| 摘要 |
PROBLEM TO BE SOLVED: To provide a technology for observing a darknet broadly, and protecting a real network of organization with a server and a host by using the result of the observation. SOLUTION: A method for monitoring a network is provided to supervise the darknet having an address used on the network and providing a reachable and unused address space. Using an analysis center device 10 for collecting and storing used address information at each of communication networks to be monitored, a sensor means installed in each of the communication networks 2a-2g managed by different organizations detects a signal addressed to the darknet in the own network. Then, the detection result at least including the existence of the signal and a sender's address of the detected signal are received from each of the sensor means. Whether or not the sender's address is a used address information at each of communication networks to be monitored is analyzed. When the signal is not the one sent from the used address at least as a result of analysis, an alert is output. COPYRIGHT: (C)2010,JPO&INPIT |
