In this system, a monitor unit monitors outbound communications through a network interface. A process designation unit designates a process 2X which has generated communications. A process tree obtaining unit obtains and outputs process tree information for designation of an upper process to the process 2X. A discrimination unit refers to an illegal rule file for definition of an illegal process by a combination of a process and an upper process which have generated communications, and determines whether or not a process 2X is illegal according to communications information, process information, and process tree information. A process stop unit stops a process 2X determined to be illegal. A notification unit notifies a user of the stop of the process 2X.

 
Web www.patentalert.com

< Information access system, information distribution device, information access device, information distribution method, and information access method

< Detecting probes and scans over high-bandwidth, long-term, incomplete network traffic information using limited memory

> Data storing device for classified data

> Multi-tier method of developing localized calibration models for non-invasive blood analyte prediction
~ 00620