Monitoring system, monitoring method, and monitoring program
AssigneeNippon Telegraph and Telephone Corporation
InventorHiroshi KURAKAMI
Life of this patent
Estimating the term…
Abstract
A monitoring device (10) monitors traffic of a network. The monitoring device (10) collects at least one of first information, which is information concerning a first packet transmitted to an address not used in the Internet, and second information, which is information concerning a second packet transmitted to a specific destination set as a decoy. The monitoring device (10) determines, based on information concerning the traffic monitored by the monitoring device (10) and the information collected by monitoring device (10), whether an attack occurs.
Claims8
A monitoring system comprising:
- monitoring circuitry that monitors traffic of a network;
- collection circuitry that collects at least one of first information, which is information concerning a first packet transmitted to an address not used in an Internet, and second information, which is information concerning a second packet transmitted to a specific destination set as a decoy;
- and
- determination circuitry that determines, based on information concerning the traffic monitored by the monitoring circuitry and the information collected by collection circuitry, whether an attack occurs.
A monitoring method executed by a monitoring system, the monitoring method comprising:
- a monitoring step of monitoring traffic of a network;
- a collecting step of collecting at least one of first information, which is information concerning a first packet transmitted to an address not used in an Internet, and second information, which is information concerning a second packet transmitted to a specific destination set as a decoy;
- and
- a determining step of determining, based on information concerning the traffic monitored by the monitoring step and the information collected by collecting step, whether an attack occurs.
A monitoring program for causing a computer to execute:
- a monitoring step of monitoring traffic of a network;
- a collecting step of collecting at least one of first information, which is information concerning a first packet transmitted to an address not used in an Internet, and second information, which is information concerning a second packet transmitted to a specific destination set as a decoy;
- and
- a determining step of determining, based on information concerning the traffic monitored by the monitoring step and the information collected by collecting step, whether an attack occurs.
Dependencies are inferred from the claim text.