Loading patent…
AssigneeNippon Telegraph and Telephone Corporation
InventorsNariyoshi Chida, Yo Kanemoto, Kazufumi Aoki
Estimating the term…
An information processing device includes an element extraction unit that extracts elements relating to actions of an attacker from each input log, a generation unit that generates a parser based on definition information defining the actions of the attacker in a formal grammar, the parser detecting, from a log, a log string having a feature corresponding to an action defined by the definition information, a parsing unit that detects, from a log consisting of the elements extracted by the element extraction unit, log strings having features corresponding to the actions defined by the definition information by using the parser, and a reconstruction unit that reconstructs the log strings detected by the parsing unit, adds a label indicating an action defined by the definition information to each of the reconstructed log strings, and outputs the labeled log strings as a log corresponding to a series of actions of the attacker.
An information processing device comprising:
A non-transitory computer-readable recording medium having stored therein an analysis program for causing a computer to execute a process comprising:
Dependencies are inferred from the claim text.