博碩士論文 108453041 完整後設資料紀錄

DC 欄位 語言
DC.contributor資訊管理學系在職專班zh_TW
DC.creator李烜旭zh_TW
DC.creatorHsuan-Hsu Leeen_US
dc.date.accessioned2021-7-27T07:39:07Z
dc.date.available2021-7-27T07:39:07Z
dc.date.issued2021
dc.identifier.urihttp://ir.lib.ncu.edu.tw:88/thesis/view_etd.asp?URN=108453041
dc.contributor.department資訊管理學系在職專班zh_TW
DC.description國立中央大學zh_TW
DC.descriptionNational Central Universityen_US
dc.description.abstract現今企業之間使用電子郵件進行商業交易資訊的溝通,卻成為網路犯罪份子詐騙公司財務的方法之一。商務電子郵件詐騙(Business Email Compromise, BEC)就是駭客申請了極為相似的郵件網域名稱,利用不意察覺的特性進行中間人攻擊,然後發出電子郵件要求變更帳戶並進行匯款,成為企業財務損失的詐騙手法。為降低BEC詐騙的風險,本研究針對特定高風險財務會計人員的電子郵件日誌,使用ELK Stack(Elasticsearch, Logstashand, Kibana)處理後,比對郵件信任的網域列表,並設計以網域註冊時間與郵件主旨等為過濾條件,來偵測是否為可疑網域的BEC郵件。我們已完成系統雛型BEClookup並以某公司2020年1~12月的郵件日誌為測試,該公司約有3600個郵件帳號,接收4,078,525封外部郵件,檢測出3封假冒郵件網域要進行詐騙的商務電子郵件,其中有一封郵件偽造匯款帳戶預詐騙金額為127,217USD美金。zh_TW
dc.description.abstractCorporations exchange commercial information via emails for convenience. However, it is also a channel of cybercriminals. Business Email Compromise (BEC) means hackers apply for a similar email domain name of a corporation and take the advantage of a similar domain name is hard to the identification. Then perform a man-in-the-middle attack to send a request email to change remittance, which becomes a fraud method. In order to mitigate the risk of Business Email Compromise, this study used ELK Stack(Elasticsearch, Logstash and Kibana)to process the email logs, we focus on high-risk financial accountants and use email subjects, registration time of domain name as comparison conditions to detect suspicious domain names in the papers. We have completed the prototype of the system called BEClookup and have made a trial run on one corporation from January to December 2020. There are around 3,600 email accounts and 4,078,525 external emails in the corporation during the period. We detected 3 BEC emails by this methodology. One of the emails fraudulent amounts is up to USD 127,217. The result indicates that this research can help corporations avoid financial loss.en_US
DC.subject商務電子郵件詐騙zh_TW
DC.subject中間人攻擊zh_TW
DC.subject網域名稱zh_TW
DC.subject電子郵件日誌分析zh_TW
DC.subjectELK Stackzh_TW
DC.subjectBusiness Email Compromiseen_US
DC.subjectMan-in-the-middle attacken_US
DC.subjectDomain Nameen_US
DC.subjectEmail log analysisen_US
DC.subjectELK Stacken_US
DC.titleBEClookup:基於可疑網域分析之商務電子郵件詐騙偵測系統zh_TW
dc.language.isozh-TWzh-TW
DC.titleBEClookup:A business email compromise detection system based on suspicious domain analysisen_US
DC.type博碩士論文zh_TW
DC.typethesisen_US
DC.publisherNational Central Universityen_US

若有論文相關問題,請聯絡國立中央大學圖書館推廣服務組 TEL:(03)422-7151轉57407,或E-mail聯絡  - 隱私權政策聲明