摘要 |
PROBLEM TO BE SOLVED: To provide a security device and update method can rapidly correspond to a new crime method while reducing operation burden in updating rules for detecting suspiciousness information. SOLUTION: The security device includes a behavior deriving rule storage part 160 for storing behavior deriving rule information in which behavior information which indicates an action state of an object and derives predetermined behavior from state information, a suspicious behavior rule storage part 170 for storing suspicious behavior rule information in which suspicious behavior information for determining a predetermined action state as suspicious behavior based on the state information is registered, and an update part 139 which obtains update data including the behavior information to be updated and the suspicious behavior information to be updated, updates the behavior deriving rule information stored in the behavior deriving rule storage part 160 with the behavior information to be updated, and updates the suspicious behavior rule information stored in the suspicious behavior rule storage part 170 with the suspicious behavior information to be updated. COPYRIGHT: (C)2009,JPO&INPIT
|