MONITORING DEVICE AND MONITORING METHOD

摘要

PROBLEM TO BE SOLVED: To properly monitor an access to an unknown malignant URL by properly discovering the malignant URL.SOLUTION: A monitoring device 10 checks whether a URL coincident with a known malignant URL exists among entrance URLs or access destination URLs stored in a connection relation storage part, and detects a combination of an entrance URL and an access destination URL as a combination of a malignant URL in the case that there is the combination of the entrance URL and the access destination URL with a URL coincident with the known malignant URL existing therein. Then, the monitoring device 10 monitors that a client 30 accesses to the entrance URL of the detected combination of the malignant URLs.