TRAFFIC FEATURE INFORMATION EXTRACTION DEVICE, TRAFFIC FEATURE INFORMATION EXTRACTION METHOD, AND TRAFFIC FEATURE INFORMATION EXTRACTION PROGRAM

摘要

In the present invention, a reception traffic feature extraction server (10) includes: an input unit (11); a feature information extraction unit (12); a clustering unit (13); a signature generation unit (14); and an output unit (15). The input unit (11) acquires, from network traffic data (11a), traffic information satisfying a prescribed condition. The feature information extraction unit (12) extracts feature information from the acquired traffic information. The clustering unit (13) classifies the traffic information on the basis of the extracted feature information. The signature generation unit (14) analyzes the classification results obtained by the clustering unit (13) and generates signatures. The output unit (15) outputs, from among the generated signatures, a signature satisfying a prescribed condition.