DETECTION DEVICE, PROGRAM, AND DETECTION METHOD

摘要

[PROBLEMS] To accurately detect a peculiar operation of a task on an information processing device. [MEANS FOR SOLVING PROBLEMS] A detection device detects whether a peculiar operation has been performed in execution of a task-to-be-monitored on an information processing device. The detection device includes: an acquisition unit for acquiring measurement data including an execution timing and an execution time for each of executions when a task-to-be-monitored is executed on the information processing device a plurality of times; a distance calculation unit for calculating a distance between a measurement point corresponding to each measurement data in a multi-dimensional space in which an execution timing and an execution time are assigned to different coordinate axes and another measurement point located in a predetermined range; and a judging unit for judging whether a peculiar operation has been performed in an execution of a task-to-be-monitored corresponding to the measurement data according to the distance obtained for the measurement point corresponding to the measurement data. ® KIPO & WIPO 2009