DETERMINATION METHOD, DETERMINATION DEVICE AND DETERMINATION PROGRAM

A determination device (10) carries out emulation of an attack code in accordance with an attack type of the attack code included in an attack request on a web application (web server), and when the attack on the web server succeeds as a result of the emulation, extracts a feature related to a backd...

Ausführliche Beschreibung

Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: KANEMOTO, Yo, AOKI, Kazufumi
Format: Patent
Sprache:eng ; fre ; ger
Schlagworte:
Online-Zugang:Volltext bestellen
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
Beschreibung
Zusammenfassung:A determination device (10) carries out emulation of an attack code in accordance with an attack type of the attack code included in an attack request on a web application (web server), and when the attack on the web server succeeds as a result of the emulation, extracts a feature related to a backdoor operation appearing in an attack code on the web server. After that, the determination device (10) determines that an attack by the attack code has succeeded when a communication log of the server has the extracted feature.