To provide an attacking host detection device, a method therefor and a program thereof with improved detection accuracy of a junk mail transmission host.
The host detecting device 1 includes: an extraction unit 11 extracting identification information of the host that has transmitted a mail from traffic data; host historical data 21 and latest traffic data 22 that store, respectively, the identification information for each of the hosts having transmitted mails within a first period of time extracted by the extraction unit 11 and within a second period of time following the first period of time; and an identification unit 12 identifying, as a candidate of a black list, a first host, from which no mail has been transmitted within the first period of time, among the hosts having transmitted mails within the second period of time.
YAMADA AKIRA
KUBOTA AYUMI
JP2004172891A | 2004-06-17 | |||
JP2012114719A | 2012-06-14 | |||
JP2010004442A | 2010-01-07 | |||
JP2012015684A | 2012-01-19 |
Hayashi Ichiyoshi
Next Patent: PORTABLE APPARATUS AND PERSONAL AUTHENTICATION SYSTEM