Attack response system and attack response method

摘要

To properly handle a reflection attack.SOLUTION: An attack handling device 10 of an accommodation network NW_N1 includes a determination section 12 and a control instruction section 16. An attack verification device 20 of a NW_B_N3 includes an attack verification section 23. The determination section 12 generates attack potential information of a reflection attack by a specific protocol from detection information of the reflection attack to the NW_B_N3 detected by an attack detection device. The attack verification section 23 generates attack potential determination result information indicating that the reflection attack is definite when a communication history from a source address of the reflection attack to the accommodation network NW_N1 is present in a monitoring log of communication in the NW_B_N3, based on the attack potential information received from the attack handling device 10. When the attack potential determination result information received form the attack verification device 20 indicates that the reflection attack is definite, the determination section 12 cut-off controls communication by the specific protocol from the source address of the reflection attack.SELECTED DRAWING: Figure 2