Abstract: A reception unit (111) receives as communication log information log information about data communications that have occurred in a data processing system (106). On the basis of the communication log information an attacked terminal log information identification unit (113) searches for a set of processing log information relating to data processing associated with the data communications from among a plurality of sets of processing log information which are log information about data processing that has been performed by the data processing system (106). If the attacked terminal log information identification unit (113) cannot find any set of processing log information relating to data processing associated with the data communications then a terminal log information alteration detection unit (114) determines that at least one of the plurality sets of processing log information has been altered.
SOFT COPY ATTACHED IN PDF