Faculty Profiles - SHIMADA Hajime

Presentations -

Division display 101 - 120 of about 147 ／ All the affair displays >>

Recurrent Neural Network を利用したマルウェア推定手法

飛山駿, 山口由紀子, 嶋田創, 村瀬勉, 幾世知範, 八木毅

電子情報通信学会総合大会

Event date： 2016.3

Language：Japanese Presentation type：Oral presentation (general)

Venue：福岡県福岡市 Country：Japan

近年では、マルウェアの数は増加傾向にあり、また標
的型攻撃など攻撃も巧妙化している。攻撃に未知のマル
ウェアが使用されることも多く、従来のマルウェア検知
手法では攻撃を防ぎきることが難しくなっている。その
ため、マルウェアに感染していることを前提とした対策
が必要とされている。
　本研究では、マルウェアを感染させたPC のマルウェ
アプロセスのログファイルに対して機械学習を適用して
特徴を学習し、学習した特徴を利用して、マルウェア
の感染が疑われるPC のプロセスログからマルウェアら
しいプロセスを推定する手法を提案する。

Malware Infection Detection Based on Cluster Transition Probability of Time Series Division Traffic Data

Hideki Ogawa, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura, Tutomu Murase, Tomonori Ikuse, Takeshi Yagi

パス限定ALUカスケーディングのための命令並び替えの設計と評価

鈴木杏理, 小林良太郎, 嶋田創

情報処理学会全国大会

Event date： 2016.3

Language：English Presentation type：Oral presentation (general)

Venue：神奈川県横浜市 Country：Japan

1チップ上に数十個レベルのコアを持つメニーコアプロセッサが近年注目を集めている．メニーコアプロセッサは面積が大きくなる傾向があるため，プロセッサコアには面積/電力性能比の優れた1-way/2-wayインオーダ実行(以下IO)が主に採用され、またそれらは高機能なプロセッサコアの流用であることが多い．このようなプロセッサコアはIPC向上のために2-way/3-wayアウトオブオーダ実行(以下OoO)に拡張されることがあるが，追加の機構が必要なため面積/電力性能比が落ちることが懸念される．そこでIO実行の命令発行幅を3-way以上に拡張することが考えられる．しかし，3連続以上の命令すべてがデータ依存を持たない事は稀なため，3つ目以降のALUがほとんど動作せず，IPC向上は1%に満たない．そこで本研究では，小面積・省電力な機構を提案し，先行研究の評価機構とともに回路設計を行うことで，実用的なALUカスケーディング機構について考察を行った．

Network Type Dynamic Analysis System for Prevention of Malware Infection Expansion

Satoshi Fuchigami, Hirokazu Hasegawa, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

Event date： 2016.3

Language：Japanese Presentation type：Oral presentation (general)

Country：Japan

In recent years, it has been a social issue that cyber-attacks are increasing for the purpose of money
or secret information. Because there is a tendency that cyber-attacks become more sophisticated, it is difficult to
defend intrusions of attackers completely. Once attackers get beachhead in internal network, they try to attack other
computers in the internal network. Therefore, it is important to take measures for mitigating damage expansion
by attackers. As one of the method to suppress damage expansion, we propose the method of mitigating damage
expansion by means of network type dynamic analysis system. Our proposed method executes executable les
in sandbox environment which come into internal network of an organization. When an action which is cause of
malware infection expansion occurs, our system congures Access Control List(ACL) of network switch in internal
network to cutoff malware expansion based on communication of the executable in the sandbox and prevents
expansion of malware infection.

Dynamic construction of to-many communication topology by using OpenFlow

Shun Yanase, Hajime Shimada, Yukiko Yamaguchi, Hiroki Takakura

Cache Energy Reduction by Switching between L1 High Power and Low Power Cache under DVFS Environment

Kaoru Saiito, Ryotaro Kobayashi, and Hajime Shimada

Event date： 2015.12

Language：Japanese Presentation type：Oral presentation (general)

Country：Japan

Current CPU utilizes cache memory for decreasing an access speed gap between CPU and main memory.
But the cache occupies a large part of the processor energy consumption. Furthermore, due to SRAM characteristic,
cache cannot reduce supply voltage compared to CPU core so that DVFS cannot reduce much cache energy. So, we
thought that we can reduce further cache energy consumption by preparing different power and speed design cache
and switches them in proportion to DVFS activity. Our proposal reduces energy by modifying cache hierarchy to
prioritizing low-power and low-speed cache in proportion to DVFS activity.

インシデント対応時における通信量解析に基づく業務支障検知

塩田実里, 山口由紀子, 嶋田創, 高倉弘喜

電子情報通信学会　情報通信システムセキュリティ研究会

A Construction Method of Separated Internal Networkusing Directory Service Information and Network Traffic Data

Hirokazu Hasegawa, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

Event date： 2015.10

Language：Japanese Presentation type：Oral presentation (general)

Country：Japan

Separating network and controlling access among separated sub-networks are ef-
fective countermeasure against cyber attacks. Such countermeasure can prevent unintended
communication by malware. Furthermore we can quickly sense infected hosts, estimate their
in
uence and isolate them from the network. However, enormous effort and operational cost
are required to construct such a separated network and proper access control. As a solution, we
propose a construction method of separated internal network that refers directory service to ob-
tain employee information and his/her access authority for the separation. Furthermore, we use
network traffic data to determine unnecessary communication among separated sub-networks.

Cyber Attack Detection Based on Cluster Sequence of Communication

Shohei Araki, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

Event date： 2015.10

Language：Japanese Presentation type：Oral presentation (general)

Country：Japan

Cyber attacks have been sophisticating. A signature-based intrusion detection system
(IDS) is one of the countermeasures, but it detects only attacks whose signature are provided
in advance. In order to detect unknown attacks without signatures, it is expected to develop
some method, e.g., an anomaly-based IDS. In this paper, we propose a method that dose not
require signatures of attacks. In this method, we perform clustering and give a score by cluster
sequence of communication per host after extracting features from communication. We aim to
improve the detection accuracy by taking session sequence of prior and latter communication
into account.

Technical Competency Analysis on Domestic and Foreign Universities for Information Security Curriculum Development

YoungKyung Son, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

Event date： 2015.10

Language：Japanese Presentation type：Oral presentation (general)

Country：Japan

Threats to information security are increasing rapidly. However, professionals who fight against them are lacking from the viewpoint of both quantity and quality. To solve this problem, the government of Japan announced the new policy to expand a curriculum of information security at higher education institutions. The curriculum needs to be practical and provide technical competencies required on actual field. In this study, we investigate the direction for curriculum development by adopting the information security competency defined by NICE(The National Initiative for Cybersecurity Education) and analyzing the curriculum among domestic and foreign universities.

FPGA Base TCP Session Features Extraction Utilizing Off-Chip Memories International conference

Satoshi Fuchigami, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

The 7th International Conference on Evolving Internet (INTERNET 2015)

Event date： 2015.10

Language：English Presentation type：Oral presentation (general)

Country：Malta

In recent years, unknown attacks like zero-day attacks
and targeted attacks are increasing. These attacks are
difficult to detect because information gathered from already
known attacks are not useful for those detection. Anomalybased
Network Intrusion Detection System(IDS) has potential to
find these attacks. However, almost all anomaly-based Network
IDS is implemented with software so that it cannot catch up
with growing network traffic. To alleviate this problem, there
is Hardware/Software(HW/SW) cooperated Network IDS which
migrates Transmission Control Protocol(TCP) feature extraction
process to Field Programmable Gate Array(FPGA). However,
the prior implementation is completed in FPGA so that it cannot
treat long TCP sessions because of shortage of memory blocks
in FPGA-chip. In this paper, we propose TCP session feature
extraction and cumulation by FPGA combining off-chip Ternary
Content Addressable Memory(TCAM) and Dynamic Random
Access Memory(DRAM) for HW/SW cooperated Network IDS.
This approach uses these off-chip memories for buffering features
while a TCP session continues. We designed architecture and
implemented. We estimated that our system can manage 1,024K
sessions simultaneously.

Technical Competency Analysis on Information Security Curriculum at University

YoungKyoung Son, Yukiko Yamaguchi, Hajime Shimada, Hiroki Takakura

Evaluation on Malware Classification by Combining Traffic Analysis and Fuzzy Hashing of Malware Binary International conference

S. Hiruta, Y. Yamaguchi, H. Shimada, H. Takakura

the 2015 International Conference on Security and Management (SAM'15),

アプリケーション主導のリンク速度調整による有線イーサネット消費電力量

吉田慎吾, 嶋田創, 山口由紀子, 高倉弘喜

情報処理学会研究報告, Vol. 2015-IOT-29, No. 7, pp. 1-8

Improvement of Data Utilization Efficiency for Cache Memory by Compressing Frequent Bit Strings International conference

Takuro Yoshida, Hiroya Ochiai, Ryotaro Kobayashi, and Hajime Shimada

The 18th International Symposium on Low-Power and High-Speed Chips (COOLChips XVIII)

Event date： 2015.4

Language：English Presentation type：Poster presentation

Country：Japan

Since data and instructions are all stored on the main
memory, memory access is typically a major bottleneck in modern
microprocessors. While processor performance is steadily
improving, main-memory access latency is not being reduced
so much; it means that the latency is becoming relatively greater
compared to clock frequency. Thus, processors need to wait for
a long time to fetch needed data and instructions. To alleviate
this problem, typical processors use hierarchical memories,
which consist of on-chip, multi-level memory caches and offchip
the main memory.
However, such caches consume significant energy because
cache access occurs every time memory instructions
(Load/Store) are executed; furthermore the bigger cache size
becomes, the more energy the cache consumes.
Therefore, to decrease per-access energy consumption of the
L1 data cache, this study proposes an approach to reduce its
cache size.

実行モジュールの特徴量と通信パターンを併用したマルウェア分類手法

蛭田将平, 山口由紀子, 嶋田創, 高倉弘喜

情報処理学会第77回全国大会予稿集, 4X-01

頻出ビット列の圧縮によるキャッシュメモリのデータ利用効率の向上

落合裕也, 小林良太郎, 嶋田創

情報処理学会第77回全国大会予稿集, 4J-02

細粒度なヘテロジニアスクラスタコアによる消費電力削減の提案

金子郁未, 小林良太郎, 嶋田創

情報処理学会第77回全国大会予稿集, 4J-06

オンボードメモリを活用するFPGAを用いたTCPセッション再構成手法

淵上智史, 嶋田創, 山口由紀子, 高倉弘喜

情報処理学会第77回全国大会予稿集, 5X-03

BGPにおける経路設定ミスの要因分析とその対策手法の提案

近藤匠, 山口由紀子, 嶋田創, 高倉弘喜

情報処理学会第77回全国大会予稿集, 4W-08

　 PREV - NEXT 　

<SHIMADA Hajime>

Presentations -