| 摘要 |
PROBLEM TO BE SOLVED: To provide a defensive method with which defense is made possible by detecting more kinds of attacks and the communication band of a network is prevented from being wasted by traffic caused by the attack. SOLUTION: In order to defense a computer 7000a of a person to be attacked, shields 7001b and 7001c distributed with a variable level number are located. Each of the shields analyzes a packet associated with the computer 7000a of the person to be attacked, narrows down the band of suspicious traffic by an examination and detects the attack. When the attack is detected, each shield transfers the program of a probe toward the upstream of the attack. When the packet of the attack is found out, a probe 7001e discards the packet and transfers the program of the probe toward the further upstream side. COPYRIGHT: (C)2004,JPO
|
