abstract
-
ROBLEM TO BE SOLVED: To provide a detection system that does not need intervention by an operator requiring a longer time scale, but adjusts sensitivity automatically with a short time scale.
SOLUTION: The apparatus for optimizing a filter 16 based on an attack detected on the data network includes an estimation means 24 and an optimization means 22. The estimation means 24 operates when a detector detects the attack and transmits an inaccurate attack severity. The estimation means 24 determines the accurate attack severity. The optimization means 22 adjusts the parameter and makes the parameter serve as an input to the filter 16.