2020-01-01ãã1å¹´éã®è¨äºä¸è¦§
ã¯ããã« ããã«ã¡ã¯ãåºç¤æè¡ç 究室ãªãµã¼ãã¨ã³ã¸ãã¢ã®ä¸å·ã§ãã12 æ 7 æ¥ãã 10 æ¥ã«éå¬ããã Black Hat EU 2020 ã¸åå ãç»å£ãã¦ãã¾ããã®ã§å ±åãã¾ãã ä»å¹´ã® Black Hat EU æ°åã³ããã¦ã¤ã«ã¹ã®å½±é¿ããããä»å¹´ã¯ãã¼ãã£ã«ã§ã®éå¬ã¨ãªãâ¦
ã¯ããã« ã©ã³ãµã ã¦ã§ã¢ã§ãã Maze ã¯ãå®è¡ç°å¢ã«ãããã¡ã¤ã«ãæå·åãããã¡ã¤ã«ã復å·ããããã«èº«ä»£éãè¦æ±ãã¾ãããã¼ã¿ãçªåãããå ´åãçªåãããã¼ã¿ã¯å ¬éããã身代éã®æ¯æãããã«ã¦ã§ã¢ææè ã«ä¿ãã¾ãã 2019 å¹´ã«ã¯ã100 以ä¸ã®çµç¹â¦
ã¯ããã« ããã«ã¡ã¯ã 2020年度æ°åå ¥ç¤¾ã®ä½ã æ¨ã§ãã FFRIã»ãã¥ãªãã£ã§ã¯å ¥ç¤¾å¾4ã¶æãããã¦æ°äººç ä¿®ãè¡ãããä»å¹´ããã®7æã§ç ä¿®ãå®äºãã¾ããã ä¾å¹´ã®å ´åãç ä¿®æéã¯åºç¤¾ã ãã®å¾ã®OJTæéã«å¾ã ã«ãªã¢ã¼ãã¯ã¼ã¯ã«ç§»è¡ãã¦ããã¨ã®ãã¨â¦
ã¯ããã« åºç¤æè¡ç 究室ãªãµã¼ãã¨ã³ã¸ãã¢ã®ä¸å·ã§ããããã°ã·ã¹ãã ç§»è¡å¾è¨å¿µãã¹ã(?)第 1 åãæ å½ãã¾ãã ä»å㯠FFRI Dataset 使ã«ããã£ã¦ãå©ç¨ãã¦ãã LIEF ã¨ããã©ã¤ãã©ãªã«ã¤ãã¦ç´¹ä»ãã¾ãã LIEF 㯠PEã»ELF ãªã©ã®å®è¡ãã¡ã¤ã«ããã¼â¦
ã¯ããã« ãã®è¨äºã§ã¯ãæ¨å¹´(2019 å¹´)12 æã«ãFFRI yarai ã«ããæ¤ç¥ãããã¨ã³ãã¦ã¼ã¶ã¼æ§ããFFRIã«å ±åããã Emotet ã®è¤æ°ã®æ¤ä½ã«ã¤ãã¦ã追å çãªè§£æãè¡ã£ãçµæãå ±æãã¾ãã Emotetã«é¢ã㦠Emotet ã¯ãæ¨å¹´ 11 æ JPCERT/CC ããæ³¨æåâ¦
ã¯ããã« åºç¤æè¡ç ç©¶é¨æå±ã®èæ¨ã§ãã ä»å㯠1 æ 9 æ¥ã«ï¼¦ï¼¦ï¼²ï¼©ã¨æ ªå¼ä¼ç¤¾ã¨ãã»ã¨ãã»ã©ãã©ããªã¼ãºã§å ±åã§éå¬ããåååå¼·ä¼ã«ã¤ãã¦å ±åãã¾ãã ã¨ãã»ã¨ãã»ã©ãã©ããªã¼ãºã¨ã®åååå¼·ä¼ã¯ãæ¨å¹´ã® 11 æã® Rust åå¼·ä¼ã«ç¶ã 2 åç®ã¨ãªãâ¦
ã¯ããã« FFRIãªãµã¼ãã¨ã³ã¸ãã¢ã®èæ¨ã§ãã ç¾ä»£ã®ã½ããã¦ã§ã¢éçºã§ã¯ãOSS ãå©ç¨ãããã¨ãå¤ããªã£ã¦ãã¾ãããããã OSS ã©ã¤ãã©ãªãå©ç¨ã»ç®¡çããããã«ãããã±ã¼ã¸ããã¼ã¸ã£ã¼ãåå¨ãã¾ãããã®ä¸ã§ãNode.js ã®ããã±ã¼ã¸ããã¼ã¸ã£ã¼ã§ãâ¦