AUTHENTICATION INFORMATION THEFT DETECTION METHOD, AUTHENTICATION INFORMATION THEFT DETECTION DEVICE, AND COMPUTER-READABLE RECORDING MEDIUM STORING PROGRAM FOR THE SAME

摘要

The method is for detecting theft of authentication information for a communication device that provides a service for a user. The method includes storing, for each log-in request, a record of information on a log-in request source, authentication information that the log-in request source submits to the communication device when the log-in is performed, and information indicating a success or failure of the log-in using the authentication information; receiving information on an attack source against the communication device, from a management device of a network in which the communication device exists; determining that authentication information in the record is stolen by the attack source when information that indicates success of the log-in is stored in the record, the record including information on the log-in request source which is matched with the information on the attack source; and outputting the authentication information that is determined to be stolen.