フィッシング対策セミナー2022講演資料 / antiphishing-seminar2022-hasegawa

Transcript

1. ϑΟογϯάʹର͢ΔϢʔβͷߦಈɾೝࣝ  ۙ೥ͷֶज़ݚڀ͔Β  
   
   ϑΟογϯάରࡦηϛφʔ ࠃཱݚڀ։ൃ๏ਓ ৘ใ௨৴ݚڀػߏ αΠόʔηΩϡϦςΟݚڀॴ ௕୩઒ ࠼ࢠ
2. ߨԋऀ ࣗݾ঺հ w ࢯ໊ɿ௕୩઒ ࠼ࢠ w ॴଐɿࠃཱݚڀ։ൃ๏ਓ ৘ใ௨৴ݚڀػߏ αΠόʔηΩϡϦςΟݚڀॴ w ৬Ґɿݚڀһ w ઐ໳ɿϢʔβϒϧηΩϡϦςΟݚڀ 2
3. ϢʔβϒϧηΩϡϦςΟݚڀͱ͸ w ώϡʔϚϯϑΝΫλͷ؍఺͔ΒηΩϡϦςΟٕज़Λݕ౼͢Δݚڀ෼໺ r ໊લͷ௨Γɼਓؒ Ϣʔβ
   ʹͱͬͯ lVTBCMFz
   Ͱ҆શͳηΩϡϦςΟٕज़ͷཱ͕֬໨ඪ r ͦͷͨΊʹϢʔβͷߦಈ΍ೝࣝΛ؍ଌ 3 γεςϜத৺ͷ ϑΟογϯάݚڀ ߴਫ਼౓ͳϑΟογϯάݕ஌ ΞϧΰϦζϜͷཱ֬ ػցֶश ਓؒத৺ͷ ϑΟογϯάݚڀ Ϣʔβ͕ὃ͞ΕΔཧ༝ͷղ໌ ˣ ޮՌతͳڭҭɾϢʔβαϙʔτπʔϧ ͷ૑ग़ ౰֘ݚڀ෼໺ͷৄࡉɿ ۚԬߊ
   ϢʔβϒϧηΩϡϦςΟೖ໳
   
   IUUQTTQFBLFSEFDLDPNBLJSBLBOBPLBVXTUJZVUPSJBSVZV[BCVSVTFLJZVSJUFJSVNFO 秋⼭満昭. ⾦融分野に求められるユーザブルセキュリティ. https://www.imes.boj.or.jp/jp/conference/citecs/22semi_02_docs/22sec_semi02_akiyama.pdf ྆ํͷΞϓϩʔν͕ॏཁ
4. "HFOEBʢݚڀࣄྫ঺հʣ  ϢʔβΛὃ͢߈ܸऀͷ৺ཧςΫχοΫ  Ϣʔβͷଐੑͱὃ͞Ε΍͢͞  ϢʔβͷϑΟογϯά߈ܸʹؔ͢Δ஌ࣝ  ϢʔβʹޮՌతͳڭҭɾΞυόΠε  ϢʔβʹޮՌతͳܯࠂσβΠϯ 4
5. 
   ϢʔβΛὃ͢߈ܸऀͷ৺ཧτϦοΫ
6. ߈ܸऀ͸ਓؒͷ৺ཧಛੑΛѱ༻ w ߈ܸऀ͕ѱ༻͢Δਓؒͷ৺ཧಛੑ 3PCFSU
   $JBMEJOJ
   l
   QSJODJQMFT
   PG
   JOGMVFODFz 6 ᶃ ฦใੑʢSFDJQSPDJUZʣ ᶄ Ұ؏ੑʢDPOTJTUFODZʣ ᶅ ࣾձతূ໌ʢTPDJBM
   QSPPGʣ ᶆ ݖҖʢBVUIPSJUZʣ ᶇ ޷ҙʢMJLJOHʣ ᶈ رগੑʢTDBSDJUZʣ
7. ߈ܸऀ͕ѱ༻͢Δ৺ཧతಛੑɿฦใੑɾҰ؏ੑ 7 ᶃ ฦใੑɿड͚ͨԸʹ͓ฦ͠Λ͠ͳ͚Ε͹ͳΒͳ͍ͱײ͡Δ ᶄ Ұ؏ੑɿࣗ෼͕ද໌ͨ͠໿ଋ͸कΓͨ͘ͳΔ ౰αʔϏε͸͓٬༷ͷ҆શͷͨΊʹશྗΛਚ͍ͯ͘͠·͢ɻ͓٬༷ͷΞΧ΢ϯτͷ ҆શΛอͭͨΊʹɺҎԼͷϦϯΫ͔Β͝ڠྗΛ͓ئ͍͠·͢ɻ MJOL ౰αʔϏεͷར༻ن໿ʹ͋ͳͨ͸ಉҙ͠·ͨ͠ɻ͋ͳ͕ͨར༻ن໿ʹҧ൓͍ͯ͠ͳ͍ ৔߹ɺҎԼͷϦϯΫ͔ΒΞΧ΢ϯτ࠶։ͷखଓ͖Λߦͳ͍ͬͯͩ͘͞ɻ MJOL
8. ߈ܸऀ͕ѱ༻͢Δ৺ཧతಛੑɿࣾձతূ໌ɾݖҖ 8 ᶅ ࣾձతূ໌ɿपғͷಈ͖ʹಉௐͨ͘͠ͳΔ ᶆ ݖҖɿݖҖͷ͋Δਓʹ৴པΛ͓͖ͨ͘ͳΔ શͯͷϢʔβ͕ϝʔϧΞυϨεͷೝূΛ࣮ࢪ͢Δඞཁ͕͋Γ·͢ɻҎԼͷϦϯΫ͔ Β࣮ࢪ͍ͯͩ͘͠͞ɻ MJOL 999ࣾ$&0ͷࢁాଠ࿠Ͱ͢ɻࢿྉΛ֬͝ೝ͍ͩ͘͞ɻMJOL
9. ߈ܸऀ͕ѱ༻͢Δ৺ཧతಛੑɿ޷ҙɾرগੑ 9 ᶇ ޷ҙɿ޷͖ʹͳͬͯ͘ΕͨਓΛ޷͖ʹͳΓɼ޷͖ͳਓʹ͸ಉௐͨ͘͠ͳΔ ᶈ رগੑɿرগͳ΋ͷ΄Ͳཉ͘͠ͳΔ ౰αʔϏε͸͓٬༷Λେ੾ʹ͍ͯ͠·͢ɻզʑ͕͓٬༷ΛαϙʔτͰ͖ΔΑ͏ɺҎ ԼͷϦϯΫ͔ΒઃఆΛ࣮ࢪ͍ͩ͘͞ɻ MJOL ࣌ؒҎ಺ʹϩάΠϯ͍͍ͯͨͩͨ͠ํʹ͸ɺಛผʹϙΠϯτΛ্ࠩ͛͠·͢ɻ MJOL
10. 10 ࢀߟɿ<>
    "
    )FJKEFO
    BOE -
    "MMPEJ
    $PHOJUJWF
    5SJBHJOH
    PG
    1IJTIJOH
    "UUBDLT *O
    1SPD
    PG
    4&$`
    
    
    <>
    ੢઒߂ؽ΄͔
    ඪతܕϝʔϧʹ͓͚Δ৺ཧૢ࡞ςΫχοΫͱ ੑ֨ಛੑ͓Αͼߦಈಛੑͱͷؔ܎ੑ෼ੳ৘ใॲཧֶձ࿦จࢽ 7PM
    /P
     ˞
    ͍ͣΕ΋จԽతൺֱΛ໨తͱͨ͠࿦จͰ͸ͳ͍͕ɼຊߨԋʹ͓͍ͯ͸ศ্ٓ྆࿦จͷ݁ՌΛൺֱͨ͠ ߨԋऀʹΑΔ ϑΟογϯάϝʔϧ ͷಛ௃ ԤभͷϢʔβ <> ʢۚ༥ػؔʹͳΓ͢·ͨ͠ ϑΟογϯάϝʔϧͰ࣮ݧʣ ೔ຊͷϢʔβ <> ʢҰൠతͳ಺༰ͷඪతܕ ϑΟογϯάϝʔϧͰ࣮ݧʣ ฦใੑ͕ߴ͍ ΫϦοΫ཰͕௿͍ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ Ұ؏ੑ͕ߴ͍ ΫϦοΫ཰͕ߴ͍ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ ࣾձతূ໌͕ߴ͍ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ ݖҖ͕ߴ͍ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ ΫϦοΫ཰͕ߴ͍ ޷ҙ͕ߴ͍ ΫϦοΫ཰ͱ༗ҙͳؔ܎ͳ͠ ΫϦοΫ཰͕ߴ͍ رগੑ͕ߴ͍ ΫϦοΫ཰͕ߴ͍ ΫϦοΫ཰͕ߴ͍ ৺ཧτϦοΫ΁ͷϢʔβͷὃ͞Ε΍͢͞
11. 11 ϑΟογϯ άϝʔϧͷ ಛ௃ ԤभͷϢʔβ ೔ຊͷϢʔβ ฦใੑ ௿͍ ༗ҙͳؔ܎ͳ͠ Ұ؏ੑ ߴ͍ ༗ҙͳؔ܎ͳ͠ ࣾձతূ໌ ༗ҙͳؔ܎ͳ͠ ༗ҙͳؔ܎ͳ͠ ݖҖ ༗ҙͳؔ܎ͳ͠ ߴ͍ ޷ҙ ༗ҙͳؔ܎ͳ͠ ߴ͍ رগੑ ߴ͍ ߴ͍ ೔ຊ͸ԤभΑΓ͸ू߹ओٛ ⁶ ݸਓओٛ
    ͕ڧ͍ࠃͰ͋ΔͨΊɼݖҖʹऑ͍ ͱ͍͏ͷ͸ೲಘͰ͖Δ ʢҰൠʹ
    ू߹ओٛͷࠃͷॅຽͷ΄͏͕ ϑΟογϯάʹὃ͞Ε΍͍͢ͱ͞ΕΔ <> ʣ ͲͷΑ͏ͳϢʔβʹରͯ͠΋ൺֱతޮ Ռ͕ߴ͍ͱ͢Δͱɼ߈ܸऀʹͱͬͯ͸ ࠷΋ศརͳ৺ཧτϦοΫʁ <>
    .
    #VUBWJDJVT FU
    BM
    6OEFSTUBOEJOH
    4VTDFQUJCJMJUZ
    UP
    1IJTIJOH
    &NBJMT
    "TTFTTJOH
    UIF
    *NQBDU
    PG
    *OEJWJEVBM
    %JGGFSFODFT
    BOE
    $VMUVSF
     *O
    1SPD
    PG
    )"*4"`
    ৺ཧτϦοΫ΁ͷϢʔβͷὃ͞Ε΍͢͞
12. ͜ͷΑ͏ͳݚڀ੒Ռ ஌ݟ
    ΛͲ͏׆͔͔͢ Ø Ϣʔβ͕ಛʹὃ͞Ε΍͍͢৺ཧτϦοΫʹؔͯ͠ɼͦͷ৺ཧτϦοΫ͕༻͍ΒΕ ͨϝʔϧΛࣗಈͰ൑ผ͠ɼ༏ઌతʹௐࠪ͢ΔɾܯࠂΛදࣔͤ͞ΔͳͲ 12
13. 
    Ϣʔβͷଐੑͱὃ͞Ε΍͢͞
14. Ϣʔβଐੑͱὃ͞Ε΍͢͞ Ϣʔβͷଐੑʢ೥୅ɾੑผɾੑ֨ಛੑɾաڈͷܦݧɾจԽ
    FUDʣʹΑΓϑΟο γϯά΁ͷὃ͞Ε΍͕͢͞ҟͳΔ͜ͱ͕໌Β͔ʹͳ͍ͬͯΔ ˠ
    ὃ͞Ε΍͍͢ଐੑͷϢʔβΛੵۃతʹαϙʔτ w ೥୅ɾੑผ<> r ߴྸͷঁੑ͕࠷΋ὃ͞Ε΍͍͢܏޲ r एऀ͸رগੑʹὃ͞Ε΍͘͢ɼߴྸऀ͸ฦใੑʹὃ͞Ε΍͍͢܏޲ r ߴྸऀͷ΄͏͕ὃ͞Ε΍͢͞ͷ֮ࣗͱ࣮ࡍͷὃ͞Ε΍͢͞ʹ͕ࠩେ͖͍܏޲ʢա৴ʣ 14 ࢀߟɿ <>
    %
    0MJWFJSB
    FU
    BM
    
    %JTTFDUJOH
    4QFBS
    1IJTIJOH
    &NBJMT
    GPS
    0MEFS
    WT
    :PVOH
    "EVMUT
    0O
    UIF
    *OUFSQMBZ
    PG
    8FBQPOT
    PG
    *OGMVFODF
    BOE
    -JGF %PNBJOT
    JO
    1SFEJDUJOH
    4VTDFQUJCJMJUZ
    UP
    1IJTIJOH
    *O
    1SPD
    PG
    $)*`
    
15. Ϣʔβଐੑͱὃ͞Ε΍͢͞ w ੑ֨ಛੑ r ྑ৺తͳੑ֨ͳਓ͸ͦ͏Ͱͳ͍ਓΑΓ΋ὃ͞Ε΍͍͢܏޲ <> w աڈͷܦݧ r աڈʹϑΟογϯάτϨʔχϯάΛड͚ͨਓ͸ͦ͏Ͱͳ͍ਓΑΓ΋ὃ͞Εʹ͍͘܏޲ <> w ଞͷଐੑʢ೥ྸɾੑผʣΑΓ΋Өڹ౓͕େ͖͍ w จԽɾݴޠ r ू߹ओٛͷࠃͷॅຽͷ΄͏͕ὃ͞Ε΍͍͢܏޲ <> 15 ࢀߟɿ <>
    5
    )BMFWJ
    FU
    BM 4QFBS1IJTIJOH
    JO
    UIF
    8JME
    "
    3FBM8PSME
    4UVEZ
    PG
    1FSTPOBMJUZ
    1IJTIJOH
    4FMGFGGJDBDZ
    BOE
    7VMOFSBCJMJUZ
    UP
    4QFBS1IJTIJOH
    "UUBDLT
    443/
    &MFDUSPOJD
    +PVSOBM
     <>
    4
    4IFOH
    FU
    BM
    
    8IP
    'BMMT
    GPS
    1IJTI
    "
    %FNPHSBQIJD
    "OBMZTJT
    PG
    1IJTIJOH
    4VTDFQUJCJMJUZ
    BOE
    &GGFDUJWFOFTT
    PG
    *OUFSWFOUJPOT
    *O
    1SPD
    PG
    $)*`
    <>
    .
    #VUBWJDJVT FU
    BM
    6OEFSTUBOEJOH
    4VTDFQUJCJMJUZ
    UP
    1IJTIJOH
    &NBJMT
    "TTFTTJOH
    UIF
    *NQBDU
    PG
    *OEJWJEVBM
    %JGGFSFODFT
    BOE
    $VMUVSF
     *O
    1SPD
    PG
    )"*4"`
    
16. 
    ϢʔβͷϑΟογϯά߈ܸʹؔ͢Δ஌ࣝ
17. ϑΟογϯάʹؔ͢ΔϢʔβͷ࣭໰ ೔ຊͷ2ˍ"αΠτʹ౤ߘ͞ΕͨηΩϡϦςΟɾϓϥΠόγʔؔ࿈ͷ࣭໰ͷ͏ͪ ໿ׂ͕ϑΟογϯά౳ͷαΠόʔ߈ܸʹؔ͢Δ࣭໰Ͱ͋ͬͨ<> w ࠷΋ଟ͍࣭໰ɿʮ͜ͷϝʔϧ4.4αΠτ͸࠮ٗͰ͔͢ʁʯ r ࣭໰ऀ͕ఴ෇͍ͯͨ͠ϝʔϧ4.4αΠτ͸యܕతͳϑΟογϯά߈ܸͰ͋ͬͨɽయܕత ͳϑΟογϯά߈ܸͰ͋ͬͯ΋ɼϢʔβ͕ࣗྗͰ൑அ͢Δͷ͸ࠔ೉ w యܕతͳUZQPTRVBUUJOHʢྫɿ"QQMF4VQQSUʣ΍ɼ༗໊ͳϑϦʔϝʔϧαʔϏεͷϝʔϧΞυ ϨεΛར༻͢Δ߈ܸʢྫɿ(NBJMΞυϨεΛ࢖ͬͯ(PPHMFʹͳΓ͢·͢ʣ w ࣍ʹଟ͍࣭໰ɿʮ࠮ٗαΠτʹϩάΠϯ৘ใ΍Χʔυ৘ใΛೖྗͯ͠͠·͍· ͨ͠ɻ͜ͷޙԿΛ͢΂͖Ͱ͔͢ʁʯ r ϑΟογϯάϝʔϧαΠτͷಛఆํ๏΍ո͍͠ϝʔϧ΁ͷରॲํ๏ʹൺ΂ͯɼϑΟογϯ άʹὃ͞Εͨޙͷߦಈʹ͍ͭͯͷΞυόΠεΛܝࡌ͍ͯ͠Δ΢ΣϒαΠτ͸গͳ͍ <> 17 ࢀߟɿ<>
    "
    )BTFHBXB
    FU
    BM 6OEFSTUBOEJOH
    /PO&YQFSUT`
    4FDVSJUZ BOE
    1SJWBDZ3FMBUFE
    2VFTUJPOT
    PO
    B
    2"
    4JUF
    
    *O
    1SPD
    PG
    40614` <>
    .
    .PTTBOP FU
    BM "OBMZTJT
    PG
    1VCMJDMZ
    "WBJMBCMF
    "OUJ1IJTIJOH
    8FCQBHFT
    $POUSBEJDUJOH
    *OGPSNBUJPO
    -BDL
    PG
    $PODSFUF
    "EWJDF
    BOE
    7FSZ
    /BSSPX
    "UUBDL
    7FDUPS *O
    1SPD
    PG
    &VSP64&$`
    
18. ҰൠతͳΤϯυϢʔβʹ63-ͷѼઌΛ໰͏ΞϯέʔτΛ࣮ࢪ<> 63-ͷߏ଄ʹؔ͢ΔϢʔβͷ஌ࣝ 18 2
    ҎԼͷ63-͸ͦΕͧΕͲͷΑ͏ͳ΢ΣϒαΠτʹܨ͕Δͱࢥ͍·͔͢ʁ ᶃ IUUQTQSPGJMFGBDFCPPLDPN ᶄ IUUQTGBDFCPPLQSPGJMFDPN ᶅ IUUQTUXJUUFSDPNGBDFCPPLDPN ! ! ! ࢀߟɿ<>
    4
    "MCBLSZ FU
    BM
    8IBU
    JT
    UIJT
    63-T
    %FTUJOBUJPO
    &NQJSJDBM
    &WBMVBUJPO
    PG
    6TFST
    63-
    3FBEJOH *O
    1SPD
    PG
    $)*`
    
19. 63-ͷߏ଄ʹؔ͢ΔϢʔβͷ஌ࣝ 19 ᶃ IUUQTQSPGJMFGBDFCPPLDPN 㱺
    'BDFCPPL ᶄ IUUQTGBDFCPPLQSPGJMFDPN 㱺
    1SPGJMF ᶅ IUUQTUXJUUFSDPNGBDFCPPLDPN 㱺
    5XJUUFS αϒυϝΠϯ αϒυϝΠϯ αϒσΟϨΫτϦ υϝΠϯ໊ υϝΠϯ໊ υϝΠϯ໊
20. 63-ͷߏ଄ʹؔ͢ΔϢʔβͷ஌ࣝ w ࢀՃऀ͸υϝΠϯͱαϒυϝΠϯͷ۠ผ͕͍͓ͭͯΒͣ ʮ'2%/ʹؚ·ΕΔαʔϏε ໊শ ʹ ܨ͕Δ΢ΣϒαΠτʯͰ͋Δͱޡղ͕ͪ͠ w ᶅ αϒσΟϨΫτϦʹαʔϏε໊
    ͸ൺֱతޡ౴͸গͳ͔ͬͨ w શ໰ਖ਼ղͨ͠ࢀՃऀɼͭ·Γ63-ͷߏ଄Λཧղ͍ͯͨ͠ࢀՃऀ͸ͷΈɽٕज़ܥͷ ࢀՃऀͰ͋ͬͯ΋ޡ౴ͨ͠ 20 ᶃ IUUQTQSPGJMFGBDFCPPLDPN 㱺
    ࢀՃऀ͸ 'BDFCPPL ʹܨ͕Δͱճ౴ ᶄ IUUQTGBDFCPPLQSPGJMFDPN 㱺
    ࢀՃऀ͸ 'BDFCPPL ʹܨ͕Δͱճ౴ʢޡʣ Ϣʔβ͸63-Λݟͯ΋ͦͷѼઌΛ൑அͰ͖ͳ͍͜ͱ͕͋ΔͨΊɼʮϝʔϧதͷϦϯΫΛ ϗόϦϯάͯ͠ਅͷ63-Λ֬ೝ͠·͠ΐ͏ʯͷΑ͏ͳΞυόΠεͰ͸ෆे෼
21. ֤छ63-ِ૷ςΫχοΫʹؔ͢ΔϢʔβͷ஌ࣝ 21 ࢀߟɿ<>
    +
    3FZOPMET
    FU
    BM
    .FBTVSJOH
    *EFOUJUZ
    $POGVTJPO
    XJUI
    6OJGPSN
    3FTPVSDF
    -PDBUPST *O
    1SPD
    PG
    $)*`
    2
    ҎԼͷ63-͸ͲͷΑ͏ͳ΢ΣϒαΠτʹܨ͕Δͱࢥ͍·͔͢ʁ • IUUQTUXJUUUFSDPN • IUUQTCPGBDPNTJHOJOJOGP • IUUQT • IUUQTЛBZЛBMDPN • IUUQTTFDVSFHNBJMDPN • IUUQTUXJUUFSDPNJTTVFTTVQQPSU • IUUQTUXJUUFSDPNF ! ! ! ҰൠతͳΤϯυϢʔβʹ63-ͷѼઌΛ໰͏ΞϯέʔτΛ࣮ࢪ<> 5ZQPTRVBUUJOH 4VCEPNBJO
    BT
    %PNBJO *1
    "EESFTT *%/
    )PNPHSBQIT 4FMGEFDMBSFE
    TFDVSF 6OGBNJMJBS
    5-% 63-
    &ODPEFE
    $IBSBDUFST
22. ֤छ63-ِ૷ςΫχοΫʹؔ͢ΔϢʔβͷ஌ࣝ 22 ࢀՃऀ͕ѼઌΛਖ਼౴Ͱ͖ͨͷ͸ˋͷ63-ʹͱͲ·ͬͨ 63-ِ૷ςΫχοΫ ྫ ਖ਼౴཰ 5ZQPTRVBUUJOH IUUQTUXJUUUFSDPN  *%/
    )PNPHSBQIT IUUQTЛBZЛBMDPN  4FMGEFDMBSFE
    TFDVSF IUUQTTFDVSFHNBJMDPN  *1
    "EESFTT IUUQT  6OGBNJMJBS
    5-% IUUQTUXJUUFSDPNJTTVFTTVQQPSU  4VCEPNBJO
    BT
    %PNBJO IUUQTCPGBDPNTJHOJOJOGP  63-
    &ODPEFE
    $IBSBDUFST IUUQTUXJUUFSDPNF 
23. w lηΩϡϦςΟϦςϥγzͱͯ͠ɼϢʔβ͸63-ͷߏ଄΍ِ૷ςΫχοΫΛ஌͓ͬͯ͘ ͷ͕޷·͍͠ r ͨͩ͠ɼਓ͕ؒࢹ֮తʹݟഁΔ͜ͱ͕ඇৗʹࠔ೉ͳɼߴ౓ͳ*%/
    )PNPHSBQIT΋ଘࡏ w ͦͷҰํͰɼϢʔβͷ63-൑ผεΩϧ͚ͩʹґଘ͢Δ͜ͱ͸ͤͣɼαʔϏεࣗۀऀ͔ ΒϢʔβ΁ͷϝʔϧͷதʹ63-ΛؚΊΔ͜ͱ͸ආ͚Δ ϒοΫϚʔΫ͔ΒΞΫηε͠ ͯ΋Β͏Α͏༠ಋ
    ౳ͷରࡦ΋ݕ౼͢΂͖ <> 23 ࢀߟɿ<>
    
    秋⼭満昭. ⾦融分野に求められるユーザブルセキュリティ. https://www.imes.boj.or.jp/jp/conference/citecs/22semi_02_docs/22sec_semi02_akiyama.pdf
24. ϑΟογϯάʹର͢ΔϢʔβͷ஫໨Օॴ 24 w <ϝʔϧ>
    Ϣʔβ͸ϔομʔ΍63-ʹ͸΄ͱΜͲ஫໨ͤͣɼຊจͷ಺༰Ͱਖ਼ن͔ϑΟογϯά͔ Λ൑அ͢Δ܏޲ <> w <ϝʔϧ>
    ૹ৴ݩʹ஫໨͢ΔϢʔβ͸ϑΟογϯάʹὃ͞Εʹ͘͘ɼ໊݅΍ۓٸͷݴ༿ͷଘࡏʹ ஫໨͢ΔϢʔβ͸ϑΟογϯάʹὃ͞Ε΍͍͢܏޲ <> w <ϝʔϧ>
    ۓٸͷݴ༿ͷଘࡏΑΓ΋ɼϛεεϖϧͷଘࡏͷ΄͏͕Ϣʔβ͸ϑΟογϯάΛ͍ٙ΍ ͍͢܏޲ <> w <αΠτ>
    Ϣʔβ͸ϒϥ΢βͷηΩϡϦςΟΠϯδέʔλʹ΄΅஫໨ͤͣɼ΢ΣϒαΠτͷίϯ ςϯπʹ஫໨͢Δ܏޲ <> w ϑΟογϯάϝʔϧαΠτͷಛఆͷͨΊʹ͸ʮ஌ࣝʴ࣌ؒʯ͕ॏཁ <> ࢀߟɿ<>
    +
    %PXOT
    FU
    BM
    %FDJTJPO
    TUSBUFHJFT
    BOE
    TVTDFQUJCJMJUZ
    UP
    QIJTIJOH *O
    1SPD
    PG
    40614`
    <>
    "
    7JTIXBOBUI
    FU
    BM
    8IZ
    EP
    QFPQMF
    HFU
    QIJTIFE
    UFTUJOH
    JOEJWJEVBM
    EJGGFSFODFT
    JO
    QIJTIJOH
    WVMOFSBCJMJUZ
    XJUIJO
    BO
    JOUFHSBUFE
    JOGPSNBUJPO
    QSPDFTTJOH
    NPEFM
    %FDJTJPO
    4VQQPSU
    4ZTUFNT
    
     <>
    +
    .D"MBOFZ BOE
    1
    )JMMT
    Understanding Phishing Email Processing and Perceived Trustworthiness Through Eye Tracking
    'SPOUJFST
    JO
    1TZDIPMPHZ
     <>
    .
    "MTIBSOPVCZ FU
    BM
    8IZQIJTIJOH TUJMM
    XPSLT
    VTFS
    TUSBUFHJFT
    GPS
    DPNCBUJOH
    QIJTIJOH
    BUUBDLT
    *OUFSOBUJPOBM
    +PVSOBM
    PG
    )VNBO$PNQVUFS
    4UVEJFT
     <>
    ,
    1GFGGFM FU
    BM
    8IFSF
    UIF
    VTFS
    EPFT
    MPPL
    XIFO
    SFBEJOH
    QIJTIJOH
    NBJMT
    r "O
    FZFUSBDLJOH
    TUVEZ *O
    1SPD
    PG
    )$**`
    
25. 
    ϢʔβʹޮՌతͳڭҭɾΞυόΠε
26. ϑΟογϯάରࡦΞυόΠεͷ࣮ଶௐࠪ ΢ΣϒαΠτʹܝࡌ͞ΕͨΞυόΠε Χࠃ
    Λ෼ੳͯ͠൑໌ͨ͠՝୊<> w ந৅తͳΞυόΠε͕ଟ͍ r ྫʣʮΫϦοΫ͢Δલʹ63-Λ֬ೝ͠·͠ΐ͏ʯ w ࠞཚΛੜΉΞυόΠε͕ܝࡌ͞Ε͍ͯΔ r ྫʣʮෆࣗવͳจষͷϝʔϧ͸ϑΟογϯάͷՄೳੑ͕͋Γ·͢ʯͱʮ߈ܸऀ͸ࣗવͳจ ষΛॻ͖·͢ʯ w ߴ౓ͳϑΟογϯάʹؔ͢ΔΞυόΠε͕ͳ͍ r ྫʣΫϩʔϯϑΟογϯά Ҏલʹૹ৴͞Εͨਖ਼نͷϝʔϧΛѱ༻͞ΕΔ
    ʹؔ͢Δ৘ใ͕ ܝࡌ͞Ε͍ͯͳ͍ 26 ࢀߟɿ<>
    .
    .PTTBOP FU
    BM "OBMZTJT
    PG
    1VCMJDMZ
    "WBJMBCMF
    "OUJ1IJTIJOH
    8FCQBHFT
    $POUSBEJDUJOH
    *OGPSNBUJPO
    -BDL
    PG
    $PODSFUF
    "EWJDF
    BOE
    7FSZ
    /BSSPX
    "UUBDL
    7FDUPS *O
    1SPD
    PG
    &VSP64&$`
    
27. ޮՌతͳڭҭํ๏ɾڭҭλΠϛϯά υΠπͷͱ͋Δ૊৫Ͱ࣮ࢪ͞ΕͨϑΟογϯάڭҭɾϑΟογϯάಛఆςετ<> w ΦϯαΠτνϡʔτϦΞϧͷޮՌ͸ͲΕ͘Β͍࣋ଓ͢Δ͔ʁ ὎ ϲ݄ఔ౓ɽϲ݄ޙʹ͸νϡʔτϦΞϧલͱେࠩͳ͍ύϑΥʔϚϯεʹ w ͲͷΑ͏ͳܗࣜͷϦϚΠϯμʔڭҭ͕ޮՌత͔ʁ ςΩετɾ୹͍ςΩετɾ ϏσΦɾϝʔϧը໘ʹ஫ҙϙΠϯτ͕هࡌ͞Εͨڭࡐ ὎ ϏσΦɾϝʔϧը໘ڭࡐͷޮՌ͕ߴ͘ɼ࣮ࢪޙϲ݄ޙ͸ޮՌ༗ 27 ࢀߟɿ<>
    #
    3FJOIFJNFS FU
    BM
    "O
    JOWFTUJHBUJPO
    PG
    QIJTIJOH
    BXBSFOFTT
    BOE
    FEVDBUJPO
    PWFS
    UJNF
    8IFO
    BOE
    IPX
    UP
    CFTU
    SFNJOE
    VTFST *O
    1SPD
    PG
    40614`
    ὎ ߴස౓Ͱͷܧଓతͳڭҭ͕ඞཁ
28. ޮՌతͳڭҭํ๏ ΞυόΠεܗࣜ ͱ ετʔϦʔ ମݧஊ
    ܗࣜͷޮՌͷҧ͍ <> ΞυόΠεܗࣜ ˠ ޮՌ͕ߴ͘ɼઐ໳Ո͔Β༩͑ΒΕͨࡍʹಛʹޮՌత ετʔϦʔܗࣜ ˠ ޮՌ͸ߴ͘ͳ͍͕ɼಉ྅͔Β༩͑ΒΕͨ৔߹ʹ͸ޮՌ༗ 28 ࢀߟɿ<>
    3
    8BTI
    FU
    BM
    8IP
    1SPWJEFT
    1IJTIJOH
    5SBJOJOH
    'BDUT
    4UPSJFT
    BOE
    1FPQMF
    -JLF
    .F *O
    1SPD
    PG
    $)*`
    
29. ͱ͋Δ૊৫Ͱ࣮ࢪ͞ΕͨϑΟογϯάγϛϡϨʔγϣϯ <> <ௐࠪ಺༰> ໛ٖϑΟογϯάϝʔϧΛΫϦοΫͨ͠ैۀһʹର͠ɼ ৚݅"ɿϑΟογϯάʹὃ͞Εͨ͜ͱΛ௨஌͢Δը໘Λදࣔ ৚݅#ɿϑΟογϯάʹὃ͞Εͨ͜ͱΛ௨஌͢Δը໘Λදࣔ ˠ ϑΟογϯάڭҭϖʔδΛදࣔ <݁Ռ> ༧૝ͱ͸ҟͳΓɼ৚݅#ͷैۀһͷ΄͏͕ͦͷޙͷةݥߦಈ͕ଟ͔ͬͨ ˠ ৚݅#Ͱ͸ैۀһʹ҆৺ײΛ༩͑ͯ͠·ͬͨʁ ʢ
    ৚݅"Ͱ͸ΫϦοΫߦಈͱۓுײ͕݁ͼ͍ͭͨʁʣ 29 ࢀߟɿ<>
    %
    -BJO
    FU
    BM
    1IJTIJOH
    JO
    0SHBOJ[BUJPOT
    'JOEJOHT
    GSPN
    B
    -BSHF4DBMF
    BOE
    -POH5FSN
    4UVEZ *O
    1SPD
    PG
    4ˍ1`
    ૊৫಺Ͱͷ૊ΈࠐΈܕϑΟογϯάڭҭ͸ٯޮՌʁ
30. 
    ϢʔβʹޮՌతͳܯࠂσβΠϯ
31. ϝʔϧΫϥΠΞϯτͰͷܯࠂ w ܯࠂදࣔҐஔ 31 ࢀߟɿ+
    1FUFMLB FU
    BM
    1VU
    :PVS
    8BSOJOH
    8IFSF
    :PVS
    -JOL
    *T
    *NQSPWJOH
    BOE
    &WBMVBUJOH
    &NBJM
    1IJTIJOH
    8BSOJOHT *O
    1SPD
    PG
    $)*`
    4VCKFDU ʜ 'SPN
    ʜ ʜ ʜ MJOL ʜ ʜ ʜ ʜ 4VCKFDU ʜ 'SPN
    ʜ ʜ ʜ ʜ ʜ MJOL ʜ ʜ 5IJT
    FNBJM
    TFFNT
    EBOHFSPVT 5IJT
    FNBJM
    DPOUBJOT
    B
    MJOL
    UP
    B
    GBLF
    XFCTJUF Ϣʔβͷ ΫϦοΫ཈ࢭޮՌ  όφʔ ϦϯΫ෇ۙ
32. w ϦϯΫແޮԽ༗ແ 4VCKFDU ʜ 'SPN
    ʜ ʜ ʜ ʜ IUUQTXXXZBIPPDPN ʜ ʜ ϝʔϧΫϥΠΞϯτͰͷܯࠂ 32 'BLF
    XFCTJUF -JOL
    HPFT
    UP XXXZBIPPMPHJODPNCS Ϣʔβͷ ΫϦοΫ཈ࢭޮՌ  ϦϯΫແޮԽແ͠ 4VCKFDU ʜ 'SPN
    ʜ ʜ ʜ ʜ IUUQTXXXZBIPPDPN ʜ ʜ 'BLF
    XFCTJUF -JOL
    HPFT
    UP XXXZBIPPMPHJODPNCS ϦϯΫແޮԽ༗Γ ΫϦοΫ Մೳ ΫϦοΫ ෆՄೳ ΫϦοΫ Մೳ
33. Ϣʔβʹ lߟ͑ͯ΋Β͏z
    ܯࠂ Ϩϙʔτ 33 ࢀߟɿ,
    "MUIPCBJUJ FU
    BM
    *
    %POU
    /FFE
    BO
    &YQFSU
    .BLJOH
    63-
    1IJTIJOH
    'FBUVSFT
    )VNBO
    $PNQSFIFOTJCMF *O
    1SPD
    PG
    $)*`
    63-
    
    IUUQTCFTUDOBSHFSVFYDIBOHFSTNLUFOJE ˙ 4VNNBSZ LOPXO
    JTTVF
    
    
    
    
    
    
    
    
    
    1PTTJCMF
    JTTVF
    
    
    
    
    
    
    
    /P
    JTTVF ˙ %FUBJMFE
    JOGPSNBUJPO .BOJQVMBUJPO
    5SJDLT
    
    
    lCFTUDOBSHFSVz
    JT
    TJNJMBS
    UP
    QPQVMBS
    EPNBJO
    
    
    lCFTUDIBSHFSVz %PNBJO
    "HF
    
    
    3FHJTUFSFE
    PO
    +VMZ
    UI
    
    
    NPOUI 6TFE
    5SJDL  4FBSDI
    3FTVMU /P
    .BUDI %PNBJO "HF 
    NPOUI %PNBJO 1PQVMBSJUZ -PX ! ! !
34. ࠷ޙʹʢ࠶ܝʣ 34 γεςϜத৺ͷ ϑΟογϯάݚڀ ߴਫ਼౓ͳϑΟογϯάݕ஌ ΞϧΰϦζϜͷཱ֬ ػցֶश ਓؒத৺ͷ ϑΟογϯάݚڀ Ϣʔβ͕ὃ͞ΕΔཧ༝ͷղ໌ ˣ ޮՌతͳڭҭɾϢʔβαϙʔτπʔϧ ͷ૑ग़ ྆ํͷΞϓϩʔν͕ॏཁ