A monitoring device and the like are provided which are capable of detecting an attribute change in a suspicious object that cannot be determined from the behavior of the object. An associating unit associates, among a plurality of objects detected from time-series image data, identical objects with one another. An attribute change detecting unit detects from the time-series image data a change in an attribute of at least one of the identical objects and an attendant item. A suspicious object detecting unit detects a suspicious object on the basis of the change in attribute.