SecHuv - Security Hub for Human-vulnerabilities

1dc3bd1bd5485382541fcbfa225a9b22?s=47 Tsubasa
February 01, 2020

SecHuv - Security Hub for Human-vulnerabilities

#SecHack365

1dc3bd1bd5485382541fcbfa225a9b22?s=128

Tsubasa

February 01, 2020
Tweet

Transcript

  1. ࢥࡧۦಈίʔε
 ക಺ཌྷ
 6NFVDIJ5TVCBTB

  2. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ࠷ऴ໨ඪ  ࠷ऴ໨ඪ ਓత੬ऑੑʹىҼ͢Δ໰୊ͷ੹೚ΛϢʔβ΁ͱؼணͤͣ͞ ΤϯδχΞϦϯάͰղܾ͢Δੈք΁ɻ

  3. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  4. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  5. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͸͡Ίʹ  ੬ऑੑͷ෼ྨͷͦͷରࡦख๏ʹ͍ͭͯ ੬ऑੑ ٕज़త੬ऑੑ ෺ཧత੬ऑੑ ਓత੬ऑੑ ֓ཁ ରࡦྫ

    ίϯϐϡʔλγεςϜ΍ ΞϓϦέʔγϣϯʹજΉ ࢓্༷ɼ࣮૷্ͷ໰୊ʹ ىҼ͢Δ΋ͷɻ ෺ཧతͳݐங෺΍σόΠ εͦͷ΋ͷͷߏ଄΍ͦͷ ѻ͍ํʹىҼ͢Δ΋ͷɻ ਓ͕ؒ࣋ͪ߹Θ͍ͤͯΔ ৺ཧతಛੑ΍Ϧςϥγʔ ෆ଍ʹىҼ͢Δ΋ͷɻ w 'JSFXBMM w 4BNF0SJHJO1PMJDZ w "4-3 w  w ిࢠৣ w ηΩϡϦςΟϫΠϠ w ଱਒ɾ଱Րઃඋ w  w Ϟϥϧڭҭ w Ϧςϥγʔڭҭ w 
  6. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͸͡Ίʹ  ϑΟογϯάͷݱঢ় ϑΟογϯάରࡦڠٞձϑΟογϯάϨϙʔτΑΓɻ ւ֎౷ܭ ใࠂ݅਺   

    ݅    ݅ ϑΟογϯά αΠτ εύϜϝʔϧ     ݅    ݅ ࠃ಺౷ܭ ϑΟογϯά αΠτ
  7. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͸͡Ίʹ  ਓత੬ऑੑʹؔ͢Δରࡦͷݱঢ় ٕज़తରࡦ wεύϜϝʔϧΛϒϩοΫ͢ΔͨΊͷϑΟϧλʔɻ wϑΟογϯάαΠτʹؔ͢Δ৘ใൃ৴ͱσʔλϕʔεԽɻ ֓ཁ ໰୊ wͲͷΑ͏ͳཧ༝ͰϑΟϧλϦϯά͞Ε͍ͯΔͷ͔͕ෆ໌ྎɻ

    wσʔλͱπʔϧ͕ۓີʹ࿈ܞͰ͖͍ͯͳ͍ɻ ඇٕज़తରࡦ wϢʔβʹର͢ΔϞϥϧڭҭ΍Ϧςϥγʔڭҭɻ wϩʔϧϓϨΠϯάܗࣜʹΑΔτϨʔχϯάɻ ֓ཁ ໰୊ wڭҭ΍τϨʔχϯάΛܦͯ਎ʹ͚ͭͨ஌͕ࣝͦͷ··ݱ࣮ͷ
 ৔໘ͰԠ༻ՄೳͰ͋Δͱ͸ݶΒͳ͍ɻ wϢʔβʹ࠷ऴతͳ੹೚ΛҕͶΔ͜ͱʹͳΓ͔Ͷͳ͍ɻ
  8. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  9. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ࢥࡧաఔ  طଘͷਓత੬ऑੑରࡦʹ͍ͭͯ wϑΟογϯάαΠτͷσʔλϕʔεɻ wίϛϡχςΟϕʔεͰϑΟογϯάαΠτͷ৘ใΛऩू͢Δɻ ֓ཁ ໰୊ wϑΟογϯάͷࠜڌͱૂΘΕͨਓత੬ऑੑ͕ෆ໌ྎɻ wίϛϡχςΟϕʔεͷͨΊዞҙతͳ౤ߘ͕ߦΘΕΔڪΕ͕͋Δɻ

    wϦαʔνϟʔʹΑΔϑΟογϯά৘ใͷ౤ߘ͕ߦΘΕ͍ͯΔɻ w໿෼ʹπΠʔτఔ౓ͷස౓Ͱڞ༗͕ਤΒΕ͍ͯΔɻ̈ ֓ཁ ໰୊ wϑΟογϯάͷࠜڌͱૂΘΕͨਓత੬ऑੑ͕ෆ໌ྎɻ w౤ߘ͞ΕͨσʔλΛ࣮ࡍͷରࡦ΁ͱ׆͔͖͠Ε͍ͯͳ͍ɻ ̈ʹQIJTIJOH͕෇༩͞ΕͨπΠʔτʹؔͯ͠աڈ࣌ؒ෼ͷ౷ܭௐࠪΛߦͬͨ݁Ռʹجͮ͘ɻ
  10. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ٕज़త੬ऑੑͱਓత੬ऑੑͷࠩҟ  ٕज़త੬ऑੑΛಥ͍ͨ߈ܸͰ͸ɺ︎αʔϏε︎ఀࢭ΍ػඍͳ৘ใ︎ͷྲྀग़ʹΑͬͯҾ͖ ى͜͞ΕΔܦࡁతͳඃ֐͕ओͱͳΔɻ  ਓత੬ऑੑΛಥ͍ͨ߈ܸͰ͸ɺ︎ܦࡁతͳඃ֐︎ͷΈͳΒͣɼ᱐͞Εͨ͜ͱʹΑΔ
 ஏ͔ͣ͠͞Λ֮͑ͤ͞Δͱ͍ͬͨײ৘తͳඃ֐΍ଚݫతͳඃ֐Λ΋ͨΒ͠ಘΔɻ ࢥࡧաఔ 

    ਓత੬ऑੑʹؔ͢Δߟ࡯੬ऑੑͷࠩҟ ܦࡁతͳඃ֐ ଚݫతͳඃ֐
  11. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ਓత੬ऑੑରࡦͱͯ͠ͷϢʔβڭҭ  Ϣʔβʹରͯ͠ɺ৘ใηΩϡϦςΟ΍Πϯλʔωοτʹؔ͢Δجૅ஌ࣝΛఆண͞ ͤΔ͜ͱͰɺϢʔβ͕ඃ֐ʹૺΘͳ͍Α͏ʹ͢Δ͜ͱ͕ૂ͍ɻ  ஌ࣝΛ࣋ͪ߹Θ͍ͤͯΔ͜ͱʹΑͬͯɺຊ౰ʹඃ֐ʹૺΘͳ͍Α͏ʹͤ͞Δ͜ͱ ͕Ͱ͖ΔͷͩΖ͏͔ɻ
 ଶ౓ม༰ϓϩηε 

    ֎తͳྗʹӨڹ͞Εͯଶ౓͕มԽ͢Δ͜ͱɻ  ϢʔβڭҭͷޮՌΛ࣮ޮతͳ΋ͷͱ͢ΔͨΊʹ͸ɺڭҭʹΑͬͯ஌ࣝΛఆணͤ͞ Δ͚ͩͰ͸ͳ͘ɺͦͷ஌ࣝΛݱ࣮ͷ৔໘ʹ͓͍ͯ׆༻͢ΔͨΊͷଶ౓Λܗ੒ͤ͞ Δඞཁ͕͋Δɻ  ͭ·Γʮ஌͕ࣝ͋Δ͜ͱʯͱʮ஌ࣝΛݱ࣮ʹԠ༻Ͱ͖Δ͜ͱʯ︎໌֬ʹҟͳΔɻ ࢥࡧաఔ  ਓత੬ऑੑʹؔ͢Δߟ࡯ରࡦͱͯ͠ͷϢʔβڭҭ ਓత੬ऑੑΛಥ͍ͨ߈ܸ͕େྔʹൃੜ͍ͯ͠Δࠓ೔ʹ͓͍ͯɺ ϢʔβڭҭΛਓత੬ऑੑରࡦ︎ͷґڌͱͨ͠··Ͱྑ͍ͷͩΖ͏͔ʁ Ϣʔβʹ੹೚ΛෛΘ͍ͤͯΔ··Ͱྑ͍︎ͩΖ͏͔ʁ
  12. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ࠜڌ͕ෆ໌ྎͰ৔౰ͨΓతͳରࡦɻ ࢥࡧաఔ  ਓత੬ऑੑʹؔ͢Δߟ࡯༗ޮͳରࡦͱ͸ ମܥతͳΠϯςϦδΣϯεʹج͍ͮͨ
 γεςϜશମ͕ΤίγεςϜͱͯ͠༗ػతʹػೳ͢ΔΑ͏ͳରࡦɻ Ϣʔβͷ஌ࣝʹ࠷ऴతͳ੹೚ΛҕͶΔΑ͏ͳରࡦɻ Ϣʔβͷ஌ࣝͰ͸ͳ͘ΤϯδχΞϦϯάʹΑ࣮ͬͯݱ͢Δରࡦ ΠϯλϑΣʔε͕ෳࡶͰɺຊ౰ʹରࡦ͕ඞཁͱ͞ΕΔΑ͏ͳ

    Ϣʔβ͕ѻ͑ͳ͔ͬͨΓɺسආ͞ΕͨΓ͢ΔΑ͏ͳରࡦɻ ΠϯλϑΣʔε͕؆ܿͰɺ͔ͭϢʔβϑϨϯυϦʔͳରࡦɻ ରࡦͷ ΞʔΩ ςΫνϟ ੹೚ͷ ॴࡏ Ϣʔβ ΁ͷෛ୲
  13. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  14. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ΠϯςϦδΣϯε  ຊདྷͷσʔλͷදݱೳྗΛ޲্ͤ͞ΔΑ͏ͳϝλσʔλ͕෇༩͞Ε্ͨͰɺ
 ద੾ʹ෼ྨ͞Εͨσʔλɻ  σʔλΛମܥతʹ੔ཧ͠ɺΠϯςϦδΣϯεͱͯ͠஝ੵͤ͞Δ͜ͱͰɺ
 ͦΕʹج͍ͮͨରࡦٕज़ͷ։ൃ͕ՄೳͱͳΔɻ  4FD)VWͰ͸ɺ͜ͷΠϯςϦδΣϯεΛ


    $)7& $PNNPO)VNBO7VMOFSBCJMJUJFTBOE&YQPTVSFT ͱͯ͠ఆٛ͢Δɻ γεςϜͷઃܭ  ΠϯςϦδΣϯεʹ͍ͭͯ $)7&ͷ֓ཁ طଘͷ߈ܸࣄྫΛ΋ͱʹਓత੬ऑੑͷछผ΍ಛ௃Λମܥతʹ੔ཧͨ͠΋ͷɻ
 ෆ৹ͳίϯςϯπͷࣗಈղੳ΍৘ใެ։΁ͱԠ༻Մೳʹ͢Δɻ ࣄྫ%# ੬ऑੑ%# { date: ..., metadata: ..., payload: ..., ... } ۓٸੑ رগੑ ِͷ63- ...
  15. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT *OUFMMJHFODF%SJWFOηΩϡϦςΟΛ໨ࢦͨ͢Ίͷઃܭ  ΠϯςϦδΣϯεΛத৺ͱͨ͠༗ػతͳηΩϡϦςΟΛ࣮ݱ͢Δɻ  ΠϯςϦδΣϯεΛ༻͍֤ͯछπʔϧͷੑೳΛߴΊΔͱͱ΋ʹ
 ֤छπʔϧ͔Βಘͨ৘ใʹΑͬͯΠϯςϦδΣϯεΛڧԽ͢Δͱ͍͏αΠΫϧ͕
 ൒ࣗಈతʹӡ༻͞ΕΔΑ͏ʹ͢Δ͜ͱͰɺηΩϡϦςΟͷΤίγεςϜΛߏங͢Δɻ γεςϜͷઃܭ 

    ༗ػతͳηΩϡϦςΟ
  16. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ΠϯςϦδΣϯεͷ॥؀ʹجͮ͘ΤίγεςϜͷܗ੒  σʔλ͸֤छπʔϧ͔Βհͯ͠ऩू͞ΕΔɻ  σʔλ͕஝ੵ͞ΕΔաఔͰ༗༻ͳ৘ใΛ࣋ͬͨΠϯςϦδΣϯε΁ͱঢ՚͞Εɺ
 ϦϙδτϦʹͯҰݩ؅ཧ͞ΕΔɻ  ϦϙδτϦʹ஝ੵ͞ΕͨΠϯςϦδΣϯε͸πʔϧʹར׆༻͞ΕΔɻ γεςϜͷઃܭ

     ΠϯςϦδΣϯεͷ॥؀ʹجͮ͘ΤίγεςϜͷܗ੒ ᶃ ᶄ ᶅ ͜ͷαΠΫϧ͕൒ࣗಈతʹӡ༻͞ΕΔΑ͏ʹ͢Δ͜ͱͰ ΠϯςϦδΣϯεͷ॥؀ʹجͮ͘ηΩϡϦςΟͷΤίγεςϜΛߏங͢Δ
  17. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT γεςϜͷઃܭ  γεςϜͰఆٛ͢Δਓత੬ऑੑࣝผࢠ http:// ِͷ63- fake_url ِͷΞϥʔτ fake_alert ۚમతརӹ

    profit ۓٸੑ urgent رগੑ scarcity ِͷϑΝΠϧ fake_file ηΫετʔγϣϯ sextortion ݖҖ authority
  18. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  19. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨త  Πϯλʔωοτ্Ͱൃੜ͢Δਓత੬ऑੑΛಥ͍ͨ߈ܸ͔ΒϢʔβΛอޢ͢Δ͜ͱɻ  ܦݧ͕ઙ͍ϢʔβͰ΋҆શʹΠϯλʔωοτΛར༻Ͱ͖ΔΑ͏ʹ͢Δ͜ͱɻ ಛ௕  ମܥԽ͞Εͨਓత੬ऑੑʹؔ͢ΔΠϯςϦδΣϯεΛத৺ʹ༷ʑͳπʔϧΛۓີʹ ࿈ܞͤ͞Δ͜ͱͰɺ༗ػతͳηΩϡϦςΟΛ࣮ݱ͢Δɻ

    4FD)VW  4FD)VWͷ֓ཁ
  20. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  4FD)VWΛߏ੒͢ΔγεςϜ܈ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7&%# 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF
  21. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT $)7&%#  4FD)VWγεςϜ܈ͷத৺ͱͳΔΠϯςϦδΣϯεͷϦϙδτϦɻ  ࣄྫ ߈ܸʹ༻͍ΒΕͨσʔλ΍ͦͷϝλσʔλ Λ஝ੵ͢ΔͨΊͷϦϙδτϦͱ
 ਓత੬ऑੑࣝผࢠΛ஝ੵ͢ΔͨΊͷϦϙδτϦ͔ΒͳΓɺ֤ࣄྫ͕ͭҎ্ͷਓ త੬ऑੑࣝผࢠͱ݁ͼͭ͘Α͏ʹ؅ཧ͢Δɻ

    4FD)VW  4FD)VW$)7& ࣄྫϦϙδτϦ ਓత੬ऑੑࣝผࢠϦϙδτϦ ID ൃੜ೔࣌ ϝλσʔλ ϖΠϩʔυ ਓత੬ऑੑࣝผࢠ ਓత੬ऑੑࣝผࢠ ਓత੬ऑੑ໊ આ໌
  22. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT $PSF&OHJOF  ϖΠϩʔυΛ.BYJNJ[JOH4FNBOUJD7PMVNFʹج͍ͮͯཁ໿͢Δ1SPDFTTPSͱɺ
 ֤ϖΠϩʔυ͕Ͳͷਓత੬ऑੑΛಥ͍ͨ߈ܸͰ͋ΔՄೳੑ͕ߴ͍͔Λ
 %PD7FD΍ΩʔϫʔυϚονϯάΛ༻͍ͯ൑அ͢Δ"OBMZ[FS͔ΒͳΔղੳΤϯδϯɻ 4FD)VW  $PSF&OHJOFͷ֓ཁ $PSF&OHJOF

    1SPDFTTPS "OBMZ[FS ݩσʔλ Ճ޻ࡁσʔλ Ճ޻ࡁσʔλ $)7&%# ൑அ͞Εͨ ਓత੬ऑੑ
  23. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  $PSF&OHJOFͷಈ࡞Πϝʔδ ਓత੬ऑੑࣝผࢠ ϦϙδτϦ (CHVE_DB[i]) ݕࠪର৅ σʔλ (Target)

    %PD7FD .BYJNJ[JOH 4FNBOUJD 7PMVNF ਓత੬ऑੑࣝผࢠ සग़Ωʔϫʔυ (Keyword[i]) ݕ஌ͳ͠ ߈ܸݕ஌ ᶃ%PD7FDʹΑΔจষؒͷྨࣅ౓͕ᮢ஋Λ௒͑Δ͔ɻ ᶄಛఆͷΩʔϫʔυ͕จষ಺ʹؚ·ΕΔ͔ɻ ᶃ ᶄ N N Y Y
  24. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  $PSF&OHJOFͷಈ࡞Πϝʔδ ਓత੬ऑੑࣝผࢠ ϦϙδτϦ (CHVE[i]) ݕࠪର৅ σʔλ (Target)

    %PD7FD .BYJNJ[JOH 4FNBOUJD 7PMVNF ਓత੬ऑੑࣝผࢠ සग़Ωʔϫʔυ (Keyword[i]) ਖ਼نදݱ ݕ஌ͳ͠ ߈ܸݕ஌ Target: ݕࠪର৅σʔλ for (i: 1..N) { Similarity = Doc2Vec(MSV(Target), CHVE_DB[i]) if (Similarity > Threshold) { if (Target ͕ Keyword[i] ʹؚ·ΕΔ) { TargetΛCHVE[i]Λಥ͍ͨ߈ܸͱͯ͠ݕ஌͢Δ } } }
  25. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ྫ֎తͳ$PSF&OHJOFϞδϡʔϧͷྫ ِͷ63- GBLF@VSM   5ZQPTRVBUUJOHɺ$PNCPTRVBUUJOHͷݕग़Λߦ͏ɻ 5ZQPTRVBUUJOH

    63-ͷࢹೝϛεΛར༻͢Δ߈ܸɻ XXXBNB[ODPNͳͲ͕֘౰͢Δɻ
 
 -FWFOTIUFJO%JTUBODFٴͼ
 +BSP8JOLMFS%JTUBODFΛ༻͍ͨ ಠࣗͷฤूڑ཭ࢉग़ΞϧΰϦζϜʹ
 ج͍ͮͯݕग़Λߦ͏ɻ $PNCPTRVBUUJOH ࣮ࡏͦ͠͏ͳΩʔϫʔυΛ૊Έ߹Θͤͯ Ϣʔβʹ63-Λ৴པͤ͞Δ߈ܸɻ XXXBNB[POMPHJODPNͳͲ͕֘౰͢Δɻ "MFYB3BOLJOHʹܝࡌ͞Ε͍ͯΔஶ໊ͳ
 63-ͱͷϚονϯάΛ௨ͯ͠ݕग़Λߦ͏ɻ ِͷϑΝΠϧ GBLF@pMF   ϝʔϧʹఴ෇͞ΕͨϑΝΠϧͷσʔλϑΥʔϚοτͱ࣮ࡍͷσʔλͷίϯςϯπ͕
 Ұக͍ͯ͠Δ͔Λݕࠪ͢Δɻ
  26. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "1*  ֤छπʔϧ΍αʔό͕σʔλΛ΍ΓͱΓ͢ΔͨΊͷΤϯυϙΠϯτɻ  ͋Β͔͡Ίఆٛ͞ΕͨσʔλεΩʔϚͱΤϯυϙΠϯτͷϧʔϧʹैͬͯσʔλΛ
 ΍ΓͱΓ͢Δɻ ओͳΤϯυϙΠϯτ  /general/*

    γεςϜશମʹؔ͢ΔΤϯυϙΠϯτɻ  /web/* 8FC্Ͱൃੜͨ͠ࣄྫʹؔ͢ΔΤϯυϙΠϯτɻ  /mail/* ϝʔϧܦ༝Ͱൃੜͨ͠ࣄྫʹؔ͢ΔΤϯυϙΠϯτɻ  /other/* ͦͷଞͷϝσΟΞ FH4.4 Ͱൃੜͨ͠ࣄྫʹؔ͢ΔΤϯυϙΠϯτɻ  /vuln/* ਓత੬ऑੑʹؔ͢ΔΤϯυϙΠϯτɻ
 ओͳσʔλεΩʔϚ - Case ࣄྫͷ֓ཁʹؔ͢ΔσʔλεΩʔϚɻ - CaseSpec ࣄྫͷৄࡉ FHϖΠϩʔυ ʹؔ͢ΔσʔλεΩʔϚɻ - Vulnerability ਓత੬ऑੑʹؔ͢ΔσʔλεΩʔϚɻ 4FD)VW  "1*
  27. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT $034 $SPTT0SJHJO3FTPVSDF4IBSJOH   "1*΁ͷϦΫΤετ͕Մೳͳ0SJHJOΛ4FD)VWγεςϜ܈ͷΈʹݶఆ τʔΫϯʹΑΔΠϯγσϯτใࠂ಺༰ͷݕূ  ݕࠪʹΑͬͯ߈ܸ͕ݕ஌͞Εͨ৔߹ʹͷΈ34"ॺ໊͞ΕͨτʔΫϯΛൃߦɻ 

    τʔΫϯͱରԠ͢ΔσʔλͷΈ"1*ʹ͓͍ͯडཧ͢Δɻ 4FD)VW  "1*ͷηΩϡϦςΟ "1* $MJFOU ݕࠪϦΫΤετ $BTF Ϩεϙϯε 5PLFO ݕࠪɾτʔΫϯൃߦ ౤ߘϦΫΤετ $BTF 5PLFO τʔΫϯݕূɾొ࿥
  28. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 8PSLFS  αʔόαΠυʹ͓͍ͯɺ"1*ɾ$)7&%#ɾ$PSF&OHJOFؒͷσʔλͷड͚౉͠ɺ
 ड͚౉͠͞ΕΔσʔλͷՃ޻΍ิॿతͳϝλσʔλͷ௥Ճ౳Λߦ͏ɻ 4FD)VW  8PSLFS ಈ࡞γφϦΦɿࣄྫશମͷऔಘ

  29. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  $PSF&OHJOFͷεέʔϥϏϦςΟ $PSF&OHJOF "1* ݕࠪର৅ σʔλ &OHJOF (CHVE[1])

    &OHJOF (CHVE[2]) &OHJOF (CHVE[N])  ݕࠪ݁Ռ
  30. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  $PSF&OHJOFͷεέʔϥϏϦςΟ $PSF&OHJOF "1* ݕࠪର৅ σʔλ &OHJOF (CHVE[1])

    &OHJOF (CHVE[2]) &OHJOF (CHVE[N])  &OHJOF (CHVE[M]) ݕࠪ݁Ռ ৽نʹఆٛ͞Εͨਓత੬ऑੑࣝผࢠ༻ͷղੳΤϯδϯ͸ "1*ʹΑͬͯந৅Խ͞ΕͨܗͰ༰қʹ֦ுՄೳɻ
 ։ൃऀ͸ಛఆͷ$)7&ʹରԠ͢ΔΤϯδϯΛ։ൃ͠ɺ
 $PSF&OHJOFͷϞδϡʔϧͱͯ͠૊ΈࠐΉ͚ͩͰྑ͍ɻ
  31. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  $PSF&OHJOFͷεέʔϥϏϦςΟ $PSF&OHJOF "1* ݕࠪର৅ σʔλ &OHJOF (CHVE[1])

    &OHJOF (CHVE[2]) &OHJOF (CHVE[N])  &OHJOF (CHVE[N]) ݕࠪ݁Ռ ίϯςφϕʔεͰల։ՄೳͰ͋ΔͨΊ ৄࡉͳγεςϜߏ੒Λҙࣝ͢Δ͜ͱͳ͘ ΧελϚΠζ͞Εͨ$)7&αʔόΛ ͋ΒΏΔ૊৫ɾ؀ڥͰల։Մೳɻ
  32. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW7JFXFS  $)7&ʹ֨ೲ͞ΕͨσʔλΛӾཡ͢ΔͨΊͷ8FCϖʔδɻ
 ӾཡՄೳͳ৘ใ  ߈ܸʹ༻͍ΒΕͨϝσΟΞผͷࣄྫɻ  ਓత੬ऑੑͷछผͱͦͷ֓ཁɻ 

    ಛఆͷਓత੬ऑੑͱ݁ͼ͍ͭͨࣄྫɻ 4FD)VW  4FD)VW7JFXFS
  33. None
  34. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW8FC  ѱੑ8FCαΠτݕग़༻ϒϥ΢β֦ுػೳɻ  Ӿཡதͷ8FCϖʔδ΍ಛఆͷ8FCϖʔδͷݕࠪΛϦΫΤετ͢Δɻ 4FD)VW  4FD)VW8FC

  35. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ௨ൢαΠτͷϩάΠϯը໘ͷงғؾ͕͍ͭ΋ͱͲ͔͜ҧ͏ɻ 4FD)VW  4FD)VW8FC http://www.amazon-login.com

  36. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ௨ൢαΠτͷϩάΠϯը໘ͷงғؾ͕͍ͭ΋ͱͲ͔͜ҧ͏ɻ 4FD)VW  4FD)VW8FC http://www.amazon-login.com ِͷ63- GBLF@VSM

  37. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW.BJM  ѱੑϝʔϧݕग़༻πʔϧɻ  ର৅ͷϝʔϧʹؔͯ͠ɺຊจ΍୊໊ͷσʔλɺηΩϡϦςΟؔ܎ͷϝʔϧϔομɺ
 ఴ෇ϑΝΠϧ౳ʹؔ͢ΔݕࠪΛϦΫΤετ͢Δɻ  FNMϑΝΠϧΛύʔε͢ΔಠࣗͷύʔαΛར༻͢Δɻ 4FD)VW

     4FD)VW.BJM 4FD)VW.BJM 1BSTFS 1BSTFEFNM "1* 3FTVMU FYQPSU
  38. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ڴഭΊ͍ͨϝʔϧ͕ಧ͍ͨɻ 4FD)VW  4FD)VW.BJM

  39. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ڴഭΊ͍ͨϝʔϧ͕ಧ͍ͨɻ 4FD)VW  4FD)VW.BJM ηΫετʔγϣϯ TFYUPSUJPO

  40. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW)FBSU  8FCϖʔδ্Ͱಈ࡞͢ΔνϟοτϘοτɻ  ਓత੬ऑੑΛಥ͍ͨ߈ܸͱࢥΘΕΔࣄྫʹର͢ΔΠϯλϥΫςΟϒ͔ͭΧδϡΞϧͳ ૬ஊ૭ޱͱͳΔ͜ͱͰɺใࠂ΍૬ஊΛߦ͏͜ͱ΁ͷϢʔβͷ৺ཧతোนΛ௿ݮ͢Δɻ  ݁ՌʹԠͯ͡Ϣʔβʹద੾ͳରॲํ๏Λఏࣔ͢Δɻ 4FD)VW

     4FD)VW)FBSU
  41. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ݟͨ͜ͱͷͳ͍ి࿩൪߸͔Β4.4͕ಧ͍ͨɻ 4FD)VW  4FD)VW)FBSU ͓ΊͰͱ͏͍͟͝·͢ʂ ͋ͳͨ͸ʓʓநબϓϩά ϥϜʹ౰બ͠·ͨ͠ɻ

    ͜ͷϝοηʔδʹॅॴͱ ࢯ໊Λೖྗ͢Δ͚ͩͰɺ ৆඼ΛϓϨθϯτ͍ͨ͠ ·͢ɻ ճ౴ʹ͸ظݶ͕͋Γ·͢ ͷͰ͓ૣ໨ʹ͓ਃࠐΈ͘ ͍ͩ͞ɻ 090-1234-****
  42. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͜Μͳͱ͖  ݟͨ͜ͱͷͳ͍ి࿩൪߸͔Β4.4͕ಧ͍ͨɻ 4FD)VW  4FD)VW)FBSU 090-1234-**** ͓ΊͰͱ͏͍͟͝·͢ʂ ͋ͳͨ͸ʓʓநબϓϩά

    ϥϜʹ౰બ͠·ͨ͠ɻ ͜ͷϝοηʔδʹॅॴͱ ࢯ໊Λೖྗ͢Δ͚ͩͰɺ ৆඼ΛϓϨθϯτ͍ͨ͠ ·͢ɻ ճ౴ʹ͸ظݶ͕͋Γ·͢ ͷͰ͓ૣ໨ʹ͓ਃࠐΈ͘ ͍ͩ͞ɻ ۚમతརӹ QSPpU ۓٸੑ VSHFOU رগੑ TDBSDJUZ
  43. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7&%# 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF
  44. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7&%# 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 7 tables / 17 schemas
  45. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7& 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 1,084L / 6MB
  46. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ 8PSLFS "1* 4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM

    *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 5,303L / 247MB
  47. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7& 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 167L / 740KB
  48. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7&%# 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 301L / 4MB
  49. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7& 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 275L / 12KB
  50. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7&%# 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 765L / 532KB
  51. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7& 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ։ൃن໛ 3,299L / 51MB
  52. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT 4FD)VW  ٕज़తৄࡉ $PSF&OHJOF "OBMZ[FS 1SPDFTTPS $)7& 8PSLFS "1*

    4FD)VW8FC *OUFSGBDF %BUB*0 4FD)VW.BJM *OUFSGBDF %BUB*0 1BSTFS 4FD)VW)FBSU *OUFSGBDF $IBU&OHJOF 4FD)VW7JFXFS 4FSWFS *OUFSGBDF ૯։ൃن໛ 11,194L / 309.3MB ˞ίϝϯτͷΈͷߦͳͲ͸আ͘ɻ
  53. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ݕग़ਫ਼౓ͷ޲্  ͞Βʹߴ౓ͳࣗવݴޠॲཧٕज़΍ػցֶशٕज़Λ༻͍ͨจষؒͷྨࣅ౓ܭࢉɻ  σʔλલॲཧʹ༻͍Δཁ໿ΞϧΰϦζϜͷվળɻ 4FD)VW.BJMͷ(6*ΞϓϦέʔγϣϯԽ  ܦݧ͕ઙ͍ϢʔβͰ΋༰қʹར༻Ͱ͖ΔΑ͏ʹ͢Δɻ $)7&είΞͷఆྔԽ

     ϢʔβଐੑʹԠͨ͡$)7&είΞͷఆྔԽɻ DG$7444DPSF    σʔληοτɺਓత੬ऑੑࣝผࢠͷఆٛͷ֦ॆ  ଞͷϑΟογϯάσʔλϕʔε౳ͱͷ࿈ܞɻ  طଘͷࣄྫͷ͞ΒͳΔௐࠪʹΑΔࡉ෼Խɻ ը૾ͷΈͰߏ੒͞ΕΔίϯςϯπ΁ͷରԠ Score[i] = f(UserAttribute, CHVE[i], Payload) 4FD)VW  ࠓޙͷల๬
  54. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ໨࣍  ͸͡Ίʹ ໰୊ఏىͱͦͷഎܠʹ͍ͭͯɻ ࢥࡧաఔ ࢥࡧۦಈίʔεͷऔΓ૊ΈΛ௨ͯ͠ɻ γεςϜͷઃܭ γεςϜʹٻΊΒΕΔ࢓૊Έͱͦͷߏ੒ʹ͍ͭͯɻ 4FD)VW

    ఏҊγεςϜͷߏ੒ͱ࣮૷ɺ͓Αͼٕज़తৄࡉʹ͍ͭͯɻ ͓ΘΓʹ ൃදͷ·ͱΊͱࠓޙͷల๬ʹ͍ͭͯɻ 4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT
  55. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ϓϩτλΠϓϕʔεͷΞδϟΠϧతͳ։ൃ  ϓϩτλΠϓ͕͋Δ͜ͱͰٞ࿦͕ਐΉɻ  ٞ࿦͕ਐΉ͜ͱͰϓϩμΫτΛΑΓચ࿅ͤ͞Δ͜ͱ͕Ͱ͖Δɻ  Ͱ͖͍ͯͳͯ͘΋ਓʹݟͤΔɺॿݴΛ΋Β͏ɻ ڴҖ΍੬ऑੑɺकΔ΂͖ର৅ͷద੾ͳఆٛͱϞσϦϯά 

    ᐆດͳఆٛͷ··Ͱઃܭ΍࣮૷ΛਐΊͯ͠·͏ͱ
 ຊདྷͷ໨త͔Β཭ΕͨϓϩμΫτʹͳͬͯ͠·͏ڪΕ͕͋Δɻ ໰୊ʹର͢ΔࢥࡧతͳΞϓϩʔν  ఆ͕ٛຊ౰ʹਖ਼͍͠ͷ͔ɺ࠾༻͍ͯ͠ΔΞϓϩʔνͰຊ౰ʹ໰୊ΛղܾͰ͖Δͷ͔ɺ
 ࣗ෼͕ຊ౰͸ԿΛ࣮ݱ͍ͨ͠ͷ͔ɺৗʹࢥࡧ͢Δɻ  ၆ᛌతͳࢹ఺͔Βࢥࡧ͢Δ͜ͱͰՄೳͳݶΓ٬؍తͳཱ৔͔Β໰୊Λଊ͑Δɻ αΠόʔηΩϡϦςΟ͸ਓؒͷ໰୊ʹؼண͢Δͷ͔΋͠Εͳ͍  ԿΛकΔ͔Ͱ͸ͳ͘ɺͦΕΛकΔ͜ͱͰ୭͕ͲͷΑ͏ʹخ͍͠ͷ͔Λߟ͑Δɻ  ٕज़తͳ໰୊Ͱ͋ͬͯ΋ɺͦΕΛਓؒʹର͢ΔΞϓϩʔνʹΑͬͯղܾͰ͖ͳ͍͔
 ৗʹ಄ͷย۱ʹஔ͍͓ͯ͘ɻ ͓ΘΓʹ  4FD)BDLͱ4FD)VWͷ։ൃΛ௨ͯ͠ಘͨφϨοδ
  56. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ͓ΘΓʹ  ຊൃදͷ·ͱΊ ࠷ऴ ໨ඪ ਓత੬ऑੑʹىҼ͢Δ໰୊ͷ੹೚ΛϢʔβ΁ͱؼணͤͣ͞
 ΤϯδχΞϦϯάͰղܾ͍ͯ͘͠ੈք΁ɻ ࢓૊Έ ମܥԽ͞Εͨਓత੬ऑੑʹؔ͢ΔΠϯςϦδΣϯεΛத৺ʹ


    ༷ʑͳπʔϧΛۓີʹ࿈ܞͤ͞Δ͜ͱͰɺ༗ػతͳηΩϡϦςΟΛ࣮ݱɻ ߏ੒ͱ ࣮૷ $)7&Λఆٛ͠ɺͦͷσʔλϦϙδτϦΛத৺ʹϏϡʔϫʔɺ8FC֦ுػೳɺ
 ѱੑϝʔϧݕग़༻πʔϧɺνϟοτϘοτɺ"1*Λઃܭɺ࣮૷ɻ ࠓޙͷ ໨ඪ ਓత੬ऑੑͷࡉ෼ԽٴͼΠϯςϦδΣϯεͷେن໛ԽΛਤΔͱͱ΋ʹɺ
 ࣗવݴޠॲཧٕज़ɺػցֶशٕज़ͷ׆༻ʹΑΔ߈ܸͷݕग़ਫ਼౓޲্ΛਤΔɻ
  57. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  "QQFOEJY

  58. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  ਓత੬ऑੑࣝผࢠͷৄࡉ http:// ِͷ63- fake_url ਓؒͷ୯७ͳνΣοΫϛε΍ࢹೝϛεΛૂͬͯ
 8FCαΠτͰ͸63-͕ɺϝʔϧͰ͸ૹ৴ݩϝʔϧ ΞυϨεͷυϝΠϯ͕༗໊ͳ૊৫ͷ΋ͷͱ

    ྨࣅ͍ͯ͠Δ͜ͱ͕ಛ௃ɻ ِͷϑΝΠϧ fake_file ϝʔϧʹ͓͍ͯɺҰݟ͢Δͱ҆શͳϑΝΠϧʹݟ͑Δ
 ةݥͳϑΝΠϧΛఴ෇ϑΝΠϧͱͯ͠ૹ৴͢Δ͜ͱͰɺ
 ର৅ͱ͢ΔϢʔβʹ౰֘ϑΝΠϧΛ։͔ͤͨΓ
 ࣮ߦͤͨ͞Γ͢ΔΑ͏ͳखޱɻ ۚમతརӹ profit λʔήοτʹରͯ͠ԿΒ͔ͷۚમతརӹ͕ಘΒΕΔ
 ͜ͱΛ্ࣔͨ͠Ͱɺ໨తͱ͢ΔߦಈΛҾ͖ग़ͦ͏ͱ
 ͢Δखޱɻ
  59. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT رগੑ scarcity "QQFOEJY  ਓత੬ऑੑࣝผࢠͷৄࡉ ِͷΞϥʔτ fake_alert ػີ৘ใ͕৵֐͞Ε͍ͯΔ͜ͱΛ௨஌্ͨ͠Ͱɺ
 ΞΧ΢ϯτ৘ใͷ֬ೝ΍ߋ৽ͱ͍͏໊໨Ͱ


    λʔήοτ͔Βػີ৘ใΛ઄औ͢ΔΑ͏ͳखޱɻ ಘΒΕΔԿΒ͔ͷܠ඼ͷ਺͕ݶΒΕ͍ͯͨΓɺ
 ͦΕ͕ಛఆͷظ͔ؒ͠ಘΒΕͳ͍͜ͱΛࣔ͢͜ͱͰ
 λʔήοτ͔Β໨తͱ͢ΔߦಈΛҾ͖ग़͢खޱɻ ۓٸੑ urgent ۓٸੑ͕͋ΔΑ͏ʹݟ͔͚ͤΔ͜ͱͰɺ
 ࣌ؒత༨༟Λ༩͑ͣʹɺλʔήοτ͔Β໨తͱ͢Δ
 ߦಈΛҾ͖ग़͢खޱɻ
  60. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT ݖҖ authority ηΫετʔγϣϯ sextortion "QQFOEJY  ਓత੬ऑੑࣝผࢠͷৄࡉ λʔέοτʹରͯ͠ɺ౰֘ϢʔβͷσόΠεΛ ϋοΩϯάͯ͠ੑతͳίϯςϯπʹؔΘΔΤϏσϯεΛ

    ॴ͍࣋ͯ͠Δ͔ͷΑ͏ʹِͬͯڴഭΛߦ͏͜ͱͰɺ Ծ૝௨՟ͷૹ৴౳Λཁٻ͢ΔΑ͏ͳखޱɻ ͦͷϝοηʔδʹ͓͍࣮ͯߦ͢Δ͜ͱΛཁٻ͞Ε͍ͯΔ λεΫͷཁٻݩʹԿΒ͔ͷݞॻ͖Λ࣋ͬͨਓ෺΍ ૊৫ͷଘࡏΛ׆༻͢Δ͜ͱͰɺ λʔήοτ͔Β໨తͱ͢ΔߦಈΛҾ͖ग़͢खޱɻ
  61. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  .BYJNJ[JOH4FNBOUJD7PMVNF .BYJNJ[JOH4FNBOUJD7PMVNF  จষཁ໿ͷͨΊͷΞϧΰϦζϜɻ  ಛఆͷจষ͔Βͦͷจষͷҙຯతͳ֎࿮Λநग़͠ɺͦͷ֎࿮ʹ׬શʹؚ·ΕΔจষΛ εΩοϓ͢Δ

    แؚ͞ΕΔจষ͸֎࿮ͷจষʹΑͬͯઆ໌͞Ε͍ͯΔͨΊ ɻ  JF͋ΔจষSiͷද͢ҙຯ͕ೋ࣍ݩϕΫτϧ(xi, yi)ͰදݱՄೳͰ͋Γɺ
 S1=(x1, y1), S2=(x2, y2), S3=(x3, y3)ͱ͢Δͱ͖ɺ
 x1<x2<x3 ͔ͭ y1<y2<y3 ͳΒɺS2͸S1,S3ʹΑͬͯઆ໌ࡁΈͱΈͳ͢ɻ :PHBUBNB %BOJ-JV 'FJ4NJUI /PBI  &YUSBDUJWF4VNNBSJ[BUJPOCZ.BYJNJ[JOH4FNBOUJD 7PMVNFW%
  62. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  GBLF@VSMݕग़ΞϧΰϦζϜ -FWFOTIUFJO%JTUBODF  จࣈͷૠೖɾ࡟আɾஔ׵ʹΑͬͯɺҰํͷจࣈྻΛ΋͏Ұํͷจࣈྻʹมܗ͢Δͷ ʹඞཁͳखॱͷ࠷খճ਺Λฤूڑ཭ͱͯ͠ఆٛɻ +BSP8JOLMFS%JTUBODF

  63. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  ࠓճ༻͍ͨσʔληοτ 1IJTIUBOL  ϑΟογϯάαΠτͷσʔλϕʔεɻ  IUUQTXXXQIJTIUBOLDPN
 41"."SDIJWF

     εύϜϝʔϧͷ๲େͳΞʔΧΠϒɻ  IUUQVOUSPVCMFEPSHTQBN /0/4501  /*$5ͷ։ൃ؀ڥɻεύϜϝʔϧ౳Λར༻ɻ εύϜϝʔϧऩू༻ΞυϨε  TQBNNBJMHBUIFS!HNBJMDPNͱ͍͏ΞΧ΢ϯτΛ࡞੒ͯ͠
 εύϜϝʔϧ͕ૹΒΕͯ͘ΔͰ͋Ζ͏αΠτ܈ʹొ࿥ɻ  ଞͷΞΧ΢ϯτʹૹΒΕͨεύϜϝʔϧΛຊΞυϨεʹϑΥϫʔσΟϯάɻ
  64. 6NFVDIJ5TVCBTBc4FD)VW4FDVSJUZ)VCGPS)VNBOWVMOFSBCJMJUJFT "QQFOEJY  ߈ܸݕ஌ʹؔΘΔධՁ ͋Δ߈ܸϝοηʔδ͕Ͳͷਓత੬ऑੑΛૂ͍ͬͯΔͷ͔  ߈ܸʹ༻͍ΒΕΔϝοηʔδ͸ਓత੬ऑੑࣝผࢠผʹྨࣅ͍ͯ͠Δ෦෼͕ଟ͍ͨΊɺ
 ͔ͳΓߴ͍ਫ਼౓ͰࣝผՄೳɻ  σϞͰࣔͨ͠߈ܸ༻ϝοηʔδ͸શͯϦϙδτϦʹ͸ଘࡏ͠ͳ͍΋ͷɻ


    JF%PD7FDͷ܇࿅༻σʔλͱͯ͠༻͍ΒΕ͍ͯͳ͍΋ͷɻ   ࠓޙਓత੬ऑੑࣝผࢠ͕૿Ճͨ͠৔߹ʹِཅੑ͕ߴ͘ͳΔڪΕ͸ଘࡏ͢Δɻ
 ͋Δϝοηʔδ͕ਖ਼౰Ͱ͋Δͷ͔ɺ߈ܸ༻Ͱ͋Δͷ͔  ਓత੬ऑੑͷࣝผͱൺֱͯ͠ࠔ೉Ͱ͋Δɻ  ͋ΔϝοηʔδͷίϯςϯπͷΈ͔ΒͰ͸ɺͦΕ͕ਖ਼౰Ͱ͋Δ͔߈ܸ༻Ͱ͋Δͷ͔ɺ
 ࣝผ͢Δ͜ͱ͸ ཧ࿦্ ෆՄೳͰ͋Δɻ  ِཅੑ͕ൃੜͨ͠৔߹ɺಛఆͷαʔϏεʹର͢Δ%P4ʹͭͳ͕ΔڪΕ͕͋ΔͨΊɺ
 ِӄੑͱِཅੑͷൃੜόϥϯεΛ૬ରతʹ௿͘͢ΔΑ͏ͳ࢓૊Έͷݕ౼͕ඞཁͰ͋Δɻ
 έʔεελσΟ  ʮޱ࠲൪߸Λڭ͑ͯ΋Β͑Δͱԯԁૹۚ͢Δʯͱ͍͏ࢫͷϝοηʔδ  ۚમతརӹ QSPpU Λૂ͍ͬͯΔ͜ͱ͸ൺֱత༰қʹࣝผՄೳɻ  ߈ܸ͔Ͳ͏͔Λࣝผ͢Δ͜ͱ͸ຊ࣭తʹࠔ೉Ͱ͋Δɻ w ຊ౰ʹԯԁΛૹͬͯ͘ΕΔͷ͔ʁޱ࠲൪߸͕ѱ༻͞Εͳ͍͔ʁ