Title:
GENERATION DEVICE, GENERATION METHOD, AND GENERATION PROGRAM
Document Type and Number:
WIPO Patent Application WO/2020/009094
Kind Code:
A1
Abstract:
A detection unit (152) of a generation device (10) detects the abnormality of a network on the basis of information including a plurality of items regarding communication through the network. An identification unit (154) identifies an abnormality cause corresponding to each piece of information when an abnormality is detected by the detection unit (152). A pattern generation unit (155) generates an abnormality cause pattern for each prescribed set of information on the basis of the values of the items of the information and the abnormality cause identified by the identification unit (154).
More Like This:
Inventors:
NAKATSURU TAKESHI (JP)
SATO TOMOYASU (JP)
MINAMI TAKUYA (JP)
FUJIKI NAOTO (JP)
IZUMI MASAMI (JP)
SATO TOMOYASU (JP)
MINAMI TAKUYA (JP)
FUJIKI NAOTO (JP)
IZUMI MASAMI (JP)
Application Number:
PCT/JP2019/026239
Publication Date:
January 09, 2020
Filing Date:
July 02, 2019
Export Citation:
Assignee:
NIPPON TELEGRAPH & TELEPHONE (JP)
International Classes:
H04L12/70; G06F21/56; H04L12/26
Foreign References:
| JP2013011949A | 2013-01-17 | |||
| JP2006041969A | 2006-02-09 | |||
| JP2017084296A | 2017-05-18 |
Other References:
NAKATA, KENSUKE ET AL.: "A method of extracting common malware communication patterns from dynamic analysis result", PROCEEDINGS OF COMPUTER SECURITY SYMPOSIUM 2015, vol. 2015, 14 October 2015 (2015-10-14), pages 318 - 325, XP055445010
KOHEI IMAI; SHIGEKI AOKI; TAKAO MIYAMOTO: "Anomaly detection based on clustering of network traffic characteristics considering results of signature based IDS evaluation", IEICE TECHNICAL REPORT; INFORMATION AND COMMUNICATION SYSTEM SECURITY, vol. 114, no. 489 (ICSS2014-64), 24 February 2015 (2015-02-24), pages 7 - 12, XP009524925
KITANO, MISA ET AL.: "Detection of Drive-by-Download attack using qualitative characteristics and transitions", PROCEEDINGS OF COMPUTER SECURITY SYMPOSIUM 2013, vol. 2013, 14 October 2013 (2013-10-14), pages 595 - 602, XP055673295
See also references of EP 3799367A4
KOHEI IMAI; SHIGEKI AOKI; TAKAO MIYAMOTO: "Anomaly detection based on clustering of network traffic characteristics considering results of signature based IDS evaluation", IEICE TECHNICAL REPORT; INFORMATION AND COMMUNICATION SYSTEM SECURITY, vol. 114, no. 489 (ICSS2014-64), 24 February 2015 (2015-02-24), pages 7 - 12, XP009524925
KITANO, MISA ET AL.: "Detection of Drive-by-Download attack using qualitative characteristics and transitions", PROCEEDINGS OF COMPUTER SECURITY SYMPOSIUM 2013, vol. 2013, 14 October 2013 (2013-10-14), pages 595 - 602, XP055673295
See also references of EP 3799367A4
Attorney, Agent or Firm:
SAKAI INTERNATIONAL PATENT OFFICE (JP)
Download PDF: