JP2004118692A - Computer virus brittleness indicating method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a method for totalizing the brittleness of computer viruses for each virus and reporting the results. <P>SOLUTION: The computer virus brittleness indicating method acquires the virus infection information from any terminal unit, totalizes the infection information for each virus after elapse of a certain period, and sends an E-mail as a warning to the mail address doubted as having spread the computer virus. Also the E-mail as warning is sent to the mail address doubted as infected with the virus and the user in whose address book the mail address having spread the virus infection is registered. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
SUMMARY OF THE INVENTION The present invention relates to a plurality of terminal devices connected by a network such as the Internet, which are installed on a mailer (mail software) capable of transmitting and receiving e-mails, to detect a vulnerability caused by a computer virus when a virus sender, The present invention relates to a pointing method for pointing out a person infected with a virus and a person who has registered a virus sender in an address book.
[0002]
[Prior art]
A terminal connected to a network such as the Internet generally transmits and receives information by e-mail to and from a person other than the terminal itself. However, if application software for sending and receiving e-mail (hereinafter referred to as mailer) is running in the terminal device, the mailer automatically receives e-mail from the outside into the terminal device. Will be downloaded to the terminal device itself. When a computer virus infects a certain terminal device, it is common to send the same virus-attached e-mail to the e-mail address held by the mailer, so the spread of the virus is extremely large.
[0003]
Therefore, the terminal device holder introduces and starts a virus removal program to prevent a computer virus from entering the terminal.
[0004]
In Japanese Patent Application Laid-Open No. 11-134190, "Virus detection notification system, method, and storage medium storing a program according to the method", when a virus infection is detected, a predetermined person is automatically notified of the virus infection. A method is described. According to this method, it is possible to notify a system administrator or an e-mail transmission source that the terminal device has been infected with a virus, thereby preventing the spread of the virus.
[0005]
[Problems to be solved by the invention]
However, even if the virus removal program is activated as described above, it is not possible to prevent a third party from transmitting a virus-infected e-mail, and there is an environment where the virus is always infected. As computer viruses are emerging every day, users must keep virus definitions used by virus removal programs up to date.
[0006]
Further, even when a predetermined person is notified that a virus has been infected as in Japanese Patent Application Laid-Open No. 11-134190, the virus mail sender is infected by a virus mail from another third party. Even if the sender is notified that the virus mail has arrived, only the virus mail sender will deal with it, and this is only a very small solution in view of the spread of the virus infection.
[0007]
The present invention has been made in view of the above-described conventional problems, and detects an infected virus mail, traces the source of the virus mail, and notifies related persons about the virus infection to thereby spread the virus infection. The goal is to reduce
[0008]
[Means for Solving the Problems]
In order to solve the above-mentioned problem, the invention according to claim 1 is a method for collecting virus infection information from a plurality of terminal devices connected to a network and pointing out vulnerability to computer viruses for each user. Receiving the virus infection information from the terminal device and storing the virus infection information in a virus information table; and if the virus infection information is a new virus, enter the virus type and the reception date in the virus initial recognition table. Storing, after a certain period from the reception date stored in the virus initial recognition table, extracting only the type of virus to be counted from the virus information table, and transmitting the extracted virus type. The number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender Comparing the number of reports of the virus stored in the virus information table with each other to determine a level indicating vulnerability to the computer virus, and according to the level, the mail sender who transmitted the type of the virus to the mail sender. Sending an e-mail indicating a vulnerability.
[0009]
According to a second aspect of the present invention, in the first aspect, the transmitting step does not transmit the virus infection information among the e-mail addresses registered in the address book by the e-mail sender who transmitted the virus type. An e-mail indicating virus infection is transmitted to the e-mail address.
[0010]
According to a third aspect of the present invention, in the first aspect, the transmitting step includes transmitting an e-mail that has transmitted the type of the virus to a user whose e-mail sender that has transmitted the type of the virus is registered in the address book. An electronic mail for notifying an address is transmitted.
[0011]
According to a fourth aspect of the present invention, there is provided a program for collecting virus infection information from a plurality of terminal devices connected to a network and indicating vulnerability to a computer virus for each user. Receiving the virus infection information from the terminal device and storing it in a virus information table; and storing the virus type and reception date in a virus initial recognition table if the virus infection information is a new virus. Extracting a type of a virus to be counted from the virus information table after a lapse of a certain period from a reception date stored in the virus initial recognition table; and a mail sender who has transmitted the extracted virus type. The number of mail addresses in the address book that stores the mail address registered by the user for each Comparing the number of reports of viruses stored in the virus information table with the number of reports indicating the degree of vulnerability to computer viruses; and, according to the level, determining the level of vulnerability to the mail sender who transmitted the type of the virus. And sending an e-mail indicating the nature of the request.
[0012]
The invention according to claim 5 is a computer virus vulnerability indication server device for collecting virus infection information from a plurality of terminal devices connected to a network and indicating vulnerability to a computer virus for each user. Means for receiving the virus infection information from the terminal device and storing the virus infection information in a virus information table; and, if the virus infection information is a new virus, the virus type and the reception date in the virus initial recognition table. Means for extracting only the types of viruses to be counted from the virus information table after a lapse of a certain period from the reception date stored in the virus initial recognition table, and transmitting the extracted types of viruses. E-mail address in the address book that stores the e-mail address registered by the user for each e-mail sender Means for comparing the number of reports with the number of reports of viruses stored in the virus information table to determine a level indicating vulnerability to computer viruses; Means for sending an e-mail indicating a vulnerability to a user.
[0013]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, a mobile phone according to an embodiment of the present invention will be described with reference to the drawings.
[0014]
FIG. 1 is an overall view including an indication server 1 according to an embodiment of the present invention. The pointing server 1 and the terminal devices 31 to 33 are configured to be connectable via a network 4 such as the Internet.
[0015]
The pointing server 1 is an information processing device, such as a personal computer. The indication server 1 includes a processing unit that performs processing according to the program by reading the program, and a storage device that stores virus information and an address book received from the terminal devices 31 to 33.
[0016]
When receiving the virus infection information from the terminal devices 31 to 33, this program stores the contents in the virus information table 12 and, in the case of a new virus, in the virus initial recognition information. Then, after a certain period of time has passed since the virus information was stored in the virus initial recognition information, the virus infection information is totaled, and the vulnerability level is determined for each individual who transmitted the virus according to the degree of virus infection. Then, a warning e-mail is sent according to the corresponding level, and an e-mail is also sent to a person who has registered an e-mail address with the highest vulnerability level to point out the vulnerability of the person. Things.
[0017]
The terminal devices 31 to 33 are information processing devices, such as personal computers. In each of the terminal devices 31 to 33, there is a mailer for transmitting and receiving an electronic mail. It is assumed that the mailer has a virus removal program function for recognizing a virus-infected email, or that a virus removal program for recognizing a virus-infected email is running separately from the mailer. When the mailer receives the e-mail, the virus removal program that recognizes the virus-infected e-mail contained in the mailer or that runs independently determines whether the received e-mail is infected with a virus, and if the e-mail is infected, Is to start a corresponding virus removal program to remove the virus. When an e-mail infected with a virus is received, the notification destination is set to the indication server 1 in advance by the method described in Japanese Patent Application Laid-Open No. 11-134190, so that the indication server 1 receives the virus-infected e-mail. Notice.
[0018]
Hereinafter, a computer virus vulnerability indication method according to an embodiment of the present invention will be described with reference to the drawings.
[0019]
As shown in FIG. 1, the pointing server 1 includes a plurality of terminal devices 31 to 33 via a network 4 such as the Internet.
[0020]
The indication server 1 stores an address book 11 storing a mail address book for each user, a virus information table 12 storing virus infection information received from the terminal devices 31 to 33, and a virus information received from the terminal devices 31 to 33. In the case of the first virus, the receiving means 14 stores the virus initial recognition information 13, the virus information from the terminal devices 31 to 33, and stores the data in the virus information table 12 and the virus initial recognition information 13. After a certain period of time has elapsed since the information was stored, the virus infection information tallying means 15 for counting the same virus infection information by the virus information table 12 after a certain period of time has elapsed, Determine the level of vulnerability of virus infected email senders Vulnerability level deciding means 16 and, according to the level decided by vulnerability level deciding means 16, a virus-infected e-mail sender and a virus-infected person, and also a user who registers a virus-infected e-mail at an e-mail address It can be broadly divided into transmission means 17 for transmitting mails respectively. The details will be described below.
[0021]
FIG. 2 is a configuration diagram of the address book 11. A user who receives this service registers his or her address book in the pointing server 1 in advance. The address book can be updated at any time from the terminal devices 31 to 33, and the receiving means 14 of the indication server 1 includes an update function of the address book 11 although the description is omitted. The address book 11 stores a mail address as a user name registered in the address book, a mail address of a mail transmission destination, and remarks for identifying a mail transmission destination. The contents stored in the address book 11 are not limited to this, and any other contents may be stored as long as at least a mail address as a registered user name and a mail address to be registered are stored. It doesn't matter.
[0022]
FIG. 3 is a configuration diagram of the virus information table 12. The virus information table 12 stores the type of virus whose infection has been recognized from the virus infection information received from the terminal devices 31 to 33, the mail address of the virus, the mail address of the virus, and the date of reception of the terminal device. If the receiving date is determined in advance, it may be either the date when the terminal devices 31 to 33 recognized the virus-infected mail or the date when the indication server 1 received the virus infection information from the terminal devices 31 to 33. When recording in detail, it is also possible to record the time together with the date.
[0023]
FIG. 4 is a configuration diagram of the virus initial recognition information 13. This is stored when the type of virus received by the receiving means 14 is recognized for the first time. The type of virus and the date of reception are stored. As the first reception date, the same data as the reception date in the virus information table 12 is stored.
[0024]
FIG. 5 is a flowchart showing the processing of the receiving means 14 in the pointing server 1. When the virus infection information is sent from the terminal devices 31 to 33 to the indication server 1, the receiving means 14 performs a receiving process. The virus infection information from the terminal devices 31 to 33 includes the type of virus necessary to point out a virus vulnerability, the recipient of the virus-infected email (mail address), the sender of the virus-infected email (mail address), and the virus-infected email. Received date is recorded.
[0025]
When the virus infection information is received from the terminal devices 31 to 33, the type of the virus in the received data is identified, and it is determined whether or not the type is stored in the virus initial recognition information 13 (Step 10). If the virus type is stored in the virus initial recognition information 13, the process proceeds to Step 14 as not being new, and if the virus type is not stored in the virus initial recognition information 13, the process proceeds to Step 12 as new. If the virus type is new, the virus type and the reception date are stored in the virus initial recognition information 13 as shown in FIG. 4 (Step 12). Then, the type of the virus, the virus recipient, the virus sender and the date of reception are stored in the virus information table 12 as shown in FIG. 3 (Step 14). As described above, the receiving unit 14 records the virus infection information received from the terminal devices 31 to 33 in the virus information table 12 and the virus initial recognition information 13.
[0026]
FIG. 6 is a flowchart showing the processing of the virus infection information totalizing means 15. Although not shown, the pointing server 1 is provided with a timer function including a date. The virus infection information tallying means 15 is always running at regular intervals, so that a period for counting the virus infection information is set in advance, and it is checked whether the reception date of the virus initial recognition information 13 has passed for a certain period. (Step 20). If the virus reception date in the first virus recognition information 13 exceeds a certain period, the data is counted. If there is virus information to be counted, go to Step 24. Ends the processing (Step 22). If there is a virus to be counted, the corresponding virus information is extracted from the virus information table 12 and temporarily stored in a storage area (not shown) (Step 24). Then, the vulnerability level determining means 16 is executed.
[0027]
FIG. 7 is a flowchart showing the processing of the vulnerability level determining means 16. The vulnerability level determining means 16 is executed when the virus infection information totaling means 15 has virus information to be totaled. Using the virus information stored in the virus infection information totalizing means Step 24, the number of virus mail sender reports is compared with the number of mail addresses stored by the virus mail sender (Step 30, Step 32). If it is determined that the number of addresses and the number of virus reports are the same, the virus infection information is reported from all the e-mail addresses described in the address book. 33 recognizes the virus and can judge that appropriate processing has been performed. Therefore, it is determined that there is no further spread of virus infection, and the level is defined as level 0 (Step 34).
[0028]
If the number of addresses and the number of virus reports are not the same, it means that some of the people who sent virus-infected e-mails have not recognized the virus, and the possibility of further virus infection has spread. Here, a threshold value is determined in advance to divide the degree of spread of the infection into other stages (here, a fixed numerical value A; A> 0). It is determined whether the value obtained by subtracting the number of viruses from the number of addresses exceeds A (Step 36). This operation is performed for each virus mail sender, and the level is determined for each.
[0029]
Here, the level 0, the level 1, and the level 2 are the degrees at which the respective mail addresses indicate the vulnerability of the terminal devices 31 to 33 that perform the mail receiving process to the computer virus. Level 0 is the lowest vulnerability level, and Level 2 is the highest vulnerability level. The level of each virus mail sender is not shown, but is temporarily stored in a storage area.
[0030]
When the level of each virus mail sender is determined, the transmission unit 17 is executed.
[0031]
FIG. 8 is a flowchart showing the processing of the transmission means 17. An e-mail is transmitted according to the level determined by the vulnerability level determining means 16.
[0032]
The level of each virus mail sender is checked, and if the level is 0, the transmission mail 1 shown in FIG. 9 is transmitted (Step 42). The transmission mail 2 shown in FIG. 10 is transmitted to the virus mail sender and the virus infected person other than the level 0 (Step 44). Here, the virus-infected person refers to a person who has not notified the virus infection with the mail address stored in the address book registered by the virus mail sender. It is supposed that virus-infected e-mails should have been sent to all e-mail addresses in the address book registered by the virus e-mail sender, and that virus e-mails have not been received and virus infection information has not been reported to the indication server 1. This means that they are infected with the virus and do not recognize the virus.
[0033]
Next, it is determined whether the level is 2 or not (Step 46).
The user who has registered the virus mail sender is searched from the address book 11, and the transmission mail 3 shown in FIG. 11 is transmitted to the user (Step 48).
[0034]
The outgoing mails 1 and 2 are mails for updating the virus definition of the terminal device to the latest version, and the outgoing mail 3 points out that there is a user with low recognition of virus infection in the address book registered by the user. ing. By receiving the outgoing mail 3, the user can work to delete his or her own mail address from the other party's address book in order to prevent the virus infected mail from coming to his or her own terminal.
[0035]
Although not shown, there is no problem if the transmission unit 17 deletes information related to the type of the virus that transmitted the outgoing mails 1 to 3 from the virus information table 12 and the virus initial recognition information 13.
[0036]
FIG. 9 shows an example of the outgoing mail 1. The outgoing mail 1 is a case where the virus infection information is sent from the person who sent the virus mail and all the mail addresses registered in the address book 11 to the indication server 1, and the person who sent the virus mail first To notify that no virus-infected e-mail has been sent and that the terminal itself will not send a virus e-mail if the virus definition is updated.
[0037]
FIG. 10 shows an example of the outgoing mail 2. The outgoing mail 2 is sent to the person who transmitted the virus mail and to the person who has received the virus mail and has not transmitted the virus infection information to the indication server 1 and may be infected with the virus. The contents shown in A are sent to the sender of the virus mail, and the contents shown in B are sent to the person who may be infected with the virus. For those who may be infected by virus B, write the e-mail address that sent the e-mail to xxx, so that the person who received this e-mail can identify from whom the e-mail came. If you have not opened the mail, you can take care not to open it.
[0038]
FIG. 11 shows an example of the outgoing mail 3. The outgoing mail 3 is sent to the user who has registered the virus mail sender in the address book 11, and notifies the person who sent the virus infected mail to send his / her mail from the virus mail sender address book. It is intended to prompt you to remove an address.
[0039]
Hereinafter, the flow of processing of the pointing server 1 and the terminal devices 31 to 33 will be described with reference to the drawings.
[0040]
When the mailers of the terminal devices 31 to 33 receive the e-mail, the e-mail attached to the e-mail or received by a virus removal program that recognizes a virus-infected e-mail that is independently running in the terminal device receives the e-mail. Check for infection. The virus removal program that has confirmed the virus-infected e-mail notifies the pointed server 1 of virus infection information after removing the virus.
[0041]
The indication server 1 receives the virus infection information by the receiving means 1, records the data in the virus information table 12 according to the flowchart of FIG. 5, and also records the virus first recognition information 13 in the case of a new virus.
[0042]
Assume that the address book 11, the virus information table 12, and the virus initial recognition information 13 are in the states shown in FIGS. 2, 3, and 4, respectively, and the virus total period is two days.
[0043]
The virus infection information totaling means 15 checks whether there is virus information to be totaled according to the processing flow of FIG. If the current date is August 22, 2002, the type of the virus aaa first received on August 20, 2002 from the virus initial recognition information 13 has passed the aggregation period of 2 days, and is therefore a target for aggregation. Become. Then, a virus type aaa is extracted from the virus information table 12 and temporarily stored in a storage area (not shown).
[0044]
Next, the vulnerability level determining means 16 determines the level of each virus mail sender according to the flowchart of FIG.
[0045]
When the virus sender is extracted from the data in the temporary storage area (not shown) shown in FIG. 2, ichiro @ xxx. com and keiko @ aaa. com. The level is determined for these two players.
[0046]
First, ichiro @ xxx. com level. From the address book 11, ichiro @ xxx. Since the number of e-mail addresses registered by com is 5 and the number of reported virus information is 5, the level is 0 because the number of addresses and the number of virus reports are the same.
[0047]
Next, keiko @ aaa. com level. Since the number of e-mail addresses registered in the address book 11 is 4, and the number of virus reports is 1, the level is not level 0. Next, when the fixed value A shown in Step 36 of FIG. 7 is 5, the value of keiko @ aaa. com is at level 1.
[0048]
Next, an e-mail corresponding to the level is transmitted by the transmission means 17 according to the flowchart shown in FIG.
[0049]
The level 0 ichiro @ xxx. com, the transmission mail 1 shown in FIG. 9 is transmitted. The level 1 keiko @ aaa. com, the outgoing mail 2 shown in FIG. 10A is transmitted, and keiko @ aaa. com, who is a virus infected person who has not reported a virus in the address book 11 registered, nene @ aaa. com, go @ bbb. com and sampei @ ccc. The transmission mail 2 shown in FIG.
[0050]
In this case, no outgoing mail 3 is sent because there is no virus mail sender corresponding to level 2.
[0051]
As described above, upon receiving the virus infection information from the terminal devices 31 to 33, the pointing server 1 stores the virus for a certain period of time, counts the virus, and points out the vulnerability of each user who transmitted the virus mail. By notifying the vulnerability to a third party, the importance of virus removal can be notified.
[0052]
In the present embodiment, the levels indicating the vulnerability are set to three levels of 0, 1, and 2. However, if the level is other than that, there is no problem if an outgoing mail corresponding to the level is prepared.
[0053]
(Appendix 1)
A method of collecting virus infection information from a plurality of terminal devices connected to a network and pointing out vulnerability to computer viruses for each user,
Receiving the virus infection information from the terminal device and storing it in a virus information table;
If the virus infection information is a new virus, storing the type and reception date of the virus in the virus initial recognition table;
After a lapse of a certain period from the reception date stored in the virus initial recognition table, extracting only the type of virus to be counted from the virus information table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Determining a level of vulnerability to computer viruses;
Sending, according to the level, an e-mail indicating a vulnerability to an e-mail sender who transmitted the virus type;
Computer virus vulnerability indication method characterized by having
(Appendix 2)
The transmitting step may include, among the mail addresses registered in the address book, a mail sender that has transmitted the type of the virus, sends an e-mail indicating a virus infection to a mail address that has not transmitted the virus infection information. Send
2. The computer virus vulnerability pointing method according to claim 2, further comprising:
(Appendix 3)
The transmitting step transmits an e-mail notifying an e-mail address that has transmitted the virus type to a user who has registered in the address book a mail sender that transmitted the virus type.
The computer virus vulnerability indication method according to claim 1, further comprising:
(Appendix 4)
A program for collecting virus infection information from a plurality of terminal devices connected to a network and pointing out vulnerability to computer viruses for each user,
On the server,
Receiving the virus infection information from the terminal device and storing it in a virus information table;
If the virus infection information is a new virus, storing the type and reception date of the virus in the virus initial recognition table;
After a lapse of a certain period from the reception date stored in the virus initial recognition table, extracting only the type of virus to be counted from the virus information table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Determining a level of vulnerability to computer viruses;
Sending, according to the level, an e-mail indicating a vulnerability to an e-mail sender who transmitted the virus type;
A computer virus vulnerability indication program characterized by having:
[0054]
(Appendix 5)
The transmitting step may include, among the mail addresses registered in the address book, a mail sender that has transmitted the type of the virus, sends an e-mail indicating a virus infection to a mail address that has not transmitted the virus infection information. Send
The computer virus vulnerability indication program according to claim 4, further comprising:
[0055]
(Appendix 6)
The transmitting step transmits an e-mail notifying an e-mail address that has transmitted the virus type to a user who has registered in the address book a mail sender that transmitted the virus type.
The computer virus vulnerability indication program according to claim 4, further comprising:
[0056]
(Appendix 7)
A computer virus vulnerability indicating server device for collecting virus infection information from a plurality of terminal devices connected to a network and indicating a vulnerability to a computer virus for each user,
Means for receiving the virus infection information from the terminal device and storing it in a virus information table;
When the virus infection information is a new virus, means for storing the virus type and reception date in the virus initial recognition table;
Means for extracting only the type of virus to be counted from the virus information table after a lapse of a certain period from the reception date stored in the virus initial recognition table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Means for determining a level of vulnerability to computer viruses;
Means for transmitting an e-mail indicating a vulnerability to an e-mail sender who has transmitted the type of the virus according to the level;
A computer virus vulnerability indication server device characterized by having:
[0057]
(Appendix 8)
The transmitting means transmits an e-mail indicating a virus infection to an e-mail address to which an e-mail sender who has transmitted the type of the virus has not transmitted virus infection information among e-mail addresses registered in the address book. Send
7. The computer virus vulnerability indication server device according to claim 7, further comprising:
[0058]
(Appendix 9)
The transmitting means transmits an e-mail notifying the e-mail address from which the type of virus has been transmitted to a user who has registered the e-mail sender who transmitted the type of virus in the address book.
7. The computer virus vulnerability indication server device according to claim 7, further comprising:
[0059]
【The invention's effect】
As is apparent from the above description, according to the present invention, the virus infection information from the terminal device is stored in the pointing server, and after a certain period of time, the information is pointed out, whereby the vulnerability to the computer virus is pointed out for each user. Pointing out vulnerabilities can encourage updating virus definitions. In addition, people who have registered a high virus infection level in their e-mail addresses can be notified that there is a person who has low virus recognition, thereby enhancing their own security or address book of the other party. You can also point out that you want to delete your email address from.
[Brief description of the drawings]
FIG. 1 is an overall view of an embodiment of the present invention.
FIG. 2 is a configuration diagram of an address book 11;
FIG. 3 is a configuration diagram of a virus information table 12;
FIG. 4 is a configuration diagram of virus first recognition information 13;
FIG. 5 is a flowchart of a receiving unit 14;
FIG. 6 is a flowchart of the virus infection information tallying means 15;
FIG. 7 is a flowchart of vulnerability level determination means 16;
FIG. 8 is a flowchart of a transmission unit 17;
FIG. 9: Outgoing mail 1
FIG. 10: Outgoing mail 2
FIG. 11: Outgoing mail 3
[Explanation of symbols]
1: Pointing server
4: Network
11: Address book
12: Virus information table
13: First virus recognition information
14: Receiving means
15: Virus infection information counting means
16: Vulnerability level determination means
17: Transmission means
31: Terminal device
32: Terminal device
33: Terminal device

Claims (5)

A method of collecting virus infection information from a plurality of terminal devices connected to a network and pointing out vulnerability to computer viruses for each user,
Receiving the virus infection information from the terminal device and storing it in a virus information table;
If the virus infection information is a new virus, storing the type and reception date of the virus in the virus initial recognition table;
After a lapse of a certain period from the reception date stored in the virus initial recognition table, extracting only the type of virus to be counted from the virus information table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Determining a level of vulnerability to computer viruses;
Transmitting an e-mail indicating a vulnerability to an e-mail sender who has transmitted the type of the virus according to the level. The transmitting step may include, among the mail addresses registered in the address book, a mail sender that has transmitted the type of the virus, sends an e-mail indicating a virus infection to a mail address that has not transmitted the virus infection information. 2. The computer virus vulnerability indication method according to claim 1, further comprising: transmitting a computer virus vulnerability. The transmitting step further includes transmitting an e-mail notifying an e-mail address from which the type of virus is transmitted to a user who has registered an e-mail sender who transmitted the type of virus in the address book. The computer virus vulnerability indication method according to claim 1, characterized in that: A program for collecting virus infection information from a plurality of terminal devices connected to a network and pointing out vulnerability to computer viruses for each user,
On the server,
Receiving the virus infection information from the terminal device and storing it in a virus information table;
If the virus infection information is a new virus, storing the type and reception date of the virus in the virus initial recognition table;
After a lapse of a certain period from the reception date stored in the virus initial recognition table, extracting only the type of virus to be counted from the virus information table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Determining a level of vulnerability to computer viruses;
Transmitting an e-mail indicating a vulnerability to an e-mail sender who has transmitted the type of the virus according to the level. A computer virus vulnerability indicating server device for collecting virus infection information from a plurality of terminal devices connected to a network and indicating a vulnerability to a computer virus for each user,
Means for receiving the virus infection information from the terminal device and storing it in a virus information table;
When the virus infection information is a new virus, means for storing the virus type and reception date in the virus initial recognition table;
Means for extracting only the type of virus to be counted from the virus information table after a lapse of a certain period from the reception date stored in the virus initial recognition table,
Compare the number of e-mail addresses in the address book that stores the e-mail addresses registered by the user for each e-mail sender who transmitted the extracted virus type with the number of virus reports stored in the virus information table. Means for determining a level of vulnerability to computer viruses;
Means for transmitting an e-mail indicating a vulnerability to a mail sender who has transmitted the type of the virus according to the level.

Images