Determination device, determination method, and determination program
AssigneeNippon Telegraph and Telephone Corporation
InventorYo KANEMOTO
Life of this patent
Estimating the term…
Abstract
A determination device includes processing circuitry configured to detect a communication log of an attack causing different damage in accordance with a function of a web application of a request destination using a URL of the request destination in a communication log in which an attack is to be detected, determine whether or not the attack has succeeded using whether or not there is a login form in the URL of the request destination, a response size to a request, or a status code, or any combination thereof, for the communication log in which the attack has been detected, and output a result of the determination.
Claims8
A determination device comprising:
- processing circuitry configured to:
- detect a communication log of an attack causing different damage in accordance with a function of a web application of a request destination using a URL of the request destination in a communication log in which an attack is to be detected;
- determine whether or not the attack has succeeded using whether or not there is a login form in the URL of the request destination, a response size to a request, or a status code, or any combination thereof, for the communication log in which the attack has been detected;
- and
- output a result of the determination.
A determination method executed by a determination device, the determination method comprising:
- detecting a communication log of an attack causing different damage in accordance with a function of a web application of a request destination using a URL of the request destination in a communication log in which an attack is to be detected;
- determining whether or not the attack has succeeded using whether or not there is a login form in the URL of the request destination, a response size to a request, or a status code, or any combination thereof, for the communication log in which the attack has been detected;
- and
- outputting a result of the determination.
A non-transitory computer-readable recording medium storing therein a determination program that causes a computer to execute a process comprising:
- detecting a communication log of an attack causing different damage in accordance with a function of a web application of a request destination using a URL of the request destination in a communication log in which an attack is to be detected;
- determining whether or not the attack has succeeded using whether or not there is a login form in the URL of the request destination, a response size to a request, or a status code, or any combination thereof, for the communication log in which the attack has been detected;
- and
- outputting a result of the determination.
Dependencies are inferred from the claim text.