摘要 |
<p><P>PROBLEM TO BE SOLVED: To provide a system for detecting overlay traffic even when IP addresses and ports of a recipient and sender are not known. <P>SOLUTION: The overlay traffic detection system comprises at least two-direction traffic information measuring means 102-1, 102-2 for acquiring characteristic information of traffic from input traffic, profile creating means 103-1, 103-2 for creating profiles by accumulating acquired packet characteristic information for each traffic specifying information on the recipient, sender, and ports, and profile correlation calculation-threshold determination means 105-1, 105-2 for obtaining correlation between the acquired profiles in different directions, comparing it with a threshold, and determining an overlay traffic. <P>COPYRIGHT: (C)2009,JPO&INPIT</p> |