| 摘要 |
Provided is a system which detects an improper communication, without imposing a processing burden on a control device. An incident detection system detects security incidents and is provided with: an ID generation unit which generates identification information of an own gateway device; a detection packet generation unit which generates a detection packet that includes control information transmitted from a control device and path information in which the own gateway device identification information has been appended to a communication packet; a log generation unit which generates log information that includes the detection packet; and a device communication unit which transmits the log information to a management server connected by a network to the gateway device, or which transmits the detection packet to the control device by which the device communication unit is controlled on the basis of the control information. The management server is provided with: a server communication unit which receives the log information from the gateway device; a communication path extraction unit which stores in advance, in a storage unit, assumed path information containing path information extracted from the log information; and an incident detection unit which detects an improper communication packet on the basis of the assumed path information stored in the storage unit and the path information included in the log information. |
