non-normal communication sensing device and non-normal communication detection method

摘要

PROBLEM TO BE SOLVED: To set a node which has not communicated in the past as a detection object.;SOLUTION: An unusual communication detection apparatus includes a generation part and a determination part. The generation part generates community information in which a user of a communication device is correlated with a community to which the user of the communication device belongs. The determination part refers to the community information. When a user of a communication device of a communication source and a user of a communication device of a communication destination do not belong to the same community, and traffic between the users of the communications device of the communicating source and the communication destination exceeds a predetermined threshold, the determination part determines that the communication between these users is an unusual communication.;COPYRIGHT: (C)2014,JPO&INPIT