æ°èŠäºæ¥ãç«ã¡äžããéãã€ã³ã¿ãŒããããä»ãããµãŒãã¹ã®æäŸã«ãããŠã¯ããµã€ããŒæ»æãäžæ£ã¢ã¯ã»ã¹ã®ãªã¹ã¯ãåžžã«ã€ããŸãšããŸããç¹ã«ã¹ã¿ãŒãã¢ããäŒæ¥ã§ã¯ãéãããäºç®ãšäººå¡ã§ã»ãã¥ãªãã£å¯Ÿçãè¬ããå¿ èŠããããããå¹ççãã€å¹æçãªæ¹æ³ãæ±ããããŸããããã§æ³šç®ãããŠããã®ããAIã掻çšããäžæ£ã¢ã¯ã»ã¹å¯Ÿçã§ããæ©æ¢°åŠç¿ã«ããç°åžžæ€ç¥ã«ãããæªç¥ã®æ»æãã¿ãŒã³ã«ã察å¿å¯èœãšãªãã人çè² æ ãå€§å¹ ã«è»œæžã§ããŸããäžæ¹ã§ããããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãå€èŠçŽ èªèšŒãè匱æ§ç®¡çã®èªååãªã©ãæè¡çã¢ãããŒãã«ããã»ãã¥ãªãã£åŒ·åçãæ¬ ãããŸãããæ¬èšäºã§ã¯ãæ°èŠäºæ¥ã®æåãæ¯ãã匷åºãªã»ãã¥ãªãã£åºç€ã®æ§ç¯ã«åããŠãAIãã»ãã¥ãªãã£æè¡ã®æŽ»çšæ¹æ³ã詳ãã解説ããŸãã
äžæ£ã¢ã¯ã»ã¹ã®è åšãšæ°èŠäºæ¥ãžã®åœ±é¿
ã€ã³ã¿ãŒãããã®æ®åã«ãããããžãã¹ã®å¯èœæ§ã¯å€§ããåºãããŸããããããããã®äžæ¹ã§ãµã€ããŒæ»æãäžæ£ã¢ã¯ã»ã¹ã®ãªã¹ã¯ãé«ãŸã£ãŠããŸããç¹ã«æ°èŠäºæ¥ãç«ã¡äžããéã¯ãã»ãã¥ãªãã£å¯Ÿçã«ååãªæ³šæãæãå¿ èŠããããŸãã
äžæ£ã¢ã¯ã»ã¹ã«ããæ å ±æŒæŽ©ããã·ã¹ãã ããŠã³ã¯äŒæ¥ã«å€§ããªæ倱ããããããŸããæ°èŠäºæ¥ãçãããããçç±ãšããŠãã»ãã¥ãªãã£äœå¶ãæªæŽåãªç¹ãæããããŸããã¹ã¿ãŒãã¢ããäŒæ¥ã¯éãããè³éãšäººæã§äºæ¥ãé²ãããããã»ãã¥ãªãã£å¯ŸçãåŸåãã«ãªããã¡ã§ãã
ãŸããæ°èŠäºæ¥ã¯ã¡ãã£ã¢ã®æ³šç®ãéãããããããã«ãŒã«ãšã£ãŠé åçãªã¿ãŒã²ãããšãªããŸããé©æ°çãªã¢ã€ãã¢ããµãŒãã¹ãçã£ãŠãæ©å¯æ å ±ãçã¿åºãããšããç¯çœªè ãååšããŸãã
äžæ£ã¢ã¯ã»ã¹ã«ãã被害ã¯ãçŽæ¥çãªçµæžçæ倱ã ãã§ãªãã顧客ããã®ä¿¡é Œã倱ãããšã«ãã€ãªãããŸããæ å ±æŒæŽ©äºæ ãçºçããã°ããã©ã³ãã€ã¡ãŒãžã倧ããå·ã€ããäºæ¥ã®ç¶ç¶ãå°é£ã«ãªãã±ãŒã¹ããããŸãã
ãã®ãããæ°èŠäºæ¥ãæåã«å°ãããã«ã¯ãã»ãã¥ãªãã£å¯Ÿçãé©åã«è¡ãããšãäžå¯æ¬ ã§ããAIãã»ãã¥ãªãã£æè¡ã掻çšããäžæ£ã¢ã¯ã»ã¹ã®ãªã¹ã¯ãæå°éã«æããåãçµã¿ãæ±ããããŠããŸãã
äžæ£ã¢ã¯ã»ã¹ã®æå£ãšè¢«å®³ã®å®æ
äžæ£ã¢ã¯ã»ã¹ã®æå£ã¯å¹Žã å·§åŠåããŠãããäŒæ¥ã¯åžžã«ææ°ã®è åšã«åããå¿ èŠããããŸãã代衚çãªæ»æææ³ãšããŠã以äžã®ãããªãã®ãæããããŸãã
- ãã£ãã·ã³ã°è©æ¬ºïŒã¡ãŒã«ãåœãµã€ãã䜿ã£ãŠå人æ å ±ãçã¿åºãæå£
- ã©ã³ãµã ãŠã§ã¢ïŒã·ã¹ãã ãæå·åãã身代éãèŠæ±ãããã«ãŠã§ã¢
- SQLã€ã³ãžã§ã¯ã·ã§ã³ïŒè匱æ§ã®ããWebãµã€ãããDBãäžæ£ã«æäœããæ»æ
- DDoSæ»æïŒå€§éã®ã¢ã¯ã»ã¹ã§ã·ã¹ãã ãåæ¢ã«è¿œã蟌ãæ»æ
- æšçåæ»æïŒç¹å®ã®äŒæ¥ãçµç¹ãçã£ãå·§åŠãªæ»æ
ãããã®æ»æã«ãããäŒæ¥ã¯æ·±å»ãªè¢«å®³ãåããŠããŸããæ å ±æŒæŽ©ã«ããæå®³è³ åããã·ã¹ãã 埩æ§ã®ããã®ã³ã¹ãã¯èšå€§ãªé¡ã«äžããŸãããŸãããµãŒãã¹åæ¢ã«ããæ©äŒæ倱ããä¿¡çšå€±å¢ã«ãã顧客é¢ããªã©ãéæ¥çãªåœ±é¿ãç¡èŠã§ããŸããã
çµæžç£æ¥çã®èª¿æ»ã«ãããšã2020幎ã®åœå äŒæ¥ã®ãµã€ããŒæ»æã«ãã被害ç·é¡ã¯ã幎éã§çŽ2,000ååã«ã®ãŒããšæšèšãããŠããŸãããŸããå®éã«è¢«å®³ãåããäŒæ¥ã®å²åã¯ãäžå°äŒæ¥ã§çŽ20%ã倧äŒæ¥ã§ã¯çŽ50%ã«éããŠããŸãã
äžæ£ã¢ã¯ã»ã¹ã«ãã被害ã¯ãäŒæ¥èŠæš¡ãåããæ·±å»ãªåé¡ãšãªã£ãŠããŸããç¹ã«ãã»ãã¥ãªãã£äœå¶ãè匱ãªäžå°äŒæ¥ãæ°èŠäºæ¥ã¯ãçãããããåŸåã«ãããŸãããµã€ããŒæ»æã®è åšãèªèããé©åãªå¯Ÿçãè¬ããããšãæ¥åãšãªã£ãŠããŸãã
æ°èŠäºæ¥ç«ã¡äžãã«ãããã»ãã¥ãªãã£ãªã¹ã¯
æ°èŠäºæ¥ãç«ã¡äžããéã¯ãã¹ããŒãæãæã£ãŠåžå Žã«åå ¥ããããšãéèŠã§ããããããã»ãã¥ãªãã£å¯ŸçãäžååãªãŸãŸäºæ¥ãé²ãããšã倧ããªãªã¹ã¯ãæ±ããããšã«ãªããŸãã
ãŸããæ°èŠäºæ¥ã§ã¯ãéãããäºç®ãšäººå¡ã§ã·ã¹ãã éçºãè¡ããããã»ãã¥ãªãã£é¢ã§ã®æ€èšŒãäžè¶³ããã¡ã§ããè匱æ§ãèŠèœãšããšãããã«ãŒã«çãããæ Œå¥œã®ã¿ãŒã²ããã«ãªã£ãŠããŸããŸãã
ãŸããæ°èŠäºæ¥ã§ã¯ãå€éšã®éçºäŒç€Ÿãã¯ã©ãŠããµãŒãã¹ã掻çšããããšãå€ãã§ããããããããµãŒãããŒãã£ãŒãšã®é£æºã«ãããŠãã»ãã¥ãªãã£ãªã¹ã¯ãçºçããŸããæ å ±ã®åãæž¡ãããã¢ã¯ã»ã¹æš©éã®ç®¡çã«äžåããããšãæ å ±æŒæŽ©ã«ã€ãªããæãããããŸãã
å ããŠãæ°èŠäºæ¥ã§ã¯ããŠãŒã¶ãŒæ°ã®æ¥å¢ã«äŒŽããã·ã¹ãã ãžã®è² è·ãé«ãŸããŸããã¢ã¯ã»ã¹éäžã«ããã·ã¹ãã ããŠã³ã¯ããµãŒãã¹å質ã®äœäžãæãã ãã§ãªããäžæ£ã¢ã¯ã»ã¹ã®ãªã¹ã¯ãé«ããŠããŸããŸãã
æ°èŠäºæ¥ã®ã»ãã¥ãªãã£ãªã¹ã¯ã軜æžããããã«ã¯ã以äžã®ãããªå¯Ÿçãæ±ããããŸãã
- ã»ãã¥ãªãã£ãèæ ®ããã·ã¹ãã èšèš
- è匱æ§èšºæã®å®æçãªå®æœ
- ã¢ã¯ã»ã¹å¶åŸ¡ã»èªèšŒã·ã¹ãã ã®å°å ¥
- æå·åéä¿¡ã®å©çš
- åŸæ¥å¡ãžã®ã»ãã¥ãªãã£æè²
- ã€ã³ã·ãã³ã察å¿äœå¶ã®æŽå
ã»ãã¥ãªãã£å¯Ÿçãäºæ¥æŠç¥ã«çµã¿èŸŒã¿ããªã¹ã¯ãããžã¡ã³ããé©åã«è¡ãããšããæ°èŠäºæ¥ã®æåã«ã€ãªãããŸããããããè åšãæ³å®ããäžå šã®åããæ ããªãããšãéèŠã§ãã
ã»ãã¥ãªãã£å¯Ÿçã®éèŠæ§ãšæè³å¹æ
ãµã€ããŒæ»æã®è åšãé«ãŸãäžãã»ãã¥ãªãã£å¯Ÿçãžã®æè³ã¯æ¬ ãããŸãããããããã³ã¹ããæžå¿µããçµå¶è ãå°ãªããããŸãããæãããŠãã»ãã¥ãªãã£æè³ã«èŠåãå¹æã¯ããã®ã§ããããïŒ
ã»ãã¥ãªãã£æè³ã¯ããªã¹ã¯åé¿ãšäºæ¥ç¶ç¶ã®èŠ³ç¹ããèŠããšãå¿ èŠäžå¯æ¬ ãªçµè²»ãšèšããŸããæ å ±æŒæŽ©ããã·ã¹ãã ããŠã³ã«ããæ倱ã¯ãäŒæ¥ã®åç¶ããè ãããããŸãããé©åãªå¯Ÿçãè¬ããããšã§ããããããªã¹ã¯ãæå°éã«æããããŸãã
ç±³åœã®èª¿æ»äŒç€Ÿããã¢ã³ç 究æã®å ±åã«ãããšããµã€ããŒæ»æ1件ãããã®å¹³å被害é¡ã¯ãçŽ3.8ååã«ã®ãŒããŸããäžæ¹ã§ãã»ãã¥ãªãã£å¯Ÿçãžã®å¹³åæè³é¡ã¯ãçŽ1.2ååçšåºŠã§ãã被害é¡ãšæ¯èŒãããšãæè³å¹æã¯æããã§ãããã
å ããŠãã»ãã¥ãªãã£å¯Ÿçã¯ãäŒæ¥ã®ä¿¡é Œæ§ãé«ãããã©ã³ã䟡å€ãåäžãããå¹æããããŸããæ å ±ã»ãã¥ãªãã£ãžã®åãçµã¿ãç©æ¥µçã«ã¢ããŒã«ããããšã§ã顧客ãååŒå ããã®ä¿¡é Œãç²åŸã§ããŸãã
ãŸããAIã掻çšããã»ãã¥ãªãã£è£œåã®ç»å Žã«ãããå¹ççãã€é«åºŠãªã»ãã¥ãªãã£å¯Ÿçãå¯èœã«ãªã£ãŠããŸããæ©æ¢°åŠç¿ã«ããäžæ£ã¢ã¯ã»ã¹ãæ€ç¥ããããèªåçã«è åšãæé€ãããããããšã§ã人çãªãœãŒã¹ãæå°éã«æãã€ã€ãé«ãã»ãã¥ãªãã£ã¬ãã«ãå®çŸã§ããŸãã
æ°èŠäºæ¥ãžã®æè³å€æã«ãããŠãã»ãã¥ãªãã£å¯Ÿçã«äžå®ã®äºç®ãå²ãåœãŠãããšã¯äžå¯æ¬ ã§ããäºæ¥ãªã¹ã¯ãèŠæ¥µããæé©ãªã»ãã¥ãªãã£æè³ãè¡ãããšããæç¶çãªæé·ã«ã€ãªãããŸãã
äžæ£ã¢ã¯ã»ã¹ã®è åšã¯ã幎ã é«ãŸãäžæ¹ã§ããAIãã»ãã¥ãªãã£æè¡ã®æŽ»çšã«ãããå·§åŠåããæ»æã«ç«ã¡åããå¿ èŠããããŸããæ°èŠäºæ¥ãžã®ææŠãšãšãã«ãã»ãã¥ãªãã£å¯Ÿçãžã®æèãé«ããäžå šã®äœå¶ãæŽããããšããããžãã¹ã®æªæ¥ãåãæãã«ã®ãšãªãã§ãããã
AIã掻çšããäžæ£ã¢ã¯ã»ã¹å¯Ÿç
æ°èŠäºæ¥ãç«ã¡äžããéãã»ãã¥ãªãã£å¯Ÿçã¯æ¬ ãããªãèŠçŽ ã§ããç¹ã«ãã€ã³ã¿ãŒããããä»ãããµãŒãã¹ãæäŸããå Žåããµã€ããŒæ»æãäžæ£ã¢ã¯ã»ã¹ã®ãªã¹ã¯ã«åžžã«ãããããŠããŸããããããè åšããäºæ¥ãå®ãããã«ãAIã掻çšããã»ãã¥ãªãã£æè¡ã泚ç®ãéããŠããŸãã
AIãå°å ¥ããããšã§ãèšå€§ãªã¢ã¯ã»ã¹ãã°ãèªåçã«åæããäžå¯©ãªæåããªã¢ã«ã¿ã€ã ã§æ€ç¥ããããšãå¯èœã«ãªããŸããåŸæ¥ã®ææ³ã§ã¯èŠèœãšããã¡ã ã£ãå åããæ©æ¢°åŠç¿ã«ããç°åžžæ€ç¥ã«ãã£ãŠææã§ããããã«ãªããŸãã
æ¬èšäºã§ã¯ãAIã掻çšããäžæ£ã¢ã¯ã»ã¹å¯Ÿçã®ä»çµã¿ãšããã®å¹æã«ã€ããŠè©³ãã解説ããŸããæ°èŠäºæ¥ãæ€èšããŠããçµå¶è ããã»ãã¥ãªãã£æ åœè å¿ èŠã®å 容ãšãªã£ãŠããŸãã
AIã«ããäžæ£ã¢ã¯ã»ã¹æ€ç¥ã®ä»çµã¿
AIãçšããäžæ£ã¢ã¯ã»ã¹æ€ç¥ã·ã¹ãã ã¯ãäž»ã«ä»¥äžã®ãããªä»çµã¿ã§åäœããŸãã
- ãã°ããŒã¿ã®åéã»èç©ïŒWebãµãŒããŒããã¡ã€ã¢ãŠã©ãŒã«ã®ã¢ã¯ã»ã¹ãã°ãäžå çã«åéãã解æçšã®ããŒã¿ããŒã¹ã«èç©ããŸãã
- æ©æ¢°åŠç¿ã¢ãã«ã®æ§ç¯ïŒèç©ãããã°ããŒã¿ãããšã«ãéåžžæã®ã¢ã¯ã»ã¹ãã¿ãŒã³ãåŠç¿ãããŸããããã«ãããäžæ£ã¢ã¯ã»ã¹ãå€å¥ããããã®åºæºãäœãããŸãã
- ãªã¢ã«ã¿ã€ã ç£èŠïŒæ°ããªã¢ã¯ã»ã¹ãã°ããªã¢ã«ã¿ã€ã ã§åã蟌ã¿ãåŠç¿æžã¿ã¢ãã«ãšç §åããŸããéåžžã®ãã¿ãŒã³ããéžè±ããæåãæ€ç¥ããå Žåãã¢ã©ãŒããçºããŸãã
- èªåãããã¯ã»é®æïŒäžæ£ã¢ã¯ã»ã¹ãšå€å®ãããIPã¢ãã¬ã¹ããæ»æã®çãã®ããéä¿¡ãèªåçã«ãããã¯ãã被害ãæªç¶ã«é²ããŸãã
ããããäžé£ã®æµããèªååããããšã§ã人çãªç£èŠã®æéãå€§å¹ ã«åæžã§ããŸãããŸããAIã«ããé«åºŠãªåæã«ãããåŸæ¥ã®ã«ãŒã«ããŒã¹ã®æ€ç¥ã§ã¯é£ããã£ãæªç¥ã®æ»æãã¿ãŒã³ã«ã察å¿å¯èœã§ãã
æ©æ¢°åŠç¿ãçšããç°åžžæ€ç¥æè¡
äžæ£ã¢ã¯ã»ã¹ã®æ€ç¥ã«ãããŠãæ©æ¢°åŠç¿ã¯éèŠãªåœ¹å²ãæãããŸããç¹ã«ãç°åžžæ€ç¥ãšåŒã°ããæè¡ã¯ãAIã«ããã»ãã¥ãªãã£å¯Ÿçã®äžæ žããªããã®ã§ãã
ç°åžžæ€ç¥ãšã¯ãèšå€§ãªããŒã¿ã®äžãããéåžžãšã¯ç°ãªãæåãèŠã€ãåºãæè¡ã®ããšãæããŸããã¢ã¯ã»ã¹ãã°ã«ã¯ããŠãŒã¶ãŒã®IPã¢ãã¬ã¹ãããªã¯ãšã¹ãã®å 容ãã¿ã€ã ã¹ã¿ã³ããªã©ãæ§ã ãªæ å ±ãå«ãŸããŠããŸãããããã®ããŒã¿ãããšã«ãéåžžæã®ã¢ã¯ã»ã¹ãã¿ãŒã³ãã¢ãã«åããŸãã
äŸãã°ãããç¹å®ã®IPã¢ãã¬ã¹ãããéåžžã¯ã¢ã¯ã»ã¹ãã»ãšãã©ãªããªãœãŒã¹ã«å¯ŸããŠå€§éã®ãªã¯ãšã¹ãããã£ãå Žåãäžå¯©ãªæåãšããŠæ€ç¥ãããŸããããããç°åžžå€ãçºèŠããããã«ã以äžã®ãããªæ©æ¢°åŠç¿ã¢ã«ãŽãªãºã ãçšããããŸãã
- æåž«ããåŠç¿ïŒããžã¹ãã£ãã¯ååž°ã決å®æšãã©ã³ãã ãã©ã¬ã¹ããªã©ïŒ
- æåž«ãªãåŠç¿ïŒKå¹³åæ³ãäž»æååæããªãŒããšã³ã³ãŒããŒãªã©ïŒ
- åæåž«ããåŠç¿ïŒOne-Class SVMãIsolation Forestãªã©ïŒ
ãããã®ã¢ã«ãŽãªãºã ãçµã¿åãããããšã§ãé«ç²ŸåºŠãªç°åžžæ€ç¥ã¢ãã«ãæ§ç¯ããããšãå¯èœã§ãããã ããåŠç¿ããŒã¿ã®è³ªããã¢ãã«ã®ãã¥ãŒãã³ã°ã«ã¯æ³šæãå¿ èŠã§ãã誀æ€ç¥ãå€çºãããšãéçšã«æ¯éããããæãããããŸããé©åãªããŒã¿ååŠçãšã綿å¯ãªã¢ãã«è©äŸ¡ãæ±ããããŸãã
AIãå°å ¥ããããšã®ã¡ãªãããšãã¡ãªãã
äžæ£ã¢ã¯ã»ã¹å¯Ÿçã«AIãå°å ¥ããããšã§ã以äžã®ãããªã¡ãªãããæåŸ ã§ããŸãã
ã¡ãªãã | å 容 |
---|---|
é«åºŠãªæ€ç¥ç²ŸåºŠ | æ©æ¢°åŠç¿ã«ããç°åžžæ€ç¥ã«ãããåŸæ¥ã®ã«ãŒã«ããŒã¹ã®ææ³ã§ã¯çºèŠãé£ããã£ãæ»æãèŠæãããšãã§ããã |
ãªã¢ã«ã¿ã€ã æ§ | AIã«ããèªåç£èŠã«ããããªã¢ã«ã¿ã€ã ã§ã®è åšæ€ç¥ãå¯èœã«ãªããã€ã³ã·ãã³ãã®æ©æçºèŠã»å¯ŸåŠã«ã€ãªããã |
æ¥åå¹çå | äžæ£ã¢ã¯ã»ã¹ã®ç£èŠæ¥åãèªååããããšã§ãã»ãã¥ãªãã£æ åœè ã®è² æ ãå€§å¹ ã«è»œæžã§ããã |
ã³ã¹ãåæž | 人çç£èŠã«é Œãå Žåãšæ¯ã¹ãAIã®å°å ¥ã«ãã£ãŠã»ãã¥ãªãã£å¯Ÿçã«ãããã³ã¹ããæããããã |
äžæ¹ã§ãAIã®å°å ¥ã«éããŠã¯ã以äžã®ãããªãã¡ãªããã«ãçæãå¿ èŠã§ãã
ãã¡ãªãã | å 容 |
---|---|
å°å ¥ã³ã¹ãã®é«ã | AIã·ã¹ãã ã®å°å ¥ã«ã¯ãåæè²»çšãããããäžå°äŒæ¥ã«ãšã£ãŠãã³ã¹ãè² æ ã倧ããã |
å°éç¥èã®å¿ èŠæ§ | AIãéçšã»ç®¡çããããã«ã¯ãæ©æ¢°åŠç¿ãããŒã¿åæã®ç¥èŠãå¿ èŠã瀟å ã«å°é人æã確ä¿ããå¿ èŠãããã |
誀æ€ç¥ã®ãªã¹ã¯ | ç°åžžæ€ç¥ã¢ãã«ã®æ§èœã«ãã£ãŠã¯ãæ£åžžãªã¢ã¯ã»ã¹ã誀ã£ãŠäžæ£ãšå€å®ããŠããŸãå¯èœæ§ãããã |
AIãžã®é床ãªäŸå | AIãŸããã«ããããšã§ã人çãªç£èŠã®ç®ãè¡ãå±ããªããªãæãããããAIãšäººéã®ååãéèŠã |
以äžã®ããã«ãAIã掻çšããäžæ£ã¢ã¯ã»ã¹å¯Ÿçã«ã¯ã¡ãªãããšãã¡ãªããããããŸããèªç€Ÿã®ã»ãã¥ãªãã£äœå¶ããäºç®ã»äººçãªãœãŒã¹ãèžãŸããäžã§ãæ éã«å°å ¥ãæ€èšããå¿ èŠããããŸãã
ãã®äžã§ãAIã®ç¹æ§ãç解ããé©åã«éçšããããšãèèŠã§ããæ©æ¢°åŠç¿ã¢ãã«ã®æ§ç¯ããããã°åæãã€ã³ã·ãã³ãã¬ã¹ãã³ã¹ãŸã§ãäžé£ã®æ¥åãèŠæ®ããã»ãã¥ãªãã£äœå¶ã®åæ§ç¯ãæ±ããããã§ãããã
æ°èŠäºæ¥ã®ç«ã¡äžãã«ã¯ãã¹ããŒãæãšæè»æ§ãæ¬ ãããŸãããäžæ¹ã§ãã»ãã¥ãªãã£å¯Ÿçãçãã«ããããšã¯ãäºæ¥ç¶ç¶äžã®å€§ããªãªã¹ã¯ãšãªããŸããAIã掻çšããå¹ççãã€é«åºŠãªã»ãã¥ãªãã£åºç€ãæ§ç¯ããããšã§ãããžãã¹ã®æé·ãå éããã€ã€ãå®å šæ§ãæ ä¿ããããšãå¯èœã«ãªãã®ã§ãã
æ©æ¢°åŠç¿ã®çºå±ãšãšãã«ãä»åŸããã«é«åºŠåããAIã»ãã¥ãªãã£ãæ°èŠäºæ¥ã®æåãç®æãçµå¶è ã¯ããã®ååã«ã泚ç®ããŠããå¿ èŠãããã§ãããããµã€ããŒè åšã®å€åã«æ©æã«å¯Ÿå¿ããAIãå³æ¹ã«ã€ããããšã§ãããžãã¹ã®æªæ¥ãåãæããŠãããããã®ã§ãã
æè¡çã¢ãããŒãã«ããã»ãã¥ãªãã£åŒ·å
ãµã€ããŒæ»æãäžæ£ã¢ã¯ã»ã¹ã®è åšãé«ãŸãäžãæ°èŠäºæ¥ã«ãããã»ãã¥ãªãã£å¯Ÿçã¯æ¥µããŠéèŠã§ããç¹ã«ã€ã³ã¿ãŒããããä»ãããµãŒãã¹ãæäŸããå Žåãæè¡çãªã¢ãããŒãã«ããã»ãã¥ãªãã£åŒ·åãæ¬ ãããŸãããããã§ã¯ããããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãå€èŠçŽ èªèšŒãè匱æ§ç®¡çãšãã£ãæè¡çæœçã«ã€ããŠè©³ãã解説ããŸãã
ãããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ã«ããé²åŸ¡
ãããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãšã¯ãäŒæ¥å ãããã¯ãŒã¯ãè«ççãŸãã¯ç©ççã«åå²ããã¢ã¯ã»ã¹å¶åŸ¡ãè¡ãææ³ã®ããšãæããŸããäŸãã°ãéšéããšã«VLANãèšå®ããäžèŠãªéä¿¡ãé®æããããšã§ãä»®ã«äžéšã®ã»ã°ã¡ã³ãã§äžæ£ã¢ã¯ã»ã¹ãçºçããŠãã被害ãå±æåããããšãå¯èœã§ãã
æ°èŠäºæ¥ã§ã¯ã瀟å ãããã¯ãŒã¯ãšã¯åé¢ããéçºç°å¢ãæ§ç¯ããå³æ Œãªã¢ã¯ã»ã¹å¶åŸ¡ãè¡ãããšãéèŠã§ããã»ãã¥ãªãã£ã¬ãã«ã«å¿ããŠãWeb/APãµãŒããŒãDBãµãŒããŒãªã©ãç°ãªãã»ã°ã¡ã³ãã«é 眮ããããšã§ãäžãäžã®äŸµå ¥ã«åããŸãã
ãŸãããã¡ã€ã¢ãŠã©ãŒã«ãUTMïŒçµ±åè åšç®¡çïŒæ©åšã掻çšããã»ã°ã¡ã³ãéã®éä¿¡ãç£èŠã»å¶åŸ¡ããããšãå¹æçã§ããã¢ããªã±ãŒã·ã§ã³å±€ãŸã§ãã±ãããæ€æ»ããäžæ£ãªéä¿¡ãæ€ç¥ã»é®æããæ©èœãæã€è£œåãç»å ŽããŠããŸãã
ãããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ã¯ãäžæ£ã¢ã¯ã»ã¹ã«ãã被害ãæå°éã«æããäžã§ãéåžžã«æå¹ãªæ段ãšèšããã§ãããããã ããã»ã°ã¡ã³ãèšèšã«ã¯æ¥åèŠä»¶ãšã®ãã©ã³ã¹ãèæ ®ããå¿ èŠããããŸããå©äŸ¿æ§ãæãªããªãç¯å²ã§ãé©åãªç²åºŠã§ã»ã°ã¡ã³ããåå²ããããšãèèŠã§ãã
å€èŠçŽ èªèšŒã®å°å ¥ãšéçš
å€èŠçŽ èªèšŒïŒMFAïŒãšã¯ããŠãŒã¶ãŒèªèšŒã®éã«ãè€æ°ã®èŠçŽ ãçµã¿åãããŠæ¬äººç¢ºèªãè¡ãä»çµã¿ã®ããšã§ããäžè¬çã«ã¯ã以äžã®3ã€ã®èŠçŽ ãçšããããŸãã
- ç¥èèŠçŽ ïŒãã¹ã¯ãŒããç§å¯ã®è³ªåãªã©ãæ¬äººããç¥ãåŸãªãæ å ±
- ææèŠçŽ ïŒICã«ãŒããã¯ã³ã¿ã€ã ãã¹ã¯ãŒãïŒOTPïŒããŒã¯ã³ãªã©ãæ¬äººãææããã¢ã
- çäœèŠçŽ ïŒæçŽãé¡ãè¹åœ©ãªã©ã®çäœæ å ±
ãããã®èŠçŽ ã2ã€ä»¥äžçµã¿åãããããšã§ããªãããŸããäžæ£ãã°ã€ã³ã®ãªã¹ã¯ãå€§å¹ ã«äœæžã§ããŸããç¹ã«ãæ°èŠäºæ¥ã§æ±ãéèŠã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ã«ã¯ãMFAãå¿ é ãšãã¹ãã§ãããã
å€èŠçŽ èªèšŒã®å°å ¥ã«éããŠã¯ã以äžã®ãããªç¹ã«çæãå¿ èŠã§ãã
- ãŠãŒã¶ããªãã£ãšã®ãã©ã³ã¹ïŒå©äŸ¿æ§ãæãªããªãèªèšŒæ¹åŒã®éžå®
- ã³ã¹ã察å¹æïŒå°å ¥ã»éçšã³ã¹ãã«èŠåãã»ãã¥ãªãã£ã¬ãã«ã®å®çŸ
- ãã©ãŒã«ããã¯æ¹åŒã®ç¢ºä¿ïŒããŒã¯ã³çŽå€±æãªã©ã®ä»£æ¿èªèšŒæ段ã®çšæ
è¿å¹Žã§ã¯ãã¹ããŒããã©ã³ã¢ããªã掻çšããããã·ã¥éç¥åã®MFAãæ®åãã€ã€ãããŸããå°çšã¢ããªã«å±ãèªèšŒãªã¯ãšã¹ããæ¿èªããã ãã§ãæ軜ã«ã¯ã³ã¿ã€ã ã³ãŒããå ¥åã§ããããããŠãŒã¶ãŒã®å©äŸ¿æ§ãšé«ãã»ãã¥ãªãã£ãäž¡ç«ããããšãå¯èœã§ãã
æ°èŠäºæ¥ãç«ã¡äžããéã¯ãMFAã®å°å ¥ãæ€èšããèªèšŒããã»ã¹ãå³æ ŒåããããšãããããããŸããç¹æš©ãŠãŒã¶ãŒãéèŠã·ã¹ãã ãžã®ã¢ã¯ã»ã¹ãäžå¿ã«ã段éçã«é©çšç¯å²ãæ¡å€§ããŠããããšã§ã確å®ãªã»ãã¥ãªãã£åŒ·åãå³ããã¯ãã§ãã
è匱æ§ç®¡çãšãããé©çšã®èªåå
äžæ£ã¢ã¯ã»ã¹ãé²ãããã«ã¯ãã·ã¹ãã ã«ååšããè匱æ§ãéããã«çºèŠããä¿®æ£ããããšãéèŠã§ããããããæ¥ã å€æ°å ¬éãããã»ãã¥ãªãã£ãããã«è¿ éã«å¯Ÿå¿ããã®ã¯å®¹æã§ã¯ãããŸããã人çãªäœæ¥ã«é Œãè匱æ§ç®¡çã§ã¯ã察çãåŸæã«åãæããããã®ã§ãã
ãã®èª²é¡ã解決ããã®ããè匱æ§ç®¡çãšãããé©çšã®èªååã§ããå°çšããŒã«ãã¯ã©ãŠããµãŒãã¹ã掻çšããããšã§ããããã¯ãŒã¯äžã®æ©åšããœãããŠã§ã¢ã®è匱æ§ãèªåçã«ã¹ãã£ã³ãããªã¹ã¯è©äŸ¡ã«åºã¥ããŠåªå 床ã®é«ããããããé 次é©çšããŠããããšãå¯èœã«ãªããŸãã
æ°èŠäºæ¥ã§ã¯ã瀟å ã®äººçãªãœãŒã¹ãéãããã±ãŒã¹ãå€ããããã管çã®è² è·ãé«ããªããã¡ã§ããåæã®æ®µéãããè匱æ§å¯Ÿçã®èªåååºç€ãæŽåããŠããããšã§ãã»ãã¥ãªãã£ã€ã³ã·ãã³ããæªç¶ã«é²ãããšãã§ããã§ãããã
èªååããŒã«ã®å°å ¥ã«éããŠã¯ã以äžã®ãããªç¹ã«æ³šæãå¿ èŠã§ãã
- 察象è³ç£ã®ææ¡ïŒãããã¯ãŒã¯äžã®ããã€ã¹ããœãããŠã§ã¢ã®æ£åž
- ããŒã«ã®éžå®ïŒèªç€Ÿã®ç°å¢ã«é©ããèªååãœãªã¥ãŒã·ã§ã³ã®èŠæ¥µã
- éçšããã»ã¹ã®æŽåïŒè匱æ§ã®æ€åºãããããé©çšãŸã§ã®ãããŒæ§ç¯
å ããŠãè匱æ§æ å ±ã®åéã»åæäœå¶ãæŽããããšãèèŠã§ããèªç€Ÿè£œåã«é¢é£ããè匱æ§ã®çºçç¶æ³ãåžžã«ãŠã©ããããè¿ éãªã¢ã¯ã·ã§ã³ã«ã€ãªããå¿ èŠããããŸããã»ãã¥ãªãã£å°é家ã«ããè åšã€ã³ããªãžã§ã³ã¹ã®æŽ»çšãæ€èšã«å€ããã§ãããã
æ°èŠäºæ¥ã®ç«ã¡äžãæã¯ãã¹ããŒãæãæã£ãŠéçºãé²ããã¡ã§ãããåŸã«ãªã£ãŠè匱æ§å¯Ÿçã«è¿œãããããšã®ãªããããåæèšèšã®æ®µéããã»ãã¥ãªãã£èŠä»¶ãçã蟌ã¿ããããé©çšãŸã§ãèŠæ®ããèªååã»å¹çåãå³ãããšãè³¢æã ãšèšããŸãã
以äžããããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãå€èŠçŽ èªèšŒãè匱æ§ç®¡çãšãã£ãæè¡çã¢ãããŒãã«ããã»ãã¥ãªãã£åŒ·åçã«ã€ããŠè§£èª¬ããŸãããæ°èŠäºæ¥ã®ç«ã¡äžãã«ãããŠã¯ããããã®æœçãé©åã«çµã¿åãããããžãã¹ã®æé·ãæ¯ãã匷åºãªã»ãã¥ãªãã£åºç€ãæ§ç¯ããããšãèèŠã§ãã
ITã®é²åãšãšãã«ããµã€ããŒæ»æã®æå£ãå·§åŠåããŠããŸããèªç€Ÿã«æé©ãªã»ãã¥ãªãã£ãœãªã¥ãŒã·ã§ã³ãéžæããæ©åçã«å¯Ÿçãè¬ããŠããæè»æ§ãæ±ããããŸããå€éšã®å°é家ã®ç¥èŠã掻çšããªãããã»ãã¥ãªãã£å¯Ÿçã®é«åºŠåã»èªååãæšé²ããããžãã¹ã®äŸ¡å€åµé ã«æ³šåã§ããç°å¢ãæŽããŠãããããã®ã§ãã
æ°èŠäºæ¥ã®æåã«ã¯ãã¢ã€ãã¢ãšå®è¡åã ãã§ãªããå ç¢ãªã»ãã¥ãªãã£åºç€ãäžå¯æ¬ ãæè¡çã¢ãããŒãã«ãã£ãŠäžæ£ã¢ã¯ã»ã¹ã®è åšã«ç«ã¡åãããããžãã¹ã®æªæ¥ãå匷ãåãæããŠãããŸããããã»ãã¥ãªãã£å¯Ÿçã¯ãæé·ãžã®æè³ãšæããã¹ãéèŠãªçµå¶èª²é¡ãªã®ã§ãã
ãŸãšã
æ°èŠäºæ¥ãæåã«å°ãã«ã¯ãAIãã»ãã¥ãªãã£æè¡ã掻çšããäžæ£ã¢ã¯ã»ã¹å¯Ÿçãæ¬ ãããŸãããæ©æ¢°åŠç¿ã«ããç°åžžæ€ç¥ã§æªç¥ã®æ»æãèŠæãããããã¯ãŒã¯ã»ã°ã¡ã³ããŒã·ã§ã³ãå€èŠçŽ èªèšŒã§é²åŸ¡åãé«ããããšãèèŠã§ããå ããŠãè匱æ§ç®¡çã®èªååã§è¿ éãªãããé©çšãå¯èœã«ããããšãéèŠã§ãããµã€ããŒè åšã®å€åã«æ©æã«å¯Ÿå¿ããå ç¢ãªã»ãã¥ãªãã£åºç€ãæ§ç¯ããããšããããžãã¹ã®æªæ¥ãåãæãã«ã®ãšãªãã§ããããæ°èŠäºæ¥ãžã®ææŠãšãšãã«ãã»ãã¥ãªãã£å¯Ÿçãžã®æè³ãæ ããããªã¹ã¯ã«åããäœå¶ã¥ãããé²ããŠãããããã®ã§ãã