DDOS COUNTERMEASURE DEVICE, DDOS COUNTERMEASURE METHOD, AND PROGRAM

摘要

Provided is a DDoS countermeasure device which, in an autonomous system equipped with a plurality of mitigation bases, implements a countermeasure against targeted communications in a DDoS attack flowing in from an adjacent autonomous system, the DDoS countermeasure device being provided with: a load distribution determination unit which, when at least one attack is detected, determines, on the basis of the amount of resources available at a mitigation base corresponding to a gateway device through which targeted communications flow in and the communication volume of the targeted communications, whether or not load distribution processing is to be executed; a load distribution processing unit which, in the case when the load distribution determination unit has determined that load distribution processing is to be executed, determines, from among a plurality of mitigation bases, a mitigation base to be used for a countermeasure against the targeted communications in such a manner as to resolve resource shortage at the mitigation base every time an attack takes place; and an attack countermeasure setting unit which, every time an attack takes place, executes path control so as to cause the targeted communications in the attack to go through the mitigation base determined by the load distribution processing unit.