| 摘要 |
PROBLEM TO BE SOLVED: To accurately collect unauthorized access trace information without letting an intruder know it. SOLUTION: A guest OS12 set so as to be logically connected from a network is operated on a host OS11 set so as not to be logically connected from a network. A log output process 14 which outputs the log of an unauthorized access to a log recording part 15 under the control of the guest OS12 or a log recording part 16 under the control of the host OS11 and a kernel 13 which controls the log output process 14 to be outputted to the log recording part 16, and not to be outputted to the log recording part 15 are operated on the guest OS12 in response to the stop request of the log output process 14. Also, the kernel 13 transfers command information which an intruder has inputted or external data which the intruder has tried to set to the host OS11. COPYRIGHT: (C)2005,JPO&NCIPI |
