Communication analysis system, analysis method, and program

Abstract

The communication analysis system of the present disclosure has: an information acquisition unit (2501) that acquires past communication information indicating communications performed in a monitoring target (10); a prediction target link extraction unit (2502) that, on the basis of the acquired past communication information, extracts non-occurred communication links, which are communication links that have not occurred in the past communication information and that are one or more communication links to be predicted; a link certainty calculation unit (2504) that calculates a certainty indicating a possibility that the extracted non-occurred communication links will occur as normal communication links in the future; and an NW graph creation unit (2506) that, using the extracted non-occurred communication links, the calculated certainty, and the acquired past communication information, creates an NW graph, in which non-occurred communication links and information pertaining to non-occurred communication links is mapped, as graph information for determining whether to make additions to a white list (22).

Images