| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To detect an unknown attack packet from the received packets. <P>SOLUTION: A received packet managing part 135 stores a received packet in a packet storage area 134b and transfers the packet to the packet comparing part 136. The packet comparing part 136 compares the received packet with a pattern showing each pattern information stored in a pattern file storage area 134c to thereby detect the known attack packets. When the received packet is not a known attack packet, the packet is processed by a packet processing module 12, and when the processing is finished, the packet is eliminated from the packet storage area 134b. The received packet managing part 135 detects a packet that is stored in the packet storage area 134b while exceeding a fixed period of time and adds the packet as an unknown attack packet to the pattern file storage area 134c. <P>COPYRIGHT: (C)2005,JPO&NCIPI</p> |
