摘要 |
PROBLEM TO BE SOLVED: To increase illicit access tracking performance for improving illicit access deterrence and a security property. SOLUTION: This illicit access tracking system is provided with a tracking information processor and a relay device. If illicit access is detected, the relay device acquires a layer 3 transmission source address of a packet sent to an access target communication device to supply it to a tracking agent, and the tracking agent moves to the corresponding relay device based on the layer 3 transmission source address to specify a port, to which an access source communication terminal is connected finally, from contents accumulated in an information collection database part of the relay device and brings back port identification information showing the specified port to the tracking information processor. COPYRIGHT: (C)2006,JPO&NCIPI |