Patent ID: 11924243
Assignee: NIPPON TELEGRAPH AND TELEPHONE CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC H

Claim 6:
7. A search method executed by a computer, the search method comprising:
extracting fingerprints that are combinations of first communication data corresponding to requests and second communication data corresponding to responses to the requests, from communication data obtained by executing known malware;
giving degrees of priority corresponding to degrees of maliciousness of the malware, to the fingerprints;
generating probes that are requests based on the first communication data included in the fingerprints and signatures based on the second communication data included in the fingerprints;
deciding, based on information about communication of sending-out destinations, search-target sending-out destinations from among the sending-out destinations;
sending out the probes generated at the generating to the search-target sending-out destinations decided at the deciding in an order based on the degrees of priority given at the giving; and
determining whether the search-target sending-out destinations are malicious or not, based on whether responses to the probes sent out at the sending out match the signatures generated at the generating or not.