For example, defense rules such as the following description are each listed for lines: INTRUSION:(SRC:${SOURCE_IP_ADDRESS}, DST:*, PROC:DROP)???(1). [0160] The defense rule determination section 107 refers to the defense rule definition file line by line and extracts the formula (1) which is the defense rule corresponding to the ???INTRUSION??? category.