| 摘要 |
PROBLEM TO BE SOLVED: To identify a malicious communication destination.SOLUTION: A disclosed embodiment, in one aspect, includes an execution unit, a recording unit, a detection unit, and an identification unit. The execution unit executes an illegal program under an environment in which connection information used for connection to a terminal is set in advance. The recording unit records communication destinations for communication involved in execution of the illegal program. The detection unit detects communication to a terminal which is performed using the connection information. The identification unit identifies a communication destination of the illegal program that is executed under an environment in which the connection information for the communication detected by the detection unit is set, out of the communication destinations that are recorded by the recording unit. |
