摘要 |
PROBLEM TO BE SOLVED: To provide a management program, a management unit and a management method capable of identifying a terminal to be monitored after detecting an activation of malware.SOLUTION: The management apparatus acquires a piece of connection information that a terminal as an object to be managed makes a connection with another terminal as an object to be managed and stores the information in a storage section. When a malware which makes a harmful behavior in a first management object terminal, which is included in management object terminals, is detected, the monitoring object terminal to be monitored is identified based on the connection information of the first management object terminal stored in the storage section.SELECTED DRAWING: Figure 9 |