COMMUNICATION EQUIPMENT, CYBER ATTACK DETECTION METHOD AND PROGRAM

Japanese Patent JP2014232923

A

PROBLEM TO BE SOLVED: To provide a communication equipment capable of suppressing leak of information to the minimum even when a backdoor is opened due to a target type attack.SOLUTION: In a communication equipment, session management means 101 is configured to, for each session established between a terminal on an internal network NW1 and an information processor on an external network NW2, detect a service type of a service to be used in the session. Detection means 102 is configured to, for each session, detect a feature value indicating a feature of communication using the session. Determination means 104 is configured to, for each session, determine whether or not the feature value detected by the detection means 102 is a value which appears in normal communication on the basis of a threshold recorded in a threshold recording unit in association with the service type detected by the session management means 101. Blocking means 105 is configured to block communication by the session in which it is determined that the feature value detected by the detection means 102 is not the value which appears in the normal communication.

NAKATANI AYUMI

JP2013111795A

December 11, 2014

May 28, 2013

Click for automatic bibliography generation  

NEC CORP

H04L12/66; H04L12/46

JP2005295212A	2005-10-20
JP2006238043A	2006-09-07
JP2012015684A	2012-01-19
JP2008146157A	2008-06-26
JP2007081454A	2007-03-29

US20100281539A1	2010-11-04
US20070064617A1	2007-03-22
US20110055921A1	2011-03-03

GARCIA-TEODORO, P. ET AL.: "Anomaly-based network intrusion detection: Techniques, systems and chllenges", COMPUTERS & SECURITY 28.1, JPN6017003960, 2009, pages 18 - 28, XP025839371, ISSN: 0003495820, DOI: 10.1016/j.cose.2008.08.003

Motohiro Baba
Boundary Hiromi

Previous Patent: IMAGE COMMUNICATION APPARATUS, PROGRAM, AND METHOD

Next Patent: RECEIVING DEVICE, PACKET BOUNDARY DETERMINATION METHOD AND COMPUTER PROGRAM