Attack path analysis device and attack path analysis method and program

摘要

PROBLEM TO BE SOLVED: To reduce the amount of packets to be collected for analyzing the invasion route of an attack packet to a network to be monitored, and to improve specification performance of the invasion route.;SOLUTION: An invasion route analyzing apparatus 171 that analyzes the invasion route, holds router connection information indicative of the connection relation of routers 121-124 and if an attack packet is detected by an invasion detector 131, based on header information of packets ordinarily collected by a packet collector 141, header information of the attack packet, and the router connection information, the invasion route of the attack packet is specified.;COPYRIGHT: (C)2006,JPO&NCIPI