Title:
CLASSIFICATION DEVICE, CLASSIFICATION METHOD, AND CLASSIFICATION PROGRAM
Document Type and Number:
WIPO Patent Application WO/2018/066221
Kind Code:
A1
Abstract:
A classification device (1) classifies into a set with similar features serial data in which communication destinations in a plurality of communications that have been input are recorded in order of occurrence of the communications. The classification device comprises: a numerical vector calculation unit (14) for calculating a numerical vector indicating a communication destination characteristic for each communication destination on the basis of the serial data, in which the communication destinations in the plurality of communications are recorded in order of occurrence of the communications; and a classification unit (15) for classifying the serial data into a set with similar features on the basis of an order relationship of the communication destinations of the numerical vectors.
Inventors:
SHIBAHARA TOSHIKI (JP)
YAGI TAKESHI (JP)
AKIYAMA MITSUAKI (JP)
TAKATA YUTA (JP)
CHIBA DAIKI (JP)
YAGI TAKESHI (JP)
AKIYAMA MITSUAKI (JP)
TAKATA YUTA (JP)
CHIBA DAIKI (JP)
Application Number:
PCT/JP2017/028596
Publication Date:
April 12, 2018
Filing Date:
August 07, 2017
Export Citation:
Assignee:
NIPPON TELEGRAPH & TELEPHONE (JP)
International Classes:
G06F17/30; G06F21/55
Other References:
NAOMI KUZE ET AL.: "Detection of Vulnerability Scanning Using Features of Collective Accesses Collected from Several Honeypots", IEICE TECHNICAL REPORT, vol. 115, no. 488, 25 February 2016 (2016-02-25), pages 47 - 52, XP032918254
YASUTAKA SHINDO ET AL.: "Detection of Drive-by Download Attacks Based on File Type Transition in Malware Infection Process", CSS2014 COMPUTER SECURITY SYMPOSIUM 2014 RONBUNSHU GODO KAISAI MALWARE TAISAKU KENKYU JINZAI IKUSEI WORKSHOP 2014 IPSJ SYMPOSIUM SERIES, vol. 2014, no. 2, 24 December 2014 (2014-12-24), pages 575 - 582, XP055597001
DAICHI ADACHI ET AL.: "Hostbase ni yoru Remote Access Trojan(RAT) no Soki Kenchi Shuho", CSS2015 COMPUTER SECURITY SYMPOSIUM 2015 RONBUNSHU GODO KAISAI MALWARE TAISAKU KENKYU JINZAI IKUSEI WORKSHOP 2015 PRIVACY WORKSHOP 2015 IPSJ SYMPOSIUM SERIES, vol. 2015, no. 3, 4 February 2016 (2016-02-04), pages 1111 - 1118, XP009514896
MITSUHIRO HATADA ET AL.: "Evaluation of Clustering Analysis Based on Malware Traffic Model", IEICE TECHNICAL REPORT, vol. 116, no. 132, 7 July 2016 (2016-07-07), pages 59 - 64, XP055597007
HIROAKI MATSUMOTO ET AL.: "Visualization System for Drive-by-Download Traffic", COMPUTER SECURITY SYMPOSIUM 2014 , vol. 2014, no. 2, 24 December 2014 (2014-12-24), pages 9 - 16, XP055597014
See also references of EP 3486809A4
YASUTAKA SHINDO ET AL.: "Detection of Drive-by Download Attacks Based on File Type Transition in Malware Infection Process", CSS2014 COMPUTER SECURITY SYMPOSIUM 2014 RONBUNSHU GODO KAISAI MALWARE TAISAKU KENKYU JINZAI IKUSEI WORKSHOP 2014 IPSJ SYMPOSIUM SERIES, vol. 2014, no. 2, 24 December 2014 (2014-12-24), pages 575 - 582, XP055597001
DAICHI ADACHI ET AL.: "Hostbase ni yoru Remote Access Trojan(RAT) no Soki Kenchi Shuho", CSS2015 COMPUTER SECURITY SYMPOSIUM 2015 RONBUNSHU GODO KAISAI MALWARE TAISAKU KENKYU JINZAI IKUSEI WORKSHOP 2015 PRIVACY WORKSHOP 2015 IPSJ SYMPOSIUM SERIES, vol. 2015, no. 3, 4 February 2016 (2016-02-04), pages 1111 - 1118, XP009514896
MITSUHIRO HATADA ET AL.: "Evaluation of Clustering Analysis Based on Malware Traffic Model", IEICE TECHNICAL REPORT, vol. 116, no. 132, 7 July 2016 (2016-07-07), pages 59 - 64, XP055597007
HIROAKI MATSUMOTO ET AL.: "Visualization System for Drive-by-Download Traffic", COMPUTER SECURITY SYMPOSIUM 2014 , vol. 2014, no. 2, 24 December 2014 (2014-12-24), pages 9 - 16, XP055597014
See also references of EP 3486809A4
Attorney, Agent or Firm:
SAKAI INTERNATIONAL PATENT OFFICE (JP)
Download PDF: