SOFTWARE OPERATION MODELING DEVICE, SOFTWARE OPERATION MONITORING DEVICE, SOFTWARE OPERATION MODELING METHOD, AND SOFTWARE OPERATION MONITORING METHOD

摘要

PROBLEM TO BE SOLVED: To provide a software operation modeling device which reduces the time and space overhead of software operation monitoring by accurately detecting an attack. SOLUTION: The software operation modeling device 100 comprises a stack information recording unit 120, a terminal information recording unit 150, a stack difference information generating unit 130 which generates information obtained by mutually connecting pieces of information in higher places of a call stack of stack information until the terminal information is detected as stack difference information, and a model generating unit 140 which generates an operation model for the software from the stack difference information. COPYRIGHT: (C)2008,JPO&INPIT