Making the demand for the necessary data communication state succession monitor manner and the communication state

摘要

PROBLEM TO BE SOLVED: To propose a devise for creating analysis target data with which an invasion detection policy can be easily set, concretely, to perform pattern matched policy setting by collecting a plurality of signatures as one invasion detection policy, and to perform pattern matched policy setting on context of an attack and a response thereto.;SOLUTION: The communication state transition monitoring method is provided for fetching a packet transported on a network, inferring a state transition by tracing communication contents of hierarchized protocols and monitoring a communication state inside an arbitrary information communication station and comprises an analytic data acquisition function and a stream pairing function from a plurality of streams for accomplishing context setting using simple relational setting of a plurality of signatures and pairing of attacks/responses.;COPYRIGHT: (C)2006,JPO&NCIPI