Response instruction device, response instruction method, response instruction program

摘要

PROBLEM TO BE SOLVED: To enable countermeasures against an attack in advance even when a connection configuration of a network dynamically changes.SOLUTION: In a countermeasure instruction device, a mobile device searching unit identifies a certain mobile device that has approached a mobile device of a transmission source identified by threat information. An infection determination unit determines the possibility that the certain mobile device is infected. A countermeasure determination unit selects countermeasure information targeting a proximity group or countermeasure information targeting an expanded proximity group as the number of mobile devices that may have been infected increases. A proximity clustering unit sets the mobile device of the transmission source identified by the threat information and the mobile device identified by the mobile device searching unit as the proximate group. A mobile device estimation unit identifies a mobile device that is predicted to approach one of the mobile devices belonging to the proximity group. An expanded proximity clustering unit sets the mobile device identified by the mobile device estimation unit and the mobile devices belonging to the proximate group as an extended proximity group. A countermeasure transmission unit transmits the countermeasure information to a network control device.SELECTED DRAWING: Figure 2