研究者詳細 - 門田　暁人

論文 - 門田　暁人

分割表示 230 件中 201 - 220 件目／全件表示 >>

進行中のプロジェクト計測とフィードバック実験に基づく計測データベース活用方式の提案査読

神谷芳樹, 菊池奈穂美, 松村知子, 大杉直樹, 門田暁人, 肥後芳樹, 井上克郎, 松本健一

情報処理学会ソフトウェアエンジニアリングシンポジウム200 2006年10月

API呼び出しを用いた動的バースマーク査読

岡本圭司, 玉田春昭, 中村匡秀, 門田暁人, 松本健一

電子情報通信学会論文誌D J89-D ( 8 ) 1751 - 1763 2006年8月

記述言語：日本語掲載種別：研究論文（学術雑誌）出版者・発行元：一般社団法人電子情報通信学会

本論文では,ソフトウェア盗用の発見・立証を効率的に支援するための動的バースマークを提案する.動的バースマークf(p,I)はソフトウェアpを入力Iで実行した場合のpの振舞いから得られる,pのもつユニークな特徴の集合である.ソフトウェアp,qが存在し,f(p,I)=f(q,I)であれば,qはpの盗用である疑いが強い.本論文では,2種類の動的バースマークを提案する.提案手法では,ソフトウェア実行時のAPI呼出し情報を,個々のソフトウェアの特徴として利用し,API呼出しの順序から実行系列バースマークを,個々のAPIの呼出し頻度から実行頻度バースマークをそれぞれ抽出する.この2種類のバースマークを2種類の実験によって評価した.実験1では,同じ用途の複数のアプリケーションに提案バースマークを適用した.その結果,オリジナルとその改変アプリケーションからは非常に類似したバースマークが得られること,全く独立に実装されたアプリケーションからは,全く異なるバースマークが得られることが分かった.実験2では,提案バースマークは,異なるコンパイラや最適化などに対して強い耐性をもつことが示された.

CiNii Article

CiNii Books

researchmap

情報漏えいのリスクと生産性を考慮したソフトウェアプロセスの開発者割当て探索査読

神崎雄一郎, 井垣宏, 中村匡秀, 門田暁人, 松本健一

ソフトウェアシンポジウム2006 24 - 32 2006年7月

Analyzing Individual Performance of Source Code Review Using Reviewers’ Eye Movement 査読

Hidetake Uwano, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

Proceedings of Int'l Eye Tracking Research & Applications Symposium (ETRA 2006) 133 - 140 2006年3月

A software protection method based on instruction camouflage 査読

Kanzaki, Y., Monden, A., Nakamura, M., Matsumoto, K.

Electronics and Communications in Japan, Part III: Fundamental Electronic Science (English translation of Denshi Tsushin Gakkai Ronbunshi) 89 ( 1 ) 47 - 59 2006年1月

Software Obfuscation from Crackers’ Viewpoint 査読

Hiroki Yamauchi, Yuichiro Kanzaki, Akito Monden, Masahide Nakamura, Ken-ichi Matsumoto

Proc. IASTED International Conference on Advances in Computer Science and Technology (IASTED ACST 2006) 286 - 291 2006年1月

Productivity analysis of Japanese enterprise software development projects 査読

Masateru Tsunoda, Akito Monden, Hiroshi Yadohisa, Nahomi Kikuchi, Ken-Ichi Matsumoto

Proceedings - International Conference on Software Engineering 14 - 17 2006年

記述言語：英語掲載種別：研究論文（国際会議プロシーディングス）

To clarify the relation between controllable attributes of a software development and its productivity, this paper experimentally analyzed a software project repository (SEC repository), consisting of 253 enterprise software development projects in Japanese companies, established by Software Engineering Center (SEC), Information-technology Promotion Agency, Japan. In the experiment, as controllable attributes, we focused on the outsourcing ratio of a software project, defined as an effort outsourced to subcontract companies divided by a whole development effort, and on the effort allocation balance among development phases. Our major findings include both larger outsourcing ratio and smaller upstream process effort leads to worse productivity. Copyright 2006 ACM.

DOI： 10.1145/1137983.1137988

Scopus

researchmap

Quantitative Analysis of Information Leakage in Security-Sensitive Software Processes

Kanzaki Yuichiro, Igaki Hiroshi, Nakamura Masahide, Monden Akito, Matsumoto Ken-ichi

Information and Media Technologies 1 ( 1 ) 121 - 133 2006年

記述言語：英語出版者・発行元：Information and Media Technologies 編集運営会議

This paper presents a method to evaluate the risk of information leakage in software processes for security-sensitive applications. A software process is modeled as a series of sub-processes, each of which produces new work products from input products. Since a process is conducted usually by multiple developers, knowledge of work products is shared among the developers. Through the collaboration, a developer may share with others the knowledge of products that are not related to the process. We capture the transfer of such irrelevant product knowledge as information leakage in a software process. In this paper, we first formulate the problem of information leakage by introducing a formal software process model. Then, we propose a method to derive the probability that each developer d knows each work product p at a given process of software development. The probability reflects the possibility that someone leaked the knowledge of p to d. We also conduct three case studies to show the applicability of leakage to practical settings. In the case studies, we evaluate how the risk of information leakage is influenced by the collaboration among developers, the optimal developer assignment and the structure of the software process. As a result, we show that the proposed method provides a simple yet powerful means to perform quantitative analysis on information leakage in a security-sensitive software process.

DOI： 10.11185/imt.1.121

CiNii Article

researchmap

Java Birthmarks -- Detecting the Software Theft 査読

Haruaki Tamada, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

IEICE Transactions on Information and Systems E88-D ( 9 ) 2148 - 2158 2005年9月

記述言語：英語掲載種別：研究論文（学術雑誌）出版者・発行元：一般社団法人電子情報通信学会

To detect the theft of Java class files efficiently, we propose a concept of Java birthmarks, which are unique and native characteristics of every class file. For a pair of class files p and q, if q has the same birthmark as p's, q is suspected as a copy of p. Ideally, the birthmarks should satisfy the following properties : (a) preservation - the birthmarks should be preserved even if the original class file is tampered with, and (b) distinction - independent class files must be distinguished by completely different birthmarks. Taking (a) and (b) into account, we propose four types of birthmarks for Java class files. To show the effectiveness of the proposed birthmarks, we conduct three experiments. In the first experiment, we demonstrate that the proposed birthmarks are sufficiently robust against automatic program transformation (93.3876% of the birthmarks were preserved). The second experiment shows that the proposed birthmarks successfully distinguish non-copied files in a practical Java application (97.8005% of given class files were distinguished). In the third experiment, we exploit different Java compilers to confirm that the proposed Java birthmarks are core characteristics independent of compiler-specific issues.

DOI： 10.1093/ietisy/e88-d.9.2148

CiNii Article

CiNii Books

researchmap

Quantitative analysis of information leakage in security-sensitive software processes 査読

Yuichiro Kanzaki, Hiroshi Igaki, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

IPSJ Journal, Special Issue on Research on Computer Security Characterized in the Context of Social Responsibilities 46 ( 8 ) 2129 - 2141 2005年8月

Software analysis by code clones in open source software 査読

Shinji Uchida, Akito Monden, Naoki Ohsugi, Toshihiro Kamiya, Ken Ichi Matsumoto, Hideo Kudo

Journal of Computer Information Systems 45 ( 3 ) 1 - 11 2005年3月

掲載種別：研究論文（学術雑誌）

The code clone (a duplicated code section in the source files of software) is one of the factors that complicate software maintenance. However, few empirical studies have analyzed the status quo of code clones. In this paper we conduct an extensive analysis of code clones using 125 packages of open source software written in C language, and suggest guidelines for the allowable production of code clones. Our results showed 11.3% as the average CRate (clone inclusion rate). For software packages that did not include automatically generated code, the CRate was 9.7%, the in-module CRate 8.2%, and the inter-module CRate 1.3%. These rates can be used as criteria for the allowable amount of code clone production. This paper also presents our findings on factors of code clone production, the influence of code clone production on maintainability, and removal methods.

Scopus

researchmap

その他リンク： https://dblp.uni-trier.de/db/journals/jcis/jcis45.html#UchidaMOKMK05

Characterizing Dynamics of Information Leakage in Software Process 査読

Yuichiro Kanzaki, Hiroshi Igaki, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

Proc. 3rd Australasian Information Security Workshop (AISW2005) 44 145 - 151 2005年1月

Tamper-resistant software system based on a finite state machine 査読

Akito Monden, Antoine Monsifrot, Clark Thomborson

IEICE Transactions on Fundamentals of Electronics, Communications and Computer Sciences E88-A ( 1 ) 112 - 122 2005年

記述言語：英語掲載種別：研究論文（国際会議プロシーディングス）出版者・発行元：Institute of Electronics, Information and Communication, Engineers, IEICE

Many computer systems are designed to make it easy for end-users to install and update software. An undesirable side effect, from the perspective of many software producers, is that hostile end-users may analyze or tamper with the software being installed or updated. This paper proposes a way to avoid the side effect without affecting the ease of installation and updating. We construct a computer system M with the following properties: 1) the end-user may install a program P in any conveniently accessible area of M
2) the program P contains encoded instructions whose semantics are obscure and difficult to understand
and 3) an internal interpreter W, embedded in a non-accessible area of M, interprets the obfuscated instructions without revealing their semantics. Our W is a finite state machine (FSM) which gives context-dependent semantics and operand syntax to the encoded instructions in P
thus, attempts to statically analyze the relation between instructions and their semantics will not succeed. We present a systematic method for constructing a P whose instruction stream is always interpreted correctly regardless of its input, even though changes in input will (in general) affect the execution sequence of instructions in P. Our framework is easily applied to conventional computer systems by adding a FSM unit to a virtual machine or a reconfigurable processor. Copyright © 2005 The Institute of Electronics, Information and Communication Engineers.

DOI： 10.1093/ietfec/E88-A.1.112

Scopus

researchmap

マルチバージョン生成によるプログラムの解析防止査読

山内寛己, 神崎雄一郎, 門田暁人, 中村匡秀, 松本健一

ソフトウェア工学の基礎XI, 日本ソフトウェア科学会FOSE2004 157 - 160 2004年11月

ソフトウェア実行時のAPI呼び出し履歴に基づく動的バースマークの提案査読

岡本圭司, 玉田春昭, 中村匡秀, 門田暁人, 松本健一

ソフトウェア工学の基礎XI, 日本ソフトウェア科学会FOSE2004 85 - 88 2004年11月

Dynamic Software Birthmarks to Detect the Theft of Windows Applications 査読

Haruaki Tamada, Keiji Okamoto, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

Proc. International Symposium on Future Software Technology 2004 (ISFST 2004) CDROM 2004年10月

命令のカムフラージュによるソフトウェア保護方法査読

神崎雄一郎, 門田暁人, 中村匡秀, 松本健一

電子情報通信学会論文誌A J87-A ( 6 ) 755 - 767 2004年6月

記述言語：日本語掲載種別：研究論文（学術雑誌）出版者・発行元：一般社団法人電子情報通信学会

本論文では,プログラムに含まれる多数の命令をカムフラージュ(偽装)することにより,悪意をもったユーザ(攻撃者)によるプログラムの解析を困難にする方法を提案する.提案方法では,プログラム中の任意の命令(ターゲット)を異なる命令で偽装し,プログラムの自己書換え機構を用いて,実行時のある期間においてのみ元来の命令に復元する.攻撃者がカムフラージュされた命令を含む範囲の解析を試みたとしても,ターゲットの書換えを行うルーチン(書換えルーチン)の存在に気づかない限り,プログラムの元来の動作を正しく理解することは不可能である.解析を成功させるためには,書換えルーチンを含む範囲についても解析する必要があり,結果として,攻撃者はより広範囲にわたるプログラムの解析を強いられることとなる.提案方法は自動化が容易であり,要求される保護の強さ,及び,許容される実行効率の低下の度合に応じて,ターゲットの個数を任意に決定できる.

CiNii Article

CiNii Books

researchmap

Design and evaluation of birthmarks for detecting theft of Java programs 査読

Haruaki Tamada, Masahide Nakamura, Akito Monden, Ken-ichi Matsumoto

Proc. IASTED International Conference on Software Engineering (IASTED SE 2004) 569 - 575 2004年2月

Effort estimation based on Collaborative Filtering 査読

N Ohsugi, M Tsunoda, A Monden, K Matsumoto

PRODUCT FOCUSED SOFTWARE PROCESS IMPROVEMENT 3009 274 - 286 2004年

記述言語：英語掲載種別：研究論文（学術雑誌）出版者・発行元：SPRINGER-VERLAG BERLIN

Effort estimation methods are one of the important tools for project managers in controlling human resources of ongoing or future software projects. The estimations require historical project data including process and product metrics that characterize past projects. Practically, in using the estimation methods, it is a problem that the historical project data frequently contain substantial missing values. In this paper, we propose an effort estimation method based on Collaborative Filtering for solving the problem. Collaborative Filtering has been developed in information retrieval researchers, as one of the estimation techniques using defective data, i.e. data having substantial missing values. The proposed method first evaluates similarity between a target (ongoing) project and each past project, using vector based similarity computation equation. Then it predicts the effort of the target project with the weighted sum of the efforts of past similar projects. We conducted an experimental case study to evaluate the estimation performance of the proposed method. The proposed method showed better performance than the conventional regression method when the data had substantial missing values.

Web of Science

researchmap

Exploiting self-modification mechanism for program protection 査読

Yuichiro Kanzaki, Akito Monden, Masahide Nakamura, Ken-ichi Matsumoto

Proc. 27th Computer Software and Applications Conference (compsac2003) 170 - 179 2003年11月

　前のページ - 次のページ　

<門田 暁人>

論文 - 門田 暁人

<門田　暁人>

論文 - 門田　暁人