Network attack combating method, network attack combating device and network attack combating program

摘要

A network attack mitigation device defends a victim device against an attack from an attacker device while collaborating with other network attack mitigation devices. When the attack ends, the network attack mitigation device decides whether to terminate mitigation measure taken against the attack. This decision is made based on a status of other network attack mitigation device that is nearer to the attacker device than the network attack mitigation device. When deciding not to prepare for resume of the attack, the network attack mitigation device deletes information relating to the attack and returns to a normal state. When deciding to prepare for resume of the attack, the network attack mitigation device prepares to resume of the attack without deleting the information relating to the attack.