Faculty Profiles - KAWAHASHI Yutaka

Misc - KAWAHASHI Yutaka

Division display21 - 40 of about 52／ All the affair displays >>

Expansion of the MARS by the switch information indication

白井奈津美, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) 7p 2015 [Refereed]

Traffic Visualization by Autonomous System

畑井健司, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) 5p 2015 [Refereed]

自律システムを用いたトラフィック可視化手法の提案

畑井健司, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) E-15 2015 [Refereed]

物理的原因による通信障害のリモート診断方法提案

坂田涉, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) E-07 2014 [Refereed]

トラフィックから判断する WebDAV の利用検出手法の提案

釼本倫章, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) E-09 2014 [Refereed]

Operational Support and Accuracy Improvement Methods of Usage Detection System on File-Sharing Software

KAWAHASHI Yutaka, SAKAGAMI Ryuta, TODE Hideki

The IEICE transactions on information and systems (Japanese edetion) ( The Institute of Electronics, Information and Communication Engineers ) 96 ( 3 ) 562 - 576 2013.03 [Refereed]

近年,P2P(Peer-to-Peer)に基づくファイル共有を利用することで,著作権侵害や帯域圧迫,ウイルス感染など,様々な問題が発生している.このため,特に教育機関や企業などの組織において,その利用制限は重要な課題になっている.ファイル共有ソフトウェアの利用制限は,心理的抑止力とともに実行力を伴うべきである.すなわち,システム面と運用面の両面から設計し,一体化した運用フレームワークを提供する必要がある.システム面では,ファイル共有ソフトウェア検出精度の向上と,有用なP2Pソフトウェアとの分離検出が必要である.運用面では,継続性を有するとともに,システム側へのフィードバックを考慮する必要がある.本論文では,P2Pソフトウェアのトラヒックパターンに着目し,利用検出システムの精度向上法と運用フレームワークについて提案する.本提案手法では,従来の接続ホスト数と非well-knownポート利用の判定だけでなく,送信元ポート番号の連続性や同一性を用いて,膨大なトラヒック量から代表的な15種類のP2Pソフトウェアの起動時検知を実現することができる.更に,有用なP2Pソフトウェアの誤検知回避も併せて実現可能である.本論文では,提案手法をソフトウェア実装し,和歌山大学内ネットワークでの検出実験を行う.その結果,代表的な15種類のP2Pソフトウェア全てに対し,起動時検知が確認され,有用なP2PソフトウェアであるSkypeの誤検知を回避することも確認できた.

グラフを用いたトラフィックデータ参照システム

井尾明日香, 川橋裕

情報処理学会関西支部支部大会 ( 情報処理学会 ) E-25 2012 [Refereed]

大学における情報セキュリティ人材の育成

川橋裕

機関誌KIIS(一般社団法人関西情報センター) pp.16-20 2012

Study of improving accuracy and operation support of the detection system of file-sharing software

SAKAGAMI Ryuta, KAWAHASHI Yutaka

IEICE technical report. Information networks ( The Institute of Electronics, Information and Communication Engineers ) 111 ( 245 ) 7 - 12 2011.10 [Refereed]

To restrict use of file sharing software is needed detection capability and psychological deterrent. In other words, it should provide an operation frame, integrating system and operation. In terms of systems, it is needed improving detection accuracy corresponding to new software and version upgrades. In terms of operation, it is needed having continuity and considering for feedback to the system. In this paper, we propose improving detection accuracy and an operation frame focused on traffic patterns of the software. In addition, we report the results of detection experiments conducted on the network in Wakayama University.

Design and Implementation of the system for detecting and locating rogue devices in the internal network

YOSHIDA Yusuke, TAKAYAMA Takuya, KAWAHASHI Yutaka

IEICE technical report. Information networks ( The Institute of Electronics, Information and Communication Engineers ) 111 ( 245 ) 37 - 42 2011.10 [Refereed]

The manager has required an application for IP Address from users, and has managed the use of IP address in general enterprises and academic institutions. However, there is the problem that the potential illegal users of IP address exist in each organization. We developed the system of detecting and locating rogue devices, to support network operations and the problem of such a fact. This system utilizes a network authentication function to locate devices, and enables us to gather information of devices without requiring to authenticate from users in practice. And this system can detect rogue devices by comparing gathered information of devices and application contents from users and gathered historical information.

Design and implementation of the system for log accumulation and conservation in the intranet

SAKURAMOTO Yusuke, KAWAHASI Yutaka

IEICE technical report. Information networks ( The Institute of Electronics, Information and Communication Engineers ) 111 ( 245 ) 43 - 48 2011.10 [Refereed]

There are servers and network equipment as information of assuming disclosure and saving period on operations management of the intranet. Typically, syslog for accumulating log especially isn't improved except that changing using protocol to TCP. Therefore, risk identified location of accumulating log from the intranet and outside still isn't eliminated. In my study, I suggest the system creating the middle agent between managed equipment and server for accumulating log and using multicast as trigger of communication starts.

B-16-1 Construction and Operation of ASP Environment to Train IT Risk Management

Kawahashi Yutaka, Tode Hideki

Proceedings of the IEICE General Conference ( The Institute of Electronics, Information and Communication Engineers ) 2011 ( 2 ) 550 - 550 2011.02 [Refereed]

不明

2011

The Training Environment for IT Risk Management

KAWAHASHI Yutaka

Joho Chishiki Gakkaishi ( Japan Society of Information and Knowledge ) 20 ( 3 ) 239 - 248 2010.10 [Refereed]

It should be added content management and social interaction skill to former network and server system management. Because the content has become more complex, then the lack of social interaction, including legal action and customer service, is increasing IT Risk. However, human resources are insufficient to IT Risk management since there is not comprehensive training program. In our research, we have been promoting the human resources development through the real scale simulations for IT risk management. This simulation is carried out under the environment constituted on the actual network, server system, complex content and social interaction. Therefore, we think that this simulation, applied the appropriate operation frame, is suitable for comprehensive training program. Then those who participate in this training will get a variety of skills and experience. In this paper, we describe the design, implementation and its operation frame of the IT Risk management training environment.

DOI

Environmental construction and the operative support of information appliance management practice aimed for information security engineer or manager upbringing

Kohei Shiozaki, Yutaka Kawahashi

Journal for Academic Computing and Networking ( National university corporation of Information Processing Center Council ) 14 ( 1 ) 117 - 128 2010 [Refereed]

<p>情報技術が世界的に普及整備され，経済社会の基盤となった現在，我々は保有する情報資源を有効かつ便利に活用できるようになっている．一方でこれらの進んだ環境が悪用される例も後を絶たない．これまではネットワークや情報システムの事故に対して「未然に防ぐにはどうすればよいのか」が注目されてきたが，現在では情報の取り扱いにおける対策が「事故前提社会システム」としての情報インフラ構築，運用および対策に切り替わってきている．しかし，事後の状況を個々の環境であらかじめ作り出すことは困難であり，人的，物的にもコストがかかる．情報危機管理演習を遠隔から誰でも参加できる形式で実現することで，より低コストで情報セキュリティ対策に必要な人材の育成を行うことが可能となり，情報セキュリティについての啓蒙を深めることにもつなげることができる．本稿では情報危機管理演習の構築手法に加え，これに遠隔から誰でも参加できる形式を実現する手法を提案する．また，他の類似する情報セキュリティ演習と比較，運用上の課題を検討し，将来の運用支援と拡張性について考察する．</p>

DOI

TCP,UDPトラフィックに着目したファイル共有検出システムの構築と運用評価

元木伸宏 , 泉裕

情報処理学会研究報告. IOT, [インターネットと運用技術] ( 情報処理学会 ) 2010

トラフィックパターン解析に基づくP2Pファイル共有ソフトウェアの利用検出

元木伸宏 , 泉裕(川橋) , 塚田晃司

情報処理学会全国大会第71回 ( 情報処理学会 ) 4V-7 2009 [Refereed]

Gateway management system within the border based on traffic pattern and source address routing

Y.Izumi(Y.Kawahashi), H.Tode

The 2009 International Conference on Multimedia, Information Technology and its Applications（MITA2009） ( International Conference on Multimedia, Information Technology and its Applications ) Session C-3, pp.75-77 2009 [Refereed]

Service and application using the network have been increased in the present internet, especially like e-learning and multimedia contents distribution. Then we have to take action against various invalid accesses or attacks. However, several attacks are difficult to detect and take action, because Firewall and IDS/IPS (Intrusion Detection System / Intrusion Prevention System) inspect on each packet, not chains of packet. We are developing detecting and preventing system against the attacks based on traffic pattern. This system is able to detect the attacks by chains of packets between external and internal network. Then this system changes the route of malicious packets by source address to avoid the attacks, such as the resource-exhaustion attacks. In this paper, we suggest and describe the design and implementation of this system.

Gateway management system based on traffic pattern with source address routing

KANAMORI Reiki, MOTOKI Nobuhiro, KAWAHASHI Yutaka, TSUKADA Koji

IEICE technical report ( The Institute of Electronics, Information and Communication Engineers ) 108 ( 342 ) 25 - 30 2008.12 [Refereed]

Recently, service and application using the networking increased by the spread of the internet. We need to take the measure against invalid accesses and attacks. But, some attacks are difficult to take the measure. Because Firewall and IDS/IPS inspect each packet. We are developing attack detection and measuring system based on traffic pattern. This system is able to detect attacks by capturering packets between external and internal network. This system route attack packets by source address to avoid the resource-exhaustion attacks. In this paper, we suggest system and describe about construction and implement.

組織内ネットワークにおけるLayer-2トポロジ検出システムの提案

續木涼太 , 泉裕 , 齋藤彰一 , 塚田晃司

情報処理学会研究報告. DSM, [分散システム/インターネット運用技術] ( 情報処理学会 ) 2006

　 PREV - NEXT 　

<KAWAHASHI Yutaka>

Misc - KAWAHASHI Yutaka