NAME IDENTIFICATION DEVICE, NAME IDENTIFICATION METHOD AND PROGRAM

摘要

PROBLEM TO BE SOLVED: To improve estimation accuracy of a host name in the case where name solution using an alias is performed.SOLUTION: A name identification device comprises: a generation part for generating graph information correspondingly to a client corresponding to a DNS response that is observed in a network, the graph information defining a name and an IP address included in each A record or each CNAME record included in the DNS response as nodes and including a correspondence of the name and the IP address in each A record or each CNAME record as a branch; and an identification part for identifying a name related to a leaf node that can be reached by tracing the branches from a node corresponding to an IP address of a server in the graph information corresponding to the client regarding a packet, observed in the network, between the client and the server.SELECTED DRAWING: Figure 4