| 摘要 |
PROBLEM TO BE SOLVED: To easily acquire a MAC address of a communication terminal that has conducted unauthorized communication from a communication address in the network layer of the communication terminal that has conducted unauthorized communication. SOLUTION: When a worm detector 35 detects that an infected terminal 1 has conducted unauthorized communication, the IP address of the infected terminal 1 is acquired by a communication interruption instruction S4, an ARP packet to obtain a MAC address from the IP address is acquired; and when the IP address contained in the infected terminal 1 is an IP address of the infected terminal 1, a worm interruption apparatus 3 acquires the MAC address contained in the ARP packet. COPYRIGHT: (C)2008,JPO&INPIT
|
