APPARATUS AND METHOD FOR MAINTAINING SECURITY

摘要

PURPOSE: An apparatus for maintaining security and a method thereof are provided to grasp and manage a subscriber terminal infected with a malicious code based on an analyzed result of a DNS query, thereby reducing malicious traffic and offering a proper plan to the subscriber terminal. CONSTITUTION: An identification information collecting unit(121) collects identification information of a subscriber terminal attempting a connection to a domain. A malicious code infection determiner(122) decides infection about a malicious code of the subscriber terminal. A reaction plan offering unit(123) offers a reaction plan about the malicious code to the subscriber terminal according to the decided result. The identification information collecting unit analyzes a DNS(Domain Name Service) query transmitted from the subscriber terminal and collects the identification information. The malicious code infection determiner decides the malicious code infection of the subscriber terminal according to the domain which the subscriber terminal attempts the connection.