Abstract:
An information determination apparatus includes a first storage unit configured to store stream data pieces obtained in time sequence; a first determining unit configured to determine whether the number of stream data pieces stored in the first storage unit is at least equal to a predetermined value; and a second determining unit configured to determine, when the number of the stream data pieces stored in the first storage unit is equal to or greater than the predetermined value, whether an individual can be identified based on a dataset composed of a plurality of the stream data pieces stored in the first storage unit, and output the dataset used for the determination and the determination result.
Abstract:
In a model optimization device for a parameter estimation concerning optical communications, A model acquisition acquires a trained model. A data acquisition means acquires data from a terminal device. A model update means performs a model update of the trained model step by step to generate an updated model based on the data. A model output means outputs to an output destination device corresponding to the terminal device.
Abstract:
In order to provide an evaluation apparatus that appropriately evaluates risk of a source code changing over time, an evaluation apparatus includes a generating unit and an output unit. The generating unit generates an evaluation related to risk of a first library described in a source code. The output unit calculates the degree of risk of the fist library, based on at least the generated evaluation, calculates a risk value indicating risk inherent in the source code, based on the calculated degree of risk, and also outputs time-series data of the calculated risk value.
Abstract:
An anomaly assessment device includes: a storage storing a correspondence relation between a type of a device, and a transition state candidate group in a stable state of the device of the type; at least one memory storing instructions; and at least one processor configured to execute the instructions to: acquire event information of a monitoring target device; identify a transition state associated with the event information acquired of the monitoring target device; and assesse normality/anomaly of the monitoring target device, based on the transition state candidate group associated with a type of the monitoring target device in the stored correspondence relation, and the identified transition state.
Abstract:
The purpose of the present invention is to provide a technology which assists a verifying party in ascertaining an anomaly in an event of which notification has been made. Provided is an assistance device, comprising: an acquisition unit which acquires as an associated event, from among events which take place among a plurality of elements, and with respect to elements which have been associated with an event which has been detected as an anomalous event, an event other than the anomalous event which has been associated with the elements; and a generating unit which, on the basis of the anomalous event and the associated event, generates a relational graph in which the elements are vertices, the relations among the elements are edges, the anomalous event and the associated event are respectively represented, and the associated event is displayed in a display screen in a different manner from the manner in which the anomalous event is displayed.
Abstract:
Provided is, for example, a display control apparatus that generates display information for specifying an event occurred in an information processing system easily. The display control apparatus comprising displays, on a display apparatus, information representing an information processing apparatus and information representing a device in accordance with a display mode of arranging the pieces of information around a first area, displays, on the display apparatus, information indicating that a communication is executed between a plurality of the information processing apparatuses in accordance with a display mode of linking information representing the plurality of information processing apparatuses inside the first area, and displays, on the display apparatus, information indicating that processing is executed between the information processing apparatus and the device in accordance with a display mode of linking information representing the information processing apparatus and information representing the device inside the first area.
Abstract:
The present invention provides an information processing system for more appropriately classifying elements that constitute an information processing device or the like. This information processing system is provided with: a means that, on the basis of information indicating the relationship between a plurality of elements that constitute a system, acquires, for first elements to be classified, a set of second elements capable of arriving at the first elements via a relationship of arbitrary numbers; and a means that, on the basis of the set corresponding to the first elements, classifies each of the first elements in any of a plurality of roles.
Abstract:
Disclosed are an event estimation device, etc., which are capable of estimating with high precision whether a communication is singular. Provided is an event estimation device (101), comprising: a model creation unit (102) which creates a model which, on the basis of a frequency with which a communication is executed, computes that a degree of singularity which represents the extent to which the communication is singular is high if the frequency is low, and computes that the degree of singularity is low if the frequency is high; and an estimation unit (103) which computes the degree of singularity by applying the model to the frequency relating to a given communication, and if the computed degree of singularity satisfies a standard, estimates that the given communication is singular, and if the computed degree of singularity does not satisfy the standard, estimates that the given communication is not singular.
Abstract:
An information processing apparatus includes: a reach-extent extraction unit configured to extract, with use of a relationship graph representing relationships between a plurality of elements included in a system and location information that indicates, on the relationship graph, a plurality of locations in the system where anomalies have been detected, paths in the relationship graph as being reach extents, the path including a set of the elements that are directly or indirectly related to each of the plurality of locations as a source; and a shared-extent extraction unit configured to extract an influence process of an anomaly by extracting an extent that is shared in at least a prescribed number of paths among paths in the relationship graph that have been extracted as the reach extents.