PROBLEM TO BE SOLVED: To enable learning what kind of processing was instructed without looking at the contents of a packet of data transmitted from a client terminal to a server terminal.SOLUTION: A processing determination device identifies an event from data peak time communication traffic, total communication traffic, peak occurrence time, the number of peak occurrence times, and information on dependency on another event transmitted for execution of processing from a client terminal 12 to a server terminal 16. These pieces of information can be learned even when transmitted data is encrypted. Therefore, without looking at contents of a packet of data transmitted from the client terminal 12 to the server terminal 16, the processing determination device can learn what kind of processing is instructed.
