Gaining complete understanding of the active services and open communication paths is often difficult because of the rapidly expanding complexity of those services and their wide-ranging functions. Furthermore, the IT administrators of hand-designed systems often lack ways to identify and close unnecessary services and communication pathways. In this paper, firstly we propose an automated approach to discover all active services and the permitted communications paths in networked system. Secondly, we propose a method to detect all unexpected services and communication paths in networked system for IT system administrators. We then show how hand-designed networked systems containing such devices are prone to contain numerous unnecessary active services and communication paths, which are exploited by malicious actions such a service denial, information theft, and/or cyber espionage. The evaluation result shows the effectiveness of our proposed approach.

抄録全体を表示

Gaining complete understanding of the active services and open communication paths is often difficult because of the rapidly expanding complexity of those services and their wide-ranging functions. Furthermore, the IT administrators of hand-designed systems often lack ways to identify and close unnecessary services and communication pathways. In this paper, firstly we propose an automated approach to discover all active services and the permitted communications paths in networked system. Secondly, we propose a method to detect all unexpected services and communication paths in networked system for IT system administrators. We then show how hand-designed networked systems containing such devices are prone to contain numerous unnecessary active services and communication paths, which are exploited by malicious actions such a service denial, information theft, and/or cyber espionage. The evaluation result shows the effectiveness of our proposed approach.

抄録全体を表示

本論文は東京農工大学において2013年10月末に刷新した仮想化基盤を活用した無線LANシステムについて述べる．この刷新では，これまで利用していた多数の自律型無線アクセスポイントを廃止し，コントローラ型のアクセスポイントを再配置すると共に，無線LANシステムで用いるサーバ類，ルータ類を仮想化基盤上に構築し，機器の集約と低コスト化を図った．また来訪者用無線LAN利用アカウントの自動発行システムやクライアントの位置算出システムも導入し，管理と運用の効率化を目指している．これらの刷新に関わる設計，構築とその後の運用について述べる．さらにアクセスポイントの増設位置決定のための簡易的な事前調査方法についても述べる．

抄録全体を表示