摘要 |
PROBLEM TO BE SOLVED: To provide a software operation modeling device, capable of performing right and wrong determination upon detection of an unlearnt operation while preventing false attack. SOLUTION: The software operation modeling device 100 comprises an instruction acquisition part 110 acquiring instructions issued by monitoring object software 10 during operation; an instruction accumulation part 120 accumulating the acquired instructions in time series for every trial; a model generation part 130 reading the time series of instructions accumulated in the instruction accumulation part 120 for every trial, and generating an operation model from the time series of instructions; and a model accumulation part accumulating operation models of the monitoring object software generated by the model generation part 130 by the previous reading. COPYRIGHT: (C)2007,JPO&INPIT |