| 摘要 |
PROBLEM TO BE SOLVED: To provide a method for detecting the transmitting source of a known or unknown worm transmitted to a network to prevent the spread of infection with the worm. SOLUTION: Not only information the worm transmitted to the network but also response information to this information are observed, whereby the transmitting source of the worm is specified. A user terminal 16 which is infected with the worm transmits communication data containing information performing the infection with the worm, and a server 11 observes the response information to the communication data transmitted from the user terminal 16 to specify the user terminal 16 infected with the worm. Otherwise, the server 11 disposes the communication data transmitted by the user terminal 16. COPYRIGHT: (C)2005,JPO&NCIPI |
