| CPC G06F 21/565 (2013.01) [G06F 21/64 (2013.01); G06F 2221/033 (2013.01); G06N 20/00 (2019.01)] | 14 Claims |

|
1. An information processing device, comprising:
a memory; and
a processor coupled to the memory and programmed to execute a process comprising:
learning each feature of a dynamic file and a static file to generate a learning model;
acquiring a predetermined file group at a reference point of time from an external device that uses the predetermined file group; and
extracting a determination target file, which is the static file, from the predetermined file group on the basis of the learning model,
wherein the learning includes learning using teacher data for a plurality of Operating System (OS) domain types.
|