Anti-worm-measure parameter determining apparatus, number-of-nodes determining apparatus, number-of-nodes limiting system, and computer product

A non-transitory computer-readable recording medium that stores therein a computer program for determining parameters for controlling timing for an anti-worm-measure means to start blocking of a communication by a worm in a network, for preventing a spread of the worm, wherein the computer program causes a computer to execute a process comprising:

• calculating infectivity of the worm based on the number of nodes connected to the network;
• estimating expected values of the number of infected nodes based on the calculating step number of packets transmitted by the worm and the infectivity calculated at the ;
• and
• deriving the number of packets from a value among the expected values estimated at the estimating step, as an upper limit of the number of packets allowed to be leaked from one infected node, the value being below a predetermined upper-limit value.

An anti-worm-measure parameter determining apparatus that determines parameters for controlling timing for an anti-worm-measure to start blocking of a communication by a worm in a network, for preventing a spread of the worm, the anti-worm-measure parameter determining apparatus comprising:

• an infectivity calculating unit that calculates infectivity of the worm based on the number of nodes connected to the network;
• a number-of-infected-nodes estimating unit that estimates expected values of the number of infected nodes, based on the number of packets transmitted by the worm and the infectivity calculated by the infectivity calculating unit;
• and
• a number-of-leaked-packets deriving unit that derives the number of packets from a finite maximum value among the expected values estimated by the number-of-infected-nodes estimating unit, as an upper limit of the number of packets allowed to be leaked from one infected node.

An anti-worm-measure parameter determining apparatus that determines parameters for controlling timing for an anti-worm-measure to start blocking of a communication by a worm in a network, for preventing a spread of the worm, the anti-worm-measure parameter determining apparatus comprising:

• an infectivity calculating unit that calculates infectivity of the worm based on the number of nodes connected to the network;
• a number-of-infected-nodes estimating unit that estimates expected values of the number of infected nodes, based on the number of packets transmitted by the worm and the infectivity calculated by the infectivity calculating unit;
• and
• a number-of-leaked-packets deriving unit that derives the number of packets from a value among the expected values estimated by the number-of-infected-nodes estimating unit, as an upper limit of the number of packets allowed to be leaked from one infected node, the value being below a predetermined upper-limit value.