COLLECTING DEVICE, COLLECTING METHOD, AND COLLECTING PROGRAM
A collection device includes a memory and processing circuitry configured to collect postings related to a security threat from postings of a social networking service (SNS) using a security keyword that is a keyword related to the security threat, extract a co-occurrence keyword that is a keyword co-occurring beyond a predetermined frequency from the collected postings related to the security threat, and collect a posting including the co-occurrence keyword and an image associated with the posting from the postings of the SNS.
1 . A collection device comprising:
a memory; and
processing circuitry configured to:
collect postings related to a security threat from postings of a social networking service (SNS) using a security keyword that is a keyword related to the security threat:
extract a co-occurrence keyword that is a keyword co-occurring beyond a predetermined frequency from the collected postings related to the security threat; and
collect a posting including the co-occurrence keyword and an image associated with the posting from the postings of the SNS.
2 . The collection device according to claim 1 ,
wherein the processing circuitry is further configured to select a posting that is likely to be a posting related to the security threat from the postings based on a URL or a domain name extracted from text and an image of the posting collected and output the posting.
3 . The collection device according to claim 2 ,
wherein the processing circuitry is further configured to select the posting as a posting that is likely to be the posting related to the security threat when the URL or the domain name extracted from the text and the image of the posting collected is not included in a list of URLs or domain names of legitimate websites or when a usage period of the domain name is less than a predetermined period.
4 . The collection device according to claim 1 ,
wherein the processing circuitry is further configured to collect the posting for each predetermined period, and
extract the co-occurrence keyword from the postings collected for the predetermined period.
5 . A collection method performed by a collection device, the collection method comprising:
collecting postings related to a security threat from postings of a social networking service (SNS) using a security keyword that is a keyword related to the security threat;
extracting a co-occurrence keyword that is a keyword co-occurring beyond a predetermined frequency from the collected postings related to the security threat; and
collecting a text of a posting including the co-occurrence keyword and an image associated with the posting from the postings of the SNS.
6 . A non-transitory computer-readable recording medium storing therein a collection program that causes a computer to execute a process comprising:
collecting postings related to a security threat from postings of a social networking service (SNS) using a security keyword that is a keyword related to the security threat;
extracting a co-occurrence keyword that is a keyword co-occurring beyond a predetermined frequency from the collected postings related to the security threat; and
collecting a posting including the co-occurrence keyword and an image associated with the posting from the postings of the SNS.