IDENTIFICATION APPARATUS, CONTROL METHOD THEREFOR, AND STORAGE MEDIUM

摘要

There is provided an identification apparatus. A storage unit stores an operation history as a history of an operation executed in at least one information processing apparatus. An acquisition unit acquires malware spread information including information indicating malware. An identification unit identifies, based on the operation history, an intrusion route of the malware indicated by the malware spread information acquired by the acquisition unit, generates at least one piece of malware spread information corresponding to at least one operation included in the intrusion route in the operation history, and identifies, in the operation history, for each of the at least one piece of malware spread information, at least one operation of spreading the malware by setting, as a direct or indirect start point, the malware indicated by the malware spread information.

主权项

1. An identification apparatus for identifying a spread range of malware, comprising:
a storage unit configured to store an operation history as a history of an operation executed in at least one information processing apparatus; an acquisition unit configured to acquire malware spread information including information indicating malware; and an identification unit configured to
identify, based on the operation history, an intrusion route of the malware indicated by the malware spread information acquired by the acquisition unit,generate at least one piece of malware spread information corresponding to at least one operation included in the intrusion route in the operation history, andidentify, in the operation history, for each of the at least one piece of malware spread information, at least one operation of spreading the malware by setting, as a direct or indirect start point, the malware indicated by the malware spread information.