4,312 2 2 15 2 1 6 90 388,080 53 54 131,742 1 1 2 1 1 6 6 790,452 54 55 9 1 1 2 1 1 3 3 27 55 56 985 1 2 6 2 1 3 18 17,730 56 57 () 9,584 3 1 101 2 1 6 606 5,807,904 57 1,554,592 28,069,364 30,482.2 550,380 16
4.2.1 2003 4-5 17
4-6 4-7 18
5. 2002 5.1 2003 ( 03) EP 5.1.2EP y EP 2 1 + X 5-12003 19
5.1.1 2002 2002 5-1 5-1 5-2 = 5-1( 02) 5-1( 02) = 100 (3) = 500 () = 1000 = 10 ID, = 300 = 2.0 = 1.0 = 2.0 = 1.0 = 1.5 = 1.0 = 1.0 = 2.0 = 4.0 5-2( 02) 1 1000 10002000 20005000 5000 () 0 5,000 ( 5,000) 10,000 ( 10,000) 50,000 ( 50,000) 50,000 (100,000) 20
5.1.2,,,,,,,,,,,DNA,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,(),,,,,,,,,,,,,, /,,,,,,,,,,,,,,,,,,,,,,,,,,,,, ID /,ISP /,,, 21
,,,,,,,, 3 22
5-2EP y X 23
24 5-3EP DNA / / () X y DNA / / () X y
3 yy /,,, /,, 2,, ISP /,,,,,,, 1,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,, DNA,,,,,,,,,,,,,,,,,,,,,,,,,,,, 1 2 3 X 5-4Simple-EP 25
5.1.3 5-2 5.1.3.1 JIS Q 15001 5.1.2 26
5-4 Simple-EP 5-3 10 x-1 +5 y-1 x = y = 5-3 5-3 = 3 100 = 3 n = 3 n 5-4 Simple-EP x=2 y=3 5-3 =35 27
= { } {} = (1, 1) {}=(2, 1) {} = (1,3) Max(x) = 2, Max(y) = 3 = 10 1 +5 2 = 35 5-4 5.1.3.2 5-3 5-3 + 5.1.4 28
5-4 2 5.1.5 5-5 1 2 29
5.1.6 30
5.2 ( 03) 2003 ( 03) [500] [Max10 x-1 +5 y-1 ] [6, 3, 1] [2, 1] [2, 1] 5-5( 03) EP 5-2Simple-EP 5-4 5-2 5-3 JO JNSA Damage Operation Model for Individual Information Leak 5.3 ( 03) 5.3.1 31
5-6 () () 1 5-6 32
5.3.2 ( 03) [500] [Max10 0 +5 0 =2] [6] [2] [1] 12,000 5-7( 03) 5.4 ( 03) ( 03)EP ( 02) ( 02)( 03) ( 03) ( 03) 5.4.1 33
5.4.2 5.4.3 34
5.5 2002 ( 02)( 03) 2002 ( 03) 2002 5-7( 03) 5-8 5-7 Email Web FTP Web Web Email Web Web Email Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Web Email Web Email IP Web Web Web Web Email Web Email Web Web Web Web Web 35
5-82002 () No. (x) (y) () No. 1 1,900 1 1 2 2 1 3 6 11,400 1 2 () 10,000 1 1 2 1 1 1 1 10,000 2 3 1,388 1 1 2 2 1 6 12 16,656 3 4 2,972 1 1 2 2 1 6 12 35,664 4 5 68,471 2 2 15 2 1 3 45 3,081,195 5 6 900 1 1 2 2 1 1 2 1,800 6 7 22 1 1 2 1 1 6 6 132 7 8 370 1 1 2 1 1 3 3 1,110 8 9 1,462 1 1 2 2 1 1 2 2,924 9 10 4,300 1 1 2 2 1 3 6 25,800 10 11 1 1 2 2 1 1 2 11 12 730 1 1 2 1 1 6 6 4,380 12 13 () 4,000 1 1 2 1 1 6 6 24,000 13 14 () 4,000 1 1 2 1 1 6 6 24,000 14 15 10,000 1 1 2 1 1 6 6 60,000 15 16 60 1 1 2 2 1 6 12 720 16 17 368 1 1 2 1 1 6 6 2,208 17 18 1,303 2 1 11 1 1 6 33 42,999 18 19 1 1 2 1 1 1 1 19 20 800 1 1 2 2 1 6 12 9,600 20 21 350 2 1 11 1 1 6 33 11,550 21 22 1,000 1 1 2 1 1 3 3 3,000 22 23 1,800 1 1 2 1 1 6 6 10,800 23 24 () 37,000 2 1 11 1 1 6 33 1,221,000 24 25 45,000 2 1 11 1 1 6 33 1,485,000 25 26 () 242 1 1 2 2 1 6 12 2,904 26 27 340 1 1 2 2 1 6 12 4,080 27 28 1,500 1 1 2 2 1 6 12 18,000 28 29 4,700 2 1 11 2 1 6 66 310,200 29 30 14,000 2 1 11 1 1 6 33 462,000 30 31 () 700 1 1 2 1 1 6 6 4,200 31 32 2,000 1 1 2 1 1 6 6 12,000 32 33 () 280 1 1 2 2 1 6 12 3,360 33 34 () 6,541 1 1 2 1 1 6 6 39,246 34 35 2 2 15 1 1 1 8 35 36 () 1,100 1 1 2 2 1 6 12 13,200 36 37 5,000 1 1 2 2 1 6 12 60,000 37 38 1,600 1 1 2 1 1 3 3 4,800 38 39 1,200 1 1 2 1 1 6 6 7,200 39 40 2,093 2 1 11 1 1 3 17 34,535 40 41 100,000 2 2 15 2 1 6 90 9,000,000 41 42 1 2 6 2 1 6 36 42 43 1 1 2 2 1 6 12 43 44 1,700 1 1 2 1 1 3 3 5,100 44 45 304 2 1 11 2 1 3 33 10,032 45 46 17,000 2 1 11 2 1 6 66 1,122,000 46 47 () 350 1 1 2 2 1 1 2 700 47 48 398 1 1 2 1 1 6 6 2,388 48 49 235 1 1 2 2 1 6 12 2,820 49 50 3,244 1 1 2 1 1 6 6 19,464 50 51 1,200 1 1 2 1 1 6 6 7,200 51 52 400 2 1 11 1 1 1 6 2,200 52 53 50,000 2 1 11 1 1 6 33 1,650,000 53 54 335 1 1 2 1 1 6 6 2,010 54 55 () 59 1 1 2 2 1 1 2 118 55 56 () 1 3 26 2 1 3 78 56 57 483 1 1 2 1 1 6 6 2,898 57 58 65 1 1 2 1 1 6 6 390 58 59 () 154 1 1 2 2 1 6 12 1,848 59 60 () 190 2 1 11 2 1 6 66 12,540 60 61 3,107 1 1 2 1 1 6 6 18,642 61 62 1 1 2 2 1 3 6 62 418,716 18,922,013 7,613.0 344,037 36
5.5.1 ( 02)( 03) 2002 ( 02)( 03) 5-9 5-9 ( 02) 1514,270 100 24,036 36,165 5,0001 510 ( 03) 1892,201 90 34,403 45,191 1,000 9 ( 03) 1,000 ( 02) ( 02) 5,000 ( 03) 6,000 12,000 ( 03) 5.5.2 20022003 5-1020022003 2002 2003 6255 5751 1892,201 2806,936 90 711990 34,403 55,038 418,716 1554,592 10 56 7,613 30,482 37
5-5 5-6 2002 10 2003 10 19% 38
39 5-7 5,000 2002 2003 70%5,000 5 3 6 2003
6. 2003 2003 6.1 10% 10 10% 6-1 1000 1000 600 900 100 100 30 CRM 40
6.2 10 30 6.3 2003 6.3.1 6.3.1.1 100 12 10% 8,330 6.3.1.2 10% 100 12 10 % 10 % 830 6.3.2 6.3.2.1 20 5 1(20 ) 2,000 250 1 2 500 41
6.3.2.2 %% TBC 5 10 0.02%TBC 39 13 3 http://homepage3.nifty.com/tbc-higai/ 0.0 2%6.1 1 2 10 0 5 1 6 6 5-4 1 5-5 1 [500] [10 0 +5 1 ] [6] 42
[1] [1] 18,000 (18,000 ) (30 ) (0.02%) 18,000 60 108 http://www.niben.jp/04info/hous huu/houshuu.html 110 300 8% 16 110 8% 9 6.3.2.3 500 1000 30 500 200 30 2 1,000 6.3.2.4 10 5 5 5000 2 10 5 165 6.3.2.5 5 ( )( ) 200 5 1,000 43
5 5 25 6.3.2.6 1,000 1 5 3 300 6.3.3 6.3.3.1 () 5 30 1 3,000 6.3.3.2 7.1 44
6.4 3 8,237 6-2 6-2 8,330 830 2,000 500 108 9 30 21,000 15 165 5 1,000 5 25 1,000 300 3,000 38,237 10 100 3 8,237 6-2 3.8 80%2003 500 1000 500 1000 45
46
7. () ( 2003 ) 7.1 7.1.1 7.1.2 () 47
48
7.2 7-12003 ( 2003 ) () 7-2 ()( ) 7-3 7-4 7-3 7-4 2003 7-5 7-6 ( ) 49
7-1 50
7-2 51
7-2() 52
7-3 53
7-4() 54
7-5 55
7-6() 56
7.3 () 2002 7-72003 () 7-8 2002 ( 62.5)2003 ( 66.7) 7-7(2003 /) () 14 ( 7-1 ) 57
7-82002 /2003 () 7-8 7-9 2002 2003 () 2002 /2003 () (2.000.00) 7-9() 58
7.4 2002 2003 ( ) 7.5 () 2003 (2002 ) 59
8. 60