SPOOFING MAIL DETECTOR AND CYBER ATTACK DETECTION SYSTEM AND COMPUTER PROGRAM AND SPOOFING MAIL DETECTION METHOD

摘要

PROBLEM TO BE SOLVED: To determine whether or not a determined mail is possibly a spoofing mail, based on the transfer path the determined mail was transferred.SOLUTION: A transfer path calculation unit 271 calculates a transfer path an E-mail was transferred. A domain path learning unit 272 learns a transfer path, a predetermined number or more E-mails were transferred, for each author domain of E-mail. When the transfer path of a determined mail does not match the domain path of a determined author domain, a spoofing determination unit 28 determines that the determined mail is possibly a spoofing mail.