| CPC H04L 63/1441 (2013.01) [G06F 21/608 (2013.01); H04L 63/1416 (2013.01)] | 9 Claims |
|
1. A communication control system including an information processing apparatus and a communication control device connected to each other through a network, wherein the information processing apparatus includes:
an attack detector that detects an unauthorized attack;
a detection information notifier that transmits attack detection information concerning the detected unauthorized attack to the communication control device;
a countermeasure instruction information acquirer that acquires attack countermeasure instruction information transmitted from the communication control device;
a countermeasure instruction determiner that determines a countermeasure method to be executed against the detected unauthorized attack based on the acquired attack countermeasure instruction information; and
an attack countermeasure executor that executes the determined countermeasure method against the detected unauthorized attack; and
the communication control device includes:
a detection information acquirer that acquires the attack detection information transmitted from the information processing apparatus;
a storage that stores, in advance attack countermeasure information including:
an attack detection content concerning a predicted attack,
an attack countermeasure function which is a function held by the information processing apparatus in order to deal with the predicted attack, and
an attack countermeasure instruction associated with the attack detection content and the attack countermeasure function and indicating a countermeasure method to be executed against the predicted attack of the attack detection content;
an attack countermeasure decider that selects the attack countermeasure instruction associated with the attack detection content that matches the attack detection information and the attack countermeasure function for the information processing apparatus which transmitted the attack detection information by using the transmitted attack detection information and the attack countermeasure information and determines the countermeasure method to be executed against the detected unauthorized attack; and
a countermeasure instruction information generator that generates the attack countermeasure instruction information including the determined countermeasure method and transmits the attack countermeasure instruction information to the information processing apparatus, wherein
when the information processing apparatus acquires the attack countermeasure instruction information, the determined countermeasure method against the detected unauthorized attack that is indicated in the acquired attack countermeasure instruction information is executed.
|