首页> 外国专利> WORM INFECTION SOURCE SPECIFICATION SYSTEM, SPECIFICATION METHOD AND SPECIFICATION PROGRAM, AGENT, AND MANAGER COMPUTER

WORM INFECTION SOURCE SPECIFICATION SYSTEM, SPECIFICATION METHOD AND SPECIFICATION PROGRAM, AGENT, AND MANAGER COMPUTER

机译:蠕虫感染源指定系统,指定方法和指定程序,代理和管理器计算机

摘要

PROBLEM TO BE SOLVED: To provide a worm infection source specifications system, and so on, capable of specifying a worm specification source and the route thereof, by reducing the throughput of each computer.;SOLUTION: An agent computer 21, or the like, includes a packet-inspecting means 251 for inspecting a communication packet and recording the communication packet as a communication log temporary table; a signature management table 261 for storing a condition for detecting communication by a worm and a signature ID corresponding to the condition; communication log aggregating means 202 and 203 for aggregating communications having the same transmission source, destination network and signature ID from contents of the communication log temporary table for generating a communication log transmission table; and a communication log transmitting means 254 for transmitting the communication log transmission table. A manager computer 20 includes a communication log storing means 201 for storing the content received from the agent computer as a communication log management table, and a worm infection source specifying means 202 for specifying a worm infection terminal from data recorded in the communication log management table.;COPYRIGHT: (C)2011,JPO&INPIT
机译:解决的问题:提供一种蠕虫感染源指定系统等,该系统能够通过减少每台计算机的吞吐量来指定蠕虫指定源及其路由。解决方案:代理计算机21等,数据包检查装置251,用于检查通信数据包并​​将该通信数据包记录为通信日志临时表。签名管理表261,用于存储用于检测蠕虫的通信的条件和与该条件相对应的签名ID;通信日志聚合装置202和203,用于从通信日志临时表的内容中聚合具有相同传输源,目的网络和签名ID的通信,以生成通信日志传输表;通信日志发送装置254,用于发送通信日志发送表。管理器计算机20包括:通信日志存储装置201,用于将从代理计算机接收的内容存储为通信日志管理表;蠕虫感染源指定装置202,用于根据记录在该通信日志管理表中的数据来指定蠕虫感染终端。 。;版权:(C)2011,日本特许厅和INPIT

著录项

  • 公开/公告号JP2011101172A

    专利类型

  • 公开/公告日2011-05-19

    原文格式PDF

  • 申请/专利权人 NEC CORP;

    申请/专利号JP20090254047

  • 发明设计人 KIZU YOSHIYA;

    申请日2009-11-05

  • 分类号H04L12/66;G06F21/20;H04L12/56;

  • 国家 JP

  • 入库时间 2022-08-21 18:23:52

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号