NETWORK ATTACK COMBATING METHOD, NETWORK ATTACK COMBATING DEVICE AND NETWORK ATTACK COMBATING PROGRAM

摘要

When an attack is terminated, a mitigation measure against the attack is terminated. At this time, a network attack mitigation device determines whether there is a network attack mitigation device located on an attacker device than the own device and performing the mitigation measure against the attack in collaboration with the own device, or preparing for resume of the attack, thereby determining whether it is necessary to prepare for resume of the attack. According to this determination, when it is determined that it is not necessary to prepare for resume of the attack, the network attack mitigation device deletes the information relating to the attack and returns to a normal state. On the other hand, when it is determined that it is necessary to prepare for resume of the attack, the network attack mitigation device prepares for resume of the attack, without deleting the information relating to the attack.