異常検知装置および異常検知方法

摘要

To improve false detection of abnormality in network.SOLUTION: An abnormality detection device 10 acquires up-to-date information of traffic volume per unit time of each communication apparatus 20A-20C from a NW apparatus 40, calculates average value of traffic volume in a first period from the traffic volume of the communication apparatus, and when the calculated average value of traffic volume exceeds a first threshold level, calculates the average value of traffic volume in a second period where the time, traced back to a prescribed time from the start time of the first period, is the start time. When the calculated average value of traffic volume in the second period exceeds the first threshold level, the abnormality detection device 10 detects corresponding abnormality of the communication apparatus 20.SELECTED DRAWING: Figure 1