DEVICE FOR FORMATION OF SIGNATURES, METHOD FOR FORMATION OF SIGNATURES AND ENERGY-INDEPENDENT COMPUTER-READABLE MEDIA SAVING THE PROGRAM

摘要

This signature-generating device (2) comprises: a collection unit (11) which collects threat information; an extraction unit (21) which extracts attack data from the threat data collected by the collection unit (11); and a generation unit (31) which generates a signature on the basis of attack data extracted by the extraction unit (21). If a plurality of attack data having the same character string are extracted by the extraction unit (21), the generation unit (31) temporarily generates a signature including the same character string, evaluates whether the temporarily generated signature includes a character string used in non-attack data, and if the temporarily generated signature contains a character string used in non-attack data, that character string is removed from the temporarily generated signature to generate a signature.