WORM DETECTION PARAMETER SETTING PROGRAM AND WORM DETECTION PARAMETER SETTING DEVICE

摘要

PROBLEM TO BE SOLVED: To set a worm detection parameter according to an application environment.;SOLUTION: When a communication log 2 in a predetermined period is fetched by a log reading means 1a, a log classifying means 1b classifies the communication log 2 by category based on preliminarily decided communication content. A frequency distribution calculating means 1c analyzes the communication log 2 classified by category, and counts up the appearance frequency of every value of a worm detection parameter by each network unit to generate frequency distribution information. A threshold deriving means 1d analyzes the frequency distribution information, and calculates a threshold for deciding whether or not worm communication has been generated. Then, an output means 1e outputs the calculated threshold of the worm detection parameter of the predetermined category together with the frequency distribution information generated by the frequency distribution calculating means 1c to an output device 3, and provides those pieces of information to a user.;COPYRIGHT: (C)2007,JPO&INPIT