DETERMINATION METHOD, DETERMINATION DEVICE AND DETERMINATION PROGRAM
A determination device (10) carries out emulation of an attack code in accordance with an attack type of the attack code included in an attack request on a web application (web server), and when the attack on the web server succeeds as a result of the emulation, extracts a feature related to a backd...
Gespeichert in:
Hauptverfasser: | , |
---|---|
Format: | Patent |
Sprache: | eng ; fre ; ger |
Schlagworte: | |
Online-Zugang: | Volltext bestellen |
Tags: |
Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
|
Zusammenfassung: | A determination device (10) carries out emulation of an attack code in accordance with an attack type of the attack code included in an attack request on a web application (web server), and when the attack on the web server succeeds as a result of the emulation, extracts a feature related to a backdoor operation appearing in an attack code on the web server. After that, the determination device (10) determines that an attack by the attack code has succeeded when a communication log of the server has the extracted feature. |
---|