摘要 |
<p>PROBLEM TO BE SOLVED: To provide an attack path tracing system that can efficiently trace an attacker onto a server. SOLUTION: In the attack path tracing system that traces a transmission path of attack data used to attack a server connected to a network via a router, an information providing server 500 is provided with a data mark attaching section 502 that attaches an identifier to data received from a data input section 501, a communication processing section 505 transmits the data with the identifier attached thereto to the network, the router 700 is provided with a mark detection section 703 that detects the identifier from passing data and with a detection result storage section 704 that stores a result of detection by the mark detection section 703, and a manager confirms data stored in the detection result storage section 704 to easily investigate the attack path.</p> |