SPOOFING MAIL DETECTOR AND CYBER ATTACK DETECTION SYSTEM AND COMPUTER PROGRAM AND SPOOFING MAIL DETECTION METHOD

摘要

PROBLEM TO BE SOLVED: To determine whether or not a determined mail is possibly a spoofing mail, based on the communication direction each of one or more packet when the determined mail is communicated.;SOLUTION: A continuous degree calculation unit 261 determines the transmission direction of each of a series of packets constituting a session in accordance with the transfer of an E-mail, and calculates the ratio of packets, the transmission direction of which is same as that of a previous packet, as a packet continuous degree. A statistic calculation unit 262 calculates the statistic based on the packet continuous degree for one or more E-mails having an author domain same as that of the determined mail. A spoofing determination unit 28 determines whether the determined mail is possibly a spoofing mail, based on the statistic.;COPYRIGHT: (C)2014,JPO&INPIT