Detection device, detection method, and detection program
AssigneeNippon Telegraph and Telephone Corporation
InventorsKazunori KAMIYA, Hiroshi KURAKAMI
Life of this patent
Estimating the term…
Abstract
A detection apparatus includes processing circuitry configured to store attack information including detection time, attack attribute, and communication destination of a DDoS attack, and extract, from a collection of the attack information, a combination of the attack information according to the detection time, the attack attribute, and the communication destination as a coincident attack, an intermittent attack, or an identical target attack.
Claims7
A detection apparatus comprising:
- processing circuitry configured to:
- store attack information including detection time, attack attribute, and communication destination of a DDoS attack;
- and
- extract, from a collection of the attack information, a combination of the attack information according to the detection time, the attack attribute, and the communication destination as a coincident attack, an intermittent attack, or an identical target attack.
A detection method comprising:
- referring to a storage configured to store attack information including detection time, attack attribute, and communication destination of a DDoS attack to extract, from a collection of the attack information, a combination of the attack information according to the detection time, the attack attribute, and the communication destination as a coincident attack, an intermittent attack, or an identical target attack, by processing circuitry.
A non-transitory computer-readable recording medium storing therein a detection program that causes a computer to execute a process comprising:
- referring to a storage configured to store attack information including detection time, attack attribute, and communication destination of a DDoS attack to extract, from a collection of the attack information, a combination of the attack information according to the detection time, the attack attribute, and the communication destination as a coincident attack, an intermittent attack, or an identical target attack.
Dependencies are inferred from the claim text.