摘要 |
<p>PROBLEM TO BE SOLVED: To provide a network attack protection system which can be effective to the attack by a scanner attacking totally, can unnecessitate the change of a server program and can quickly respond to the contents of the attack. SOLUTION: Communication data transmitted from an external network 2 are sampled by input data monitors 11a and 11b. When an inference engine 12 detects matching between the pattern of communication data sampled by these input data monitors 11a and 11b and an attack pattern stored in the inference engine 12, the rateαof shaping traffic with a traffic shaper 3 is controlled.</p> |