Abstract:
A control execution apparatus is provided with a communication unit that makes an inquiry concerning a packet processing method with respect to a predetermined control instruction apparatus, and a packet processing unit that processes packets based on an instruction from the control instruction apparatus. The control instruction apparatus is provided with a communication history management unit that manages communication history between nodes via the control execution apparatus, a node state determination unit that determines, making reference to the communication history of the communication history management unit, whether or not a node that is a transmission source or a transmission destination of the packet for which an inquiry concerning a processing method was received, is on a side that provides a service to another node, and a control instruction unit that prohibits, when at least the node is on the side that provides a service to another node, new communication from the node in question to the other node.
Abstract:
A display apparatus according to an exemplary aspect of the invention includes a display unit which displays information on a system, which includes a plurality of system resources and one or more than one networks connecting the system resources, on a screen of a display device, wherein the display unit displays system resource identifiers which identify the system resources respectively, and network identifiers which identify the networks respectively, and furthermore displays a state of connection between the system resource and the network at an area determined on the basis of the displayed system resource identifier and the displayed network identifier, on the screen.
Abstract:
In order to appropriately manage address information that may be a target of access control, a management apparatus includes an address information obtain section configured to obtain address information as a management target for access control via a communication network, and a setting section configured to set, for the address information, an effective management period of the management target for the access control, based on information related to the address information.
Abstract:
Action instruction information includes action procedure information. The action procedure information defines an action procedure of a person including a plurality of action steps. Log information is information with respect to access to an object to be monitored and is acquired from a security apparatus for monitoring the object to be monitored. An action trace unit traces advance of the action step in the action procedure based on the action instruction information and the log information. A trace display unit associates the advance of the action step with access to the security apparatus based on the log information and the advance of the action step traced by the action trace unit and displays them on a display device.
Abstract:
Action instruction information includes action procedure information. The action procedure information defines an action procedure of a person including a plurality of action steps. Log information is information with respect to access to an object to be monitored and is acquired from a security apparatus for monitoring the object to be monitored. An action trace unit traces advance of the action step in the action procedure based on the action instruction information and the log information. A trace display unit associates the advance of the action step with access to the security apparatus based on the log information and the advance of the action step traced by the action trace unit and displays them on a display device.
Abstract:
A network management apparatus that connects to a terminal by way of a communication apparatus, includes: a legitimate information generation unit configured to generate legitimate identification information that is identification information to identify the terminal on a network that the network management apparatus manages, the legitimate identification information being managed as legitimate information by the network management apparatus; a fake information generation unit configured to generate fake identification information that is different from the legitimate identification information and that cannot be used as it is for communication with another terminal; a management unit configured to manage the legitimate identification information and the fake identification information in association with each other; and a registration unit configured to register the fake identification information to the terminal.