METHOD, SERVER, AND RECORDING MEDIUM FOR PROVIDING SERVICE FOR MALICIOUS TRAFFIC CONTOL AND INFORMATION LEAK OBSERVATION BASED ON NETWORK ADDRESS TRANSLATION OF DOMAIN NAME SYSTEM

摘要

PURPOSE: A method for providing a domain name system detour-based malignant traffic control and information leakage detecting service, a server, and a recording medium thereof are provided to detect abnormal states based on changes in statistics and user behavior. CONSTITUTION: A malignant domain determination unit (70) updates a black list by determining the state of a malignant domain for a new domain inputted by a communication unit. A list arrangement unit (90) detects the validity of the black list based on data inputted by the communication unit. The list arrangement unit deletes the corresponding domain from the black list after a fixed period passes. The list arrangement unit stores the black list as a gray list. [Reference numerals] (10) Communication unit; (30) Control unit; (50) Storage unit; (51) Self-exception list; (53) Black list; (55) Gray list; (70) Malignant domain determination unit; (90) List arranging unit