Information processing device and method for controlling information processing device

A method for controlling an information processing device,

• the information processing device including:
• a storage that stores a monitoring log generated in the information processing device;
• a transmitter that is capable of communicating with an external device and transmits a monitoring log stored in the storage to the external device at a first timing;
• an anomaly detector that detects a presence or absence of an anomaly in the information processing device and generates a monitoring log that indicates a detection result;
• a first monitor that verifies an integrity of each of the transmitter and the anomaly detector and generates a monitoring log that indicates a verification result;
• and
• a second monitor that verifies an integrity of the first monitor and generates a monitoring log that indicates a verification result,
• the method comprising:
• determining an intrusion depth that indicates a degree of progress of an attack based on a monitoring log stored in the storage when an anomaly due to the attack occurs in at least one of the anomaly detector or the first monitor;
• and
• changing, based on the intrusion depth, a timing of transmission of a monitoring log by the transmitter from the first timing to a second timing that is earlier than the first timing when the anomaly due to the attack occurs in at least one of the anomaly detector or the first monitor.