Title:
INFECTION-SPREADING ATTACK DETECTION SYSTEM AND METHOD, AND PROGRAM
Document Type and Number:
WIPO Patent Application WO/2019/235403
Kind Code:
A1
Abstract:
Provided are an infection-spreading attack detection system and method and a program with which it is possible to detect the occurrence of an infection-spreading attack with high accuracy. A first feature quantity is calculated on the basis of traffic information of a packet transferred by a transfer device, and M partial address spaces to be monitored are identified on the basis of the first feature quantity. Then, a second feature quantity of each of the M partial address spaces is calculated on the basis of traffic information relating to the M partial address spaces, an anomaly detection determination is made on the basis of the second feature quantity for each of the M partial address spaces, and M determination results are evaluated to determine the presence or absence of the occurrence of an infection-spreading attack.
Inventors:
TOGARI YUKIHIRO (JP)
MAEDA HIROAKI (JP)
KOJIMA HISASHI (JP)
KUWAHARA TAKESHI (JP)
MAEDA HIROAKI (JP)
KOJIMA HISASHI (JP)
KUWAHARA TAKESHI (JP)
Application Number:
PCT/JP2019/021909
Publication Date:
December 12, 2019
Filing Date:
June 03, 2019
Export Citation:
Assignee:
NIPPON TELEGRAPH & TELEPHONE (JP)
International Classes:
H04L12/70
Foreign References:
| JP2016127533A | 2016-07-11 | |||
| JP2008172548A | 2008-07-24 |
Attorney, Agent or Firm:
MIYOSHI Hidekazu et al. (JP)
Download PDF: