FILE CONFIRMATION DEVICE, FILE CONFIRMATION METHOD, AND FILE CONFIRMATION PROGRAM
A device acquires a file path of determination target equipment that is a determination target of file integrity, generates a concealment path for digesting the acquired file path for each file path, generates a concealment determination reference in which the generated concealment path and a hash value obtained by digesting file data stored in the determination target equipment are listed in association with each other, generates a concealment list by associating the file path stored in the determination target equipment with the generated concealment path, generates a determination reference by associating the file path with a hash value obtained by digesting the file data using the generated concealment determination reference and the generated concealment list, and calculates a hash value for each piece of the file data in the determination target equipment and determines file integrity based on the hash value and a hash value included in the determination reference.
1 . A file confirmation device comprising:
a memory; and
a processor coupled to the memory and configured to perform operations comprising:
acquiring a file path of determination target equipment that is a determination target of file integrity;
generating a concealment path for digesting the acquired file path for each file path;
generating a concealment determination reference in which the generated concealment path and a hash value obtained by digesting file data stored in the determination target equipment are listed in association with each other;
generating a concealment list in which the file path stored in the determination target equipment and the generated concealment path are associated and listed;
generating a determination reference by associating the file path with a hash value obtained by digesting the file data using the generated concealment determination reference and the generated concealment list;
calculating a hash value for each piece of the file data in the determination target equipment; and
determining file integrity based on the hash value and a hash value included in the generated determination reference.
2 . The file confirmation device of claim 1 , wherein generating a concealment path for digesting the acquired file path for each file path includes:
setting a digest value generation condition under a condition for generating the digest value including a condition of an algorithm for obtaining the digest value to be the concealment path, a condition of the number of times of repetition of the digest, and a condition of a character string to be given to the file path when performing the digest, and;
calculating the digest value of each file path using the digest value generation condition.
3 . The file confirmation device of claim 1 , wherein generating a determination reference includes:
collating the concealment path included in the concealment determination reference with the concealment path included in the concealment list;
acquiring, in a case where there is the same concealment path, a hash value of the file data corresponding to the concealment path from the concealment determination reference;
acquiring a file path corresponding to the concealment path from the concealment list; and
associating the acquired hash value with the file path to generate the determination reference.
4 . A file confirmation method performed by a computer, the file confirmation method comprising:
acquiring a file path of determination target equipment that is a determination target of file integrity;
generating a concealment path for digesting the acquired file path for each file path;
generating a concealment determination reference in which the generated concealment path and a hash value obtained by digesting file data stored in the determination target equipment are listed in association with each other;
generating a concealment list by associating the file path stored in the determination target equipment with the generated concealment path;
generating a determination reference by associating the file path with a hash value obtained by digesting the file data using the generated concealment determination reference and the generated concealment list;
calculating a hash value for each piece of the file data in the determination target equipment; and determining file integrity based on the hash value and a hash value included in the generated determination reference.
5 . A non-transitory computer readable storage medium having a file confirmation program stored thereon that, when executed by a processor, causes the processor to perform operations comprising:
acquiring a file path of determination target equipment that is a determination target of file integrity;
generating a concealment path for digesting the acquired file path for each file path;
generating a concealment determination reference in which the generated concealment path and a hash value obtained by digesting file data stored in the determination target equipment are listed in association with each other;
generating a concealment list by associating the file path stored in the determination target equipment with the generated concealment path;
generating a determination reference by associating the file path with a hash value obtained by digesting the file data using the generated concealment determination reference and the generated concealment list;
calculating a hash value for each piece of the file data in the determination target equipment; and
determining file integrity based on the hash value and a hash value included in the generated determination reference.