Cyber attack information analysis program, cyber attack information analysis method, and information processor

摘要

The cyber attack information analysis program of the embodiment causes the computer to execute the processing to be collected, the processing to be specified, the processing to be determined, and the processing to be output.The collection process collects multiple cyber attack information.The specified process analyzes the plurality of cyber attack information collected, identifies a plurality of addresses of the cyber attack source included in the plurality of cyber attack information, and specifies the period in which each of the addresses of the plurality of cyber attack sources is observed.The processing to determine corresponds to the result of comparing the first period distribution of the observed period corresponding to the specified plurality of addresses and the second period distribution of the observed period for each address band, according to the result of the address band Alternatively, some addresses included in the address band are determined as the object to be monitored.The output processing outputs information of the determined address band or some address included in the address band.