Network monitoring device and method
AssigneeFujitsu Limited
InventorsSATOMI SAITO, Satoru Torii
Life of this patent
Estimating the term…
Abstract
A network monitoring device includes: a memory; and a processor coupled to the memory and configured to: based on identifying information and attribute information of an access source included in a history of access to plural dummy servers installed in a monitoring target network, the access source having accessed the individual dummy servers, tally a number of the dummy servers accessed and a number of types of the attribute information for each access source; and estimate the legitimacy of individual access sources based on the number of dummy servers and the number of attribute information types tallied for each access source.
Claims16
A network monitoring device comprising:
- a memory;
- and
- a processor coupled to the memory and configured to:
- based on identifying information and attribute information of an access source included in a history of access to a plurality of dummy servers installed in a monitoring target network, the access source having accessed the individual dummy servers, tally a number of the dummy servers accessed and a number of types of the attribute information for each access source;
- and
- estimate the legitimacy of individual access sources based on the number of dummy servers and the number of attribute information types tallied for each access source.
A non-transitory computer-readable recording medium having stored therein a program for causing a computer to execute network monitoring processing, the processing comprising:
- based on identifying information and attribute information of an access source included in a history of access to a plurality of respective dummy servers installed in a network, the access source having accessed the dummy servers, tallying a number of the dummy servers accessed and a number of types of the attribute information for each access source;
- and
- estimating the legitimacy of access sources based on the number of dummy servers and the number of attribute information types tallied for each access source.
A network monitoring method in which a computer executes processing, the processing comprising:
- based on identifying information and attribute information of an access source included in a history of access to a plurality of respective dummy servers installed in a network, the access source having accessed the dummy servers, tallying, by a processor, a number of the dummy servers accessed and a number of types of the attribute information for each access source;
- and
- estimating, by the processor, the legitimacy of access sources based on the number of dummy servers and the number of attribute information types tallied for each access source.
Dependencies are inferred from the claim text.