Information monitoring device, information monitoring method, and information monitoring program

Abstract

[Problem] To provide an information monitoring device that identifies attacker information and leaked files when a file is extracted following a cyber-attack. [Solution] The information monitoring device includes a generating unit that generates an embedded file, which starts a program that recognizes an IP address when the file is downloaded or uploaded to the Internet, an adding unit that adds the embedded file to an electronic file, and a receiving unit that, when the electronic file is illegally leaked, receives the IP address of a specific server where the illegally leaked electronic file is stored by starting the program on the specific server. [Selected Figure] Figure 1

Images