-
公开(公告)号：US20240146757A1
公开(公告)日：2024-05-02
申请号：US18281230
申请日：2021-03-19
Applicant: NEC Corporation
Inventor： Kazuhiko lsoyama , Junpei Kamimura , Yoshiaki Sakae
IPC: H04L9/40
CPC classification number: H04L63/1433 , H04L63/0209 , H04L63/20
Abstract: It is determined whether to involve the security risk based on the data flow in the system to be analyzed. An analysis apparatus 1A a historical information collecting unit 220A configured to collect historical information on an operational history for a program executed in a system to be analyzed, an information adding unit 230 configured to add to the historical information, external information obtained from an information resource other than an information processing apparatus that executes the program, and a risk determining unit 180A configured to perform a risk determining processing for determining based on preset determining condition, whether to involve security risk in the historical information to which the external information is added.
-
Patent Agency Ranking
公开(公告)号：US11250029B2
公开(公告)日：2022-02-15
申请号：US15521214
申请日：2015-10-28
Applicant: NEC Corporation
Inventor： Takashi Nomura , Koji Kida , Kazuhiko Isoyama , Junpei Kamimura , Yoshiaki Sakae , Yuji Kobayashi , Etsuko Ichihara
IPC: G06F16/28
Abstract: The present invention provides an information processing system for more appropriately classifying elements that constitute an information processing device or the like. This information processing system is provided with: a means that, on the basis of information indicating the relationship between a plurality of elements that constitute a system, acquires, for first elements to be classified, a set of second elements capable of arriving at the first elements via a relationship of arbitrary numbers; and a means that, on the basis of the set corresponding to the first elements, classifies each of the first elements in any of a plurality of roles.
-
公开(公告)号：US10860406B2
公开(公告)日：2020-12-08
申请号：US15122602
申请日：2015-03-18
Applicant: NEC Corporation
Inventor： Takashi Nomura , Koji Kida , Junpei Kamimura , Yoshiaki Sakae , Etsuko Katsuda , Kazuhiko Isoyama , Kentaro Yamasaki , Yuji Kobayashi
Abstract: The present invention provides an information processing device that outputs information including the data transmission relationship between elements constituting an information processing system, the information indicating the state of the information processing system. The information processing device includes a graphing means for generating a relationship graph based on an event log indicating the behavior of each of a plurality of processes operating in the system, the relationship graph having the processes as the vertices thereof and having the data transmission relationship between the vertices as the sides thereof; and a graph output means for outputting the generated relationship graph.
-
14.发明申请公开(公告)号：US20240419807A1
公开(公告)日：2024-12-19
申请号：US18702865
申请日：2021-10-29
Applicant: NEC Corporation
Inventor： Junpei Kamimura , Kazuhiko Isoyama
IPC: G06F21/57
Abstract: A security analysis apparatus includes a determination unit. The determination unit searches for information described in a data flow diagram of a computer system to be analyzed, using a search query corresponding to an analysis rule for use in analysis, and determines a relationship between the data flow diagram and the analysis rule based on retrieved information.
-
公开(公告)号：US11372839B2
公开(公告)日：2022-06-28
申请号：US15779580
申请日：2016-12-01
Applicant: NEC Corporation
Inventor： Junpei Kamimura , Koji Kida , Kazuhiko Isoyama , Yuji Kobayashi , Hiroki Tagato , Etsuko Ichihara , Yoshiaki Sakae
IPC: G06F16/23 , G06F16/901
Abstract: The purpose of the present invention is to provide a technology which assists a verifying party in ascertaining an anomaly in an event of which notification has been made. Provided is an assistance device, comprising: an acquisition unit which acquires as an associated event, from among events which take place among a plurality of elements, and with respect to elements which have been associated with an event which has been detected as an anomalous event, an event other than the anomalous event which has been associated with the elements; and a generating unit which, on the basis of the anomalous event and the associated event, generates a relational graph in which the elements are vertices, the relations among the elements are edges, the anomalous event and the associated event are respectively represented, and the associated event is displayed in a display screen in a different manner from the manner in which the anomalous event is displayed.
-
公开(公告)号：US10887331B2
公开(公告)日：2021-01-05
申请号：US15126920
申请日：2014-06-17
Applicant: NEC Corporation
Inventor： Takashi Nomura , Koji Kida , Junpei Kamimura , Yoshiaki Sakae , Etsuko Katsuda , Kazuhiko Isoyama , Kentaro Yamasaki , Yuji Kobayashi
Abstract: An information processing apparatus includes: a reach-extent extraction unit configured to extract, with use of a relationship graph representing relationships between a plurality of elements included in a system and location information that indicates, on the relationship graph, a plurality of locations in the system where anomalies have been detected, paths in the relationship graph as being reach extents, the path including a set of the elements that are directly or indirectly related to each of the plurality of locations as a source; and a shared-extent extraction unit configured to extract an influence process of an anomaly by extracting an extent that is shared in at least a prescribed number of paths among paths in the relationship graph that have been extracted as the reach extents.
-
-
-
-
-
Search Results
16
records
(took 0.013 seconds)
