DENIAL-OF-SERVICE ATTACK DETECTING SYSTEM, AND DENIAL-OF-SERVICE ATTACK DETECTING METHOD

摘要

A denial-of-service attack detecting system comprises a monitor device for monitoring a packet sent to a communication device to come under a denial-of-service attack, a performance measuring device for measuring the performance of the communication device, and an attack decision device for communication with the monitor device and the performance measuring device. The monitor device detects traffic anomaly information indicating the anomaly of a traffic with a packet directed to the communication device. The performance measuring device detects performance anomaly information indicating the anomaly of the performance of the communication device. The attack decision device decides it on the basis of the traffic anomaly information and the performance anomaly information whether or not the attack is denial-of-service.