|
|
|
|
The "Cyber Clean Center" project, which was conducted in cooperation with the Ministry of Internal Affairs and Communications and the Ministry of Economy, Trade and Industry finished in March 2011.
This is an archive of Cyber Clean Center project which was conducted from 2006 through March 2011.
The following information is as of CCC operation. |
|
What is Cyber Clean Center? |
|
| Cyber Clean Center is analyzing characteristics of BOTs, which have been a threat against the Internet, and providing information on removal of BOTs from users' computers. In addition, Cyber Clean Center is a core organization taking a role to promote BOT removal and prevention of re-infection of users' computers which are once infected by BOTs, based on cooperation with ISPs (Internet Service Providers). |
|
Purpose of Cyber Clean Center |
|
BOT, a type of fraudulent programs with which infection has been augmented in recent years, has a tremendous number of subspecies. Due to this fact, it is difficult to remove BOTs using conventional type of removal means against computer viruses. Since attack and infection activities of BOTs are taken in constrained portions of programs and unseen to the external, users do not realize what are going on their computers.
In these surroundings, we consider it is necessary to understand BOTs's attack and infection activities effectively and safely, and to promote users to remove BOTs from their once-infected computers, through providing countermeasures against BOTs.
Cyber Clean Center has been established aiming to be continuously active in such a field as an integrated base organization to coordinate among relating institutions and ISPs (Internet Service Providers), and security vendors. |
|
Activities of Cyber Clean Center |
|
| It is known that BOT is infected (1. Infection activity) through the internet.
In the Cyber Clean Center, when BOT infection is detected and BOT is captured (2. Detection of infection activity, capture of BOT samples), we request ISP to identify bot infected users' PCs (3. Requesting identification of infected PCs) and create removal tools for unknown BOTs (4. Preparation of bot removal tools). ISP identifies infected users' PCs (5. Identifying infected PCs) and sends an alert email to infected users (6. Sending email for alerting about infection and urging removal of bots).
Users who receive an alert email access the countermeasures website (7. Accessing the countermeasures website) and remove bot (8. Downloading bot removal tool).
We remove bots through the series of activities. |
 |
|
Structure of Cyber Clean Center |
|
| Cyber Clean Center has Cyber Clean Center Steering Committee and three working groups in the layer below the steering committee, depending on activities to bear. |
|
|
Cyber Clean Center Steering Committee |
| Cyber Clean Center Steering Committee reviews policies and activities of Cyber Clean Center from comprehensive point of views. |
|
BOT countermeasure system operation group |
| The BOT countermeasure system operation group takes a role to operate"BOT collection system", which collects BOT main bodies, to rouse attention to the users of BOT infected computers and to provide the information on BOT countermeasures through the Internet service providers. In addition, the group investigates up-to-date activities of viruses including BOT. |
|
BOT program analysis group |
| The BOT program analysis group studies and analyzes the BOT programs collected through the BOT collection system. The group analyzes characteristics and technical elements of BOT programs, as well as studies effective and efficient analysis techniques. In addition, the group develops countermeasure technology based on the information resulted from the analyses in cooperation with security vendors. |
|
The BOT infection prevention promotion group |
The BOT infection prevention promotion group undertakes the task of enhancing BOT infection prevention measures and preventing BOT re-infection for general users in cooperation with the security vendors.
Specifically, the group provides BOTs collected in this project for security vendors as specimens so that each vendor incorporates countermeasures in its pattern files. Due to the updated pattern files, detection and removal of BOTs collected in this project will thereby be enabled, improving security countermeasures.
Vendors participating to this project are such companies that practice strict management of the specimens, have domestic units to analyze BOTs and considerably well experienced in this field of providing Anti-Virus software and services in Japan. With participations of these vendors, the BOT infection prevention promotion group has been and will be active to promote BOT infection prevention on users' PCs. |
|
ISPs (Internet Service Providers) participating to the project |
hi-ho Inc. (hi-ho)
Internet Initiative Japan Inc. (IIJ)
KDDI CORPORATION (au one net)
NEC BIGLOBE, Ltd. (BIGLOBE)
NIFTY Corporation (@nifty)
NTT Communications Corporation (OCN)
SOFTBANK BB Corp. (Yahoo! BB)
SOFTBANK TELECOM Corp. (ODN, SpinNet)
@NetHome Co., Ltd. (@NetHome)
ASAHI Net, Inc. (ASAHI Net)
CableOne Corporation (CableInternet)
CableTV Yamagata,Inc. (CATV-Y Internet)
CHUBU TELECOMMUNICATIONS CO.,INC. (Commufa)
Densan. Co.,Ltd. (avis)
DEODEO Corporation DEODEO (Enjoy Net)
DREAM TRAIN INTERNET INC. (DTI,isao.net,cilas.net,BROADSTAR)
Energia Communications,Inc. (MEGA EGG Internet)
FAMILYNET JAPAN CORPORATION (CYBERHOME)
FUJITSU NAGANO SYSTEMS ENGINEERING LIMITED (Infovalley)
FUJITSU SOFTWARE TECHNOLOGIES LIMITED (Web-Shizuoka)
Fureai Channel Co.,Ltd.
Fusion Network Services Corporation (FUSION GOL)
Global Network Core Co.,Ltd (N-plus, info-niigata)
Good Communications CO,Ltd (SYNAPSE)
Gunma Internet
Hanno Cable Television Corp. (@Hanno)
Himawari Network (Aitai net)
IC-NET Co.Ltd
ims.jp (Internet MAGMA)
INTERLINK Inc. (INTERLINK, ZOOT)
Internet Pro Tokai Co.,Ltd. (IPCTokai Internet Service)
ITEC Hankyu Hanshin Co.,Ltd. (GAONET,tigers-net.com,BaycomNet,BAIservice)
JWAY CO., LTD (CableInternet)
KANSAI MULTIMEDIA SERVICE COMPANY
KATCH NETWORK INC. (KATCH)
Kawaguchiko television Inc (LCNet)
Kintetsu CableNetwork Co.,Ltd. (KCN-Net)
KIP Co.,Ltd. (KIP-Internet)
KMN Corporation (ROSENET)
KMN Corporation (MediaCat)
K-Opticom Corporation (eo)
KUMAMOTO CABLE NETWORK CORPORATION (JCN INTERNET)
LCV CORPORATION (LCV-Net)
Mediatti Communications, Inc. (Mediatti NET)
Micsnetwork Corporation (mics internet service)
Mie Data Tsusin Corporation ( Mie Internet Service)
Mirai Communication Network Inc.
Nagasaki Cable Media
NDS Co.,Ltd cable (TikiTiki Internet)
Noetsu Cablenet Inc.
NTT DATA SANYO SYSTEM CORPORATION (SANNET)
NTT DOCOMO , INC. (mopera U)
NTT Plala Inc. (plala)
NTT-ME CORPORATION (WAKWAK)
NTTPC Communications,Inc. (InfoSphere, IP)
ParkNet Inc. (ParkNet)
SENDAI CATV CO.,LTD. (CAT-V NET)
Shiratsuyu Company (DAC System)
SHONAN CABLE NETWORK CO., LTD. (SCN-NET)
STNet,Incorporated
Takaoka cablenetwork co.,ltd (cable Internet service EGG)
TAM InternetService CO.,LTD. (TAM InternetService, Net3 Internet)
TelecomWAKAYAMA, Inc.
TOKAI CORPORATION (TOKAI NETWORK CLUB)
TOKYO CABLE NETWORK INCORPORATED
TONAMI Satellite Communication Television Co.,Ltd. (TSTNet)
TONAMI Transportation Co.,Ltd. (CORALNET)
TSUNAGU NETWORK COMMUNICATIONS INC. (e-mansion)
VECTANT Ltd. (VECTANT)
VR Techno Center,Inc. (VRTC-NET)
Yamaguchi CableVision Co.,Ltd. (C-able Internet) |
|
Disinfestation tool developing business bodies |
| Trend Micro Incorporated |
|
Project participating security vendors |
AhnLab, Inc.
K.K. Kaspersky Labs Japan
McAfee Incorporated
Microsoft Corporation
Sourcenext Corporation
Trend Micro Incorporated
Symantec Corporation |
|
|
