Nippon Telegraph and Telephone Corporation

Masami Ueno

Takahiro Hamada

Bo Hu

Shingo Kashima

Tetsuhiko Murata

Hideo Kitazume

Tsuyoshi Kondo

Yuminobu Igarashi

Yuichi Murata

Yuichi Sudo

A gateway device () stores therein a first filtering rule and a second filtering rule for filtering packets which are transmitted from a terminal () in a network () as a transmission source to a terminal () in a network () as a destination. The gateway device () acquires, on the basis of a packet transmitted from the terminal () in the network (), identification information for identifying the terminal (). The gateway device () notifies a management device () of the acquired identification information. The management device () generates a management screen on the basis of the notified information, and transmits the management screen to a display device (). The management device () transmits an instruction based on input to the display device () to the gateway device (). The gateway device () sets the first filtering rule on the basis of the instruction from the management device ().

Management system and management method

When an attack is detected, a controller samples an attack-target addressed DNS reply, received by a border router, from each of the border routers. Then, the controller adds the transmission-source IP address of the sampled DNS reply to the black list of the border router. Furthermore, upon reception of any of a target-addressed DNS reply and a target-addressed UDP subsequent fragment from the IP address that is described in the black list, the controller gives a command to the border router to discard the packet. Furthermore, the controller specifies the setting, for each of the border routers, that DNS replies to a DNS request from the target are excluded from discarding.

Control device, border router, control method, and control program

Growing community of inventors

Musashino, Japan

Masami Ueno