Network anomaly detection apparatus and computer program and network anomaly detection method

摘要

PROBLEM TO BE SOLVED: To accurately detect network infection type viruses without requiring operation costs such as signature updating.;SOLUTION: An analysis server 500 (network abnormality detection apparatus) acquires traffic statistical information 141 (number of repeated communications) from repeaters 131-134 and performs time-series analysis to predict the number of repeated communications in the future. When the practically observed number of repeated communications is significantly larger than the predicted value, abnormality is decided. Further an observed result is predicted from the number of repeated communications obtained on the way of observation to discriminate abnormality in an early stage.;COPYRIGHT: (C)2006,JPO&NCIPI