摘要 |
PROBLEM TO BE SOLVED: To provide such characteristic of the immunity mechanism of living thing, that the affected part is removed to maintain an original state, to an illicit act in a computer network. SOLUTION: Plural pieces of log collected in a log collecting part 101 are transmitted to computers 1.5 connected to LAN 6 and the respective computers 1.5 diagnose the collected log by using knowledge based 105 in log diagnosis parts 103. When the illicit act is detected, network management parts 104 update management information 106. When a computer judged that the illicit act more than a threshold which has been previously decided, occurs is in existence, communication with the computer is stopped. |