CYBER ATTACK INFORMATION ANALYZING PROGRAM, CYBER ATTACK INFORMATION ANALYZING METHOD, AND INFORMATION PROCESSING DEVICE

摘要

A cyberattack information analysis program according to an embodiment causes a computer to execute a collecting process, a specifying process, a determining process, and an outputting process. The collecting process collects a plurality of pieces of cyberattack information. The specifying process analyzes the plurality of pieces of collected cyberattack information, specifies a plurality of addresses of cyberattack sources included in the plurality of pieces of cyberattack information, and specifies a period when each of the specified addresses of the plurality of cyberattack sources is observed. The determining process determines an address range or some addresses included in the address range as monitoring targets according to a result of comparing a first period distribution of an observed period corresponding to the plurality of specified addresses and a second period distribution of an observed period for each address range. The outputting process outputs information regarding the determined address range or some addresses included in the address range.