Anomalous event confirmation assistance apparatus, anomalous event confirmation assistance meithod, and recording medium

    公开(公告)号:US11372839B2

    公开(公告)日:2022-06-28

    申请号:US15779580

    申请日:2016-12-01

    Abstract: The purpose of the present invention is to provide a technology which assists a verifying party in ascertaining an anomaly in an event of which notification has been made. Provided is an assistance device, comprising: an acquisition unit which acquires as an associated event, from among events which take place among a plurality of elements, and with respect to elements which have been associated with an event which has been detected as an anomalous event, an event other than the anomalous event which has been associated with the elements; and a generating unit which, on the basis of the anomalous event and the associated event, generates a relational graph in which the elements are vertices, the relations among the elements are edges, the anomalous event and the associated event are respectively represented, and the associated event is displayed in a display screen in a different manner from the manner in which the anomalous event is displayed.

    Information processing apparatus, control method, and program

    公开(公告)号:US11762713B2

    公开(公告)日:2023-09-19

    申请号:US17278371

    申请日:2018-09-28

    CPC classification number: G06F9/542

    Abstract: A first information processing apparatus (2000) determines an alternative representation (20) of an event sequence represented by a plurality of event histories (12), by use of dictionary data (30). The first information processing apparatus (2000) outputs information including the determined alternative representation (20). The dictionary data (30) indicate an event sequence and an alternative representation (20) relating to the event sequence in association with each other.

    Display control apparatus, display control method, and recording medium on which display control program is recorded

    公开(公告)号:US10949318B2

    公开(公告)日:2021-03-16

    申请号:US16061403

    申请日:2016-12-19

    Abstract: Provided is, for example, a display control apparatus that generates display information with which an event having occurred in an information processing system can be easily determined. This display control apparatus 101 comprises a display control unit 102 that, on the basis of device information indicating a device detected by a first information processing apparatus in an information processing system and communication information indicating communication executed between a second information processing apparatus in the information processing system and a third information processing apparatus in the information processing system: performs displaying on a display apparatus in a manner such that said device and said first information processing apparatus are associated with one another; and performs displaying on said display apparatus in a manner such that said second information processing apparatus and said third information processing apparatus are associated with one another.

    Display monitoring status of information processing devices

    公开(公告)号:US10474325B2

    公开(公告)日:2019-11-12

    申请号:US15509783

    申请日:2015-09-07

    Abstract: Disclosed are a display control device, etc., with which information is displayed according to a display mode having high visibility. Provided is a display control device (101), comprising: a first identification information creation unit (103) with which a plurality of communication bodies which are capable of communication are classified into a plurality of groups, said unit creating first identification information which represents at least a portion of the communication bodies which are included in one of the groups; a second identification information creation unit (104) which creates second identification information which collectively represents a group set which represents two or more groups of the plurality of groups; and a control unit (102) which, on the basis of the size of a region which is displayed in a display means, selects specified identification information from the first identification information or the second identification information, and controls to display, in the display means, device identification information which represents the communication bodies which are not included in the specified identification information and/or the group identification information which represents the groups which are not included in the specified identification information, along with the specified identification information.

    Warning apparatus, control method, and program

    公开(公告)号:US12001551B2

    公开(公告)日:2024-06-04

    申请号:US17439509

    申请日:2019-03-25

    CPC classification number: G06F21/56 G06F2221/034

    Abstract: A warning apparatus (2000) acquires first detected event information (10) representing, at a first abstraction level, an event set being a set of events having occurred in a target system. The warning apparatus (2000) generates second detected event information (20) from the first detected event information (10). The second detected event information (20) represents, at a second abstraction level, the event set represented by the first detected event information (10). The warning apparatus (2000) determines, from among a plurality of pieces of threat information (30) each representing a threat activity, the threat information (30) having a high degree of relevance to at least either of the first detected event information (10) and the second detected event information (20). The warning apparatus (2000) generates warning information (40) relating to a threat being occurring in the target system, based on the determined threat information (30) and a matching level being an abstraction level associated with the detected event information having a high degree of relevance to the threat information (30).

    Information processing apparatus, control method, and program

    公开(公告)号:US11449405B2

    公开(公告)日:2022-09-20

    申请号:US17041584

    申请日:2018-03-28

    Abstract: An information processing apparatus generates a graph that represents an action of a program. On the graph, an edge represents action contents of a process in an event. Further, two nodes connected by the edge respectively represent a subject and an object of the event. The information processing apparatus outputs the generated graph. Further, the information processing apparatus also alters the generated graph. When an index value of an event satisfies a first predetermined condition which index value is based on the number of occurrences or the frequency of occurrences of the event, the information processing apparatus alters the graph with respect to an edge representing the event.

Patent Agency Ranking