Abstract:
A first information processing apparatus (2000) determines an alternative representation (20) of an event sequence represented by a plurality of event histories (12), by use of dictionary data (30). The first information processing apparatus (2000) outputs information including the determined alternative representation (20). The dictionary data (30) indicate an event sequence and an alternative representation (20) relating to the event sequence in association with each other.
Abstract:
Based on a normal model, it is detected whether or not an event signal of a computer system is anomalous. In parallel with the normal-model-based anomaly detection, it is detected based on a rule whether or not the event signal is anomalous. Then, a final anomaly detection result is generated by performing comprehensive determination based on detection results of the normal-model-based anomaly detection and the rule-based anomaly detection.
Abstract:
An information processing apparatus generates a graph that represents an action of a program. On the graph, an edge represents action contents of a process in an event. Further, two nodes connected by the edge respectively represent a subject and an object of the event. The information processing apparatus outputs the generated graph. Further, the information processing apparatus also alters the generated graph. When an index value of an event satisfies a first predetermined condition which index value is based on the number of occurrences or the frequency of occurrences of the event, the information processing apparatus alters the graph with respect to an edge representing the event.
Abstract:
The purpose of the present invention is to provide a software analysis device which efficiently analyzes a computer environment in which software is capable of running. The software analysis system determines an order of detection devices, generates order information representing the order, and calculate a progression degree of abnormality based on how degree a predetermined order include the order in the order information.
Abstract:
The present invention provides an information processing device that outputs information including the data transmission relationship between elements constituting an information processing system, the information indicating the state of the information processing system. The information processing device includes a graphing means for generating a relationship graph based on an event log indicating the behavior of each of a plurality of processes operating in the system, the relationship graph having the processes as the vertices thereof and having the data transmission relationship between the vertices as the sides thereof; and a graph output means for outputting the generated relationship graph.
Abstract:
Comfortability can be visually displayed for a user in real time while power consumption is controlled. A display device communicates to/from a power control device for controlling power of a power consumption system including a plurality of apparatus. An input unit specifies a desired set value for each of the plurality of apparatus or a power consumption system including the plurality of apparatus. A display unit displays a display content corresponding to a degree of divergence in real time when an amount of upper limit power for the entire power consumption system including the plurality of apparatus is set, the degree of divergence being calculated based on a comparison between an actual set value for the plurality of apparatus having an amount of power being subjected to demand control based on an evaluation function set for the plurality of apparatus and the desired set value specified through the input unit.
Abstract:
A controller, for controlling a switch that forwards a message, comprises: a holding unit that, upon receipt of a notification including a tag from a second node that subscribes to a message delivered with the tag from a first node, associates and holds the tag and a virtual address, and associates and holds the virtual address and a physical address of the second node that transmits the notification; a setting unit that sets in the switch the association between the virtual address and the physical address; and a tag resolution unit that, upon receipt of an inquiry about the virtual address associated with the tag from the first node, responds the virtual address.