{"created":"2023-05-15T12:16:57.100269+00:00","id":500,"links":{},"metadata":{"_buckets":{"deposit":"e3e69ac7-16ed-4e9e-8c07-3626d7a1db58"},"_deposit":{"created_by":3,"id":"500","owners":[3],"pid":{"revision_id":0,"type":"depid","value":"500"},"status":"published"},"_oai":{"id":"oai:tuis.repo.nii.ac.jp:00000500","sets":["1:4:124:137"]},"author_link":["2192","2193","2194","2195","2196","2197"],"control_number":"500","item_1701328008552":{"attribute_name":"出版者","attribute_value_mlt":[{"subitem_publisher":"東京情報大学","subitem_publisher_language":"ja"}]},"item_1_biblio_info_14":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicIssueDates":{"bibliographicIssueDate":"2014-03-01","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"2","bibliographicPageEnd":"72","bibliographicPageStart":"63","bibliographicVolumeNumber":"17","bibliographic_titles":[{"bibliographic_title":"東京情報大学研究論集","bibliographic_titleLang":"ja"}]}]},"item_1_creator_6":{"attribute_name":"著者名(日)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"阿部, 幸太朗","creatorNameLang":"ja"},{"creatorName":"アベ, コウタロウ","creatorNameLang":"ja-Kana"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"森口, 一郎","creatorNameLang":"ja"},{"creatorName":"モリグチ, イチロウ","creatorNameLang":"ja-Kana"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Abe, Kohtarou","creatorNameLang":"en"}]},{"creatorNames":[{"creatorName":"Moriguchi, Ichirou","creatorNameLang":"en"}]}]},"item_1_creator_7":{"attribute_name":"著者名よみ","attribute_type":"creator","attribute_value_mlt":[{"nameIdentifiers":[{}]},{"nameIdentifiers":[{}]}]},"item_1_creator_8":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"nameIdentifiers":[{}]},{"nameIdentifiers":[{}]}]},"item_1_description_1":{"attribute_name":"ページ属性","attribute_value_mlt":[{"subitem_description":"P(論文)","subitem_description_type":"Other"}]},"item_1_description_11":{"attribute_name":"抄録(日)","attribute_value_mlt":[{"subitem_description":"DDoS攻撃による被害軽減を目的としたシステムの構築と評価を行った。DDoS攻撃の対策としてはトラフィック量を制御することが一般的であるが、この手法では正規ユーザのパケットもトラフィック量の中に含まれるため正規ユーザだけにサービスを提供することができない。本システムでは、まずIDSが攻撃ホストからの攻撃を検知し、Webサーバ及びDNSサーバにDDoS攻撃回避要求を申請する。回避要求を受けたWebサーバは自身のIP addressを変更することで攻撃を回避する。また、正規ユーザを回避先のWebサーバに誘導するため、DNSサーバはzoneファイルのAレコードを変更する。しかし、WebサーバのIP addressを変更する際、ネットワークを再起動する必要があるため、IP address切り替え時間を考慮しWebサーバを2台稼動させたdual apacheシステムを構築し、性能比較を行った。この結果、DDoS攻撃に対して本システムの有効性を示すことができた。しかし、IP addressを変更しても再びDNSに対し正引きアクセスする機能を持つ攻撃に対しては、本システムが性能を十分に発揮できないことも明らかになった。","subitem_description_language":"ja","subitem_description_type":"Other"}]},"item_1_description_12":{"attribute_name":"抄録(英)","attribute_value_mlt":[{"subitem_description":"In this study, damage reducing system against DDoS was developed and evaluated. Although generally controlling the amount of traffic is a most common method, packets of normal users are also affected by this strategy. Firstly a intrusion detection system detects a packet of DDoS, and instructs a Web server and a DNS server to evade the DDoS attack. After receiving the request, the Web server changes its IP address to avoid the attack. Simultaneous the DNS server rewrites the address record in zone file to lead normal users to the new address of the Web server. However, because it is necessary to reboot the network function of Web server for changing the IP address, a new system(dual apache system) that comprises two Web servers for the purpose of reducing the time if rebooting network was also built and compared with the system including one Web server. As a result this proposed DDoS evading system confirmed its efficiency against DDoS attacks. It, however, was also found that the system of this study is not so effective against the DDoS attack tools which repeatedly access DNS server for name resolutions.","subitem_description_language":"en","subitem_description_type":"Other"}]},"item_1_identifier_registration":{"attribute_name":"ID登録","attribute_value_mlt":[{"subitem_identifier_reg_text":"10.15029/00000497","subitem_identifier_reg_type":"JaLC"}]},"item_1_source_id_13":{"attribute_name":"雑誌書誌ID","attribute_value_mlt":[{"subitem_source_identifier":"AA11155514","subitem_source_identifier_type":"NCID"}]},"item_1_text_10":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_language":"en","subitem_text_value":"Tokyo University of Information Sciences, Faculty of Informatics, Department of Information Systems"},{"subitem_text_language":"en","subitem_text_value":"Tokyo University of Information Sciences, Faculty of Informatics, Department of Information Systems"}]},"item_1_text_9":{"attribute_name":"著者所属(日)","attribute_value_mlt":[{"subitem_text_language":"ja","subitem_text_value":"東京情報大学総合情報学部情報システム学科学部学生"},{"subitem_text_language":"ja","subitem_text_value":"東京情報大学総合情報学部情報システム学科"}]},"item_files":{"attribute_name":"ファイル情報","attribute_type":"file","attribute_value_mlt":[{"accessrole":"open_date","date":[{"dateType":"Available","dateValue":"2014-03-01"}],"displaytype":"detail","filename":"KJ00008984459.pdf","filesize":[{"value":"2.1 MB"}],"format":"application/pdf","license_note":"TUIS","licensetype":"license_note","mimetype":"application/pdf","url":{"label":"KJ00008984459","url":"https://tuis.repo.nii.ac.jp/record/500/files/KJ00008984459.pdf"},"version_id":"4eecc8b9-067f-40dd-ad71-136c2f7e8d7e"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"DNS","subitem_subject_language":"ja","subitem_subject_scheme":"Other"},{"subitem_subject":"DDoS攻撃","subitem_subject_language":"ja","subitem_subject_scheme":"Other"},{"subitem_subject":"IDS","subitem_subject_language":"ja","subitem_subject_scheme":"Other"},{"subitem_subject":"ネットワークセキュリティ","subitem_subject_language":"ja","subitem_subject_scheme":"Other"},{"subitem_subject":"dns","subitem_subject_language":"en","subitem_subject_scheme":"Other"},{"subitem_subject":"ddos attack","subitem_subject_language":"en","subitem_subject_scheme":"Other"},{"subitem_subject":"ids","subitem_subject_language":"en","subitem_subject_scheme":"Other"},{"subitem_subject":"network security","subitem_subject_language":"en","subitem_subject_scheme":"Other"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourcetype":"departmental bulletin paper","resourceuri":"http://purl.org/coar/resource_type/c_6501"}]},"item_title":"DNSを用いたDDoS攻撃回避システム","item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"DNSを用いたDDoS攻撃回避システム","subitem_title_language":"ja"},{"subitem_title":"DDoS Attack Evading System by DNS","subitem_title_language":"en"}]},"item_type_id":"1","owner":"3","path":["137"],"pubdate":{"attribute_name":"PubDate","attribute_value":"2014-03-01"},"publish_date":"2014-03-01","publish_status":"0","recid":"500","relation_version_is_last":true,"title":["DNSを用いたDDoS攻撃回避システム"],"weko_creator_id":"3","weko_shared_id":-1},"updated":"2023-12-22T00:26:57.903614+00:00"}