Attribute information generator, attribute identification device, attribute information generation method and attribute identification method

摘要

PROBLEM TO BE SOLVED: To provide an attribute information generation device and an attribute identification device for identifying an attribute of a packet source while having resistance to spoofing. A communication monitoring device 6 includes an attribute information generation device 10 and an attribute identification device 20. In the attribute information generation device 10, the feature amount calculation unit 12 calculates a random feature amount using the encrypted payload in the packet including the header and the encrypted payload, and the attribute information generation unit 13 calculates the feature amount. Information indicating the correspondence between the random feature amount calculated by the unit 12 and the source attribute is generated. On the other hand, in the attribute identification device 20, the feature amount calculation unit 22 calculates the random feature amount using the encrypted payload in the packet including the header and the encrypted payload, similarly to the feature amount calculation unit 12. Then, the attribute identification unit 23 identifies the source attribute based on the random feature amount calculated by the feature amount calculation unit 22. [Selection diagram] Fig. 2