System for limiting improper communication program and program thereof

Abstract

A system that can observe and restrict an improper communication program regardless of network environments of a computer under control is provided. A server to control each computer includes means for distributing a file pattern to specify an improper program. The computer has a filtering module to carry out observation / restriction processing of communication arising from the computer.; The filtering module comprises a data base in which the file pattern acquired from the server is stored, means for observing communication of a communication module started by the computer and detecting the occurrence of a communication initiating request to other computers, means for comparing a file pattern of the communication module with that of the data base and inspecting whether the communication module is in an improper communication program, and means for restricting communication of the communication module when the inspecting means judges that it is in the improper communication program.

Description

technical field [0001] This invention relates to computer systems for limiting inappropriate communications. In particular, it relates to a computer system and a program thereof that monitor communication modules (various communication programs) running on one's own computer, thereby automatically restricting inappropriate communication before accessing an external computer from one's own computer. Background technique [0002] In recent years, illegal music file exchange software and the like have been distributed in the market. When it is necessary to restrict communication programs that become hotbeds of illegal information circulation including copyright infringement, the following method has been used in the past: a filtering device (gateway device, etc.) is installed between a LAN (Local Area Network) and the Internet, and the use of The device analyzes the communication data, and when it is judged from the content of the communication that the corresponding data is a...

AI Technical Summary

Problems solved by technology

In the case of restricting with a filtering device, access to the Internet from within the LAN can be monitored, but there is a disadvantage that, for example, if a laptop that is considered a company property is taken out of the company, improper use of the laptop cannot be detected. communication program to limit

In addition, the method described in Non-Patent Document 1 has the following disadvantages: since the communication content needs to be analyzed, the CPU load of the gateway device increases, and when communicating with an external computer, a bottleneck (neck) occurs, causing the communication of the client computer to be delayed. speed drop etc.

However, in the method described in Non-Patent Document 2, although the application program can be set not to be executed, it is not possible to cut off only the communication performed by the application program.

Therefore, there is a disadvantage that it cannot be used for applications that do not allow offline use, etc.

Images