| 摘要 |
PROBLEM TO BE SOLVED: To provide a black list extraction device or the like for effectively detecting invalid access from access logs of plural websites.SOLUTION: A black list extraction device includes: an access log collection unit 101 that collects access information recorded in web servers, and causes the access information to be stored as access logs in storage means provided in advance; an attack information extraction unit 102 that extracts invalid access as a black list from access information for plural web servers recorded in the access logs on the basis of predetermined detection conditions; and a black list output unit 103 for outputting the extracted black list. |
