Abstract:
The diagnosis device specifies a progression degree relating to a first information processing device for output information output by a first detection device at a first timing with respect to the first information processing device, based on device information indicates a progression degree that represents a degree to which the information processing device is abnormal with respect to the information processing device, determines whether or not information in which a first detection device identifier of the first detection device and the specified progression degree are associated with each other is included in progression-degree information in which a detection device identifier capable of identifying a detection device and the progression degree are associated with each other; and calculates the progression degree relating to the first information processing device according to the specified progression degree when the information is determined to be included in the progression-degree information.
Abstract:
Disclosed are a display device, etc. which display information in a display format that provides high visibility. The display device 201 comprises a display unit 202 which displays first nodes, each representing a different communication entity with communication capabilities, or second nodes, each representing a different group of a plurality of communication entities, around a first region, and which shows communications being carried out between first and second nodes, between a plurality of first nodes, or between a plurality of second nodes, in a display format in which the connections between these communicating nodes are indicated within the first region.
Abstract:
The purpose of the present invention is to provide a software analysis device which efficiently analyzes a computer environment in which software is capable of running. The software analysis system determines an order of detection devices, generates order information representing the order, and calculate a progression degree of abnormality based on how degree a predetermined order include the order in the order information.
Abstract:
The present invention provides an information processing device that outputs information including the data transmission relationship between elements constituting an information processing system, the information indicating the state of the information processing system. The information processing device includes a graphing means for generating a relationship graph based on an event log indicating the behavior of each of a plurality of processes operating in the system, the relationship graph having the processes as the vertices thereof and having the data transmission relationship between the vertices as the sides thereof; and a graph output means for outputting the generated relationship graph.
Abstract:
In order to determine whether or not there is a security risk, based on an actual data flow in a system to be analyzed, an analysis apparatus includes: a receiving unit configured to receive history information related to operation history of a program operating in a system to be analyzed; a generating unit configured to generate data flow information indicating a path of data exchanged in the system to be analyzed, based on the history information; and a risk determining unit configured to perform a risk determining process for determining whether or not there is a security risk in the data flow information, based on a preset determination condition.
Abstract:
Disclosed are a display control device, etc., with which information is displayed according to a display mode having high visibility. Provided is a display control device (101), comprising: a first identification information creation unit (103) with which a plurality of communication bodies which are capable of communication are classified into a plurality of groups, said unit creating first identification information which represents at least a portion of the communication bodies which are included in one of the groups; a second identification information creation unit (104) which creates second identification information which collectively represents a group set which represents two or more groups of the plurality of groups; and a control unit (102) which, on the basis of the size of a region which is displayed in a display means, selects specified identification information from the first identification information or the second identification information, and controls to display, in the display means, device identification information which represents the communication bodies which are not included in the specified identification information and/or the group identification information which represents the groups which are not included in the specified identification information, along with the specified identification information.
Abstract:
This vehicle guidance system carries out guidance of vehicles that are traveling on roads making up a road network, the vehicle guidance system being provided with: a flow detection unit that detects the flow of vehicles on each of the roads making up a road network, and generates flow information indicating the detection result; a storage unit that creates associations between the flow information for the roads which has been generated by the flow detection unit, and road-identifying information indicating the corresponding roads, and storing the information; a decision unit that, for each of the roads making up the road network, specifies a candidate road that is a road which vehicles flow from the road in question, acquires the flow information that is stored in association with the road-identifying information indicating the specified candidate road in question, and based on the acquired flow information, decides on a flow increase or decrease policy of vehicles on the candidate road; and a guidance unit that carries out guidance of the vehicles, in accordance with the decision by the decision unit.
Abstract:
A delay tolerant network is built with the use of a plurality of information transfer devices each of which includes: a communication unit to communicate to and from another device within a communication range that is connected to the information transfer device; and a storing unit to store and keeps collected notification information, and each of which holds delay tolerant communication by exchanging the collected and kept notification information with another device when the exchange becomes possible. Each information transfer device includes a control unit to exchange environment information with another information transfer device, and to execute deriving processing an assigned range that is assigned autonomously to its own information transfer device, based on the environment information that is kept by its own information transfer device, through a planarization search processing in which a value is evened out between its own information transfer device and other information transfer devices.
Abstract:
An analysis condition for security risk for a data flow in a system to be analyzed is automatically generated. An analysis condition generating apparatus lA generates from a natural sentence, using ontology in which a relationship is described between one or more nodes on a data flow graph that indicates a data flow in a system to be analyzed and one or more edges that indicate an event related to the nodes, graph structural data indicating the relationship between the nodes and the edges, and generates an analysis condition for analyzing security risk for the system to be analyzed based on the graph structural data.
Abstract:
A system monitoring apparatus comprising: a complementing unit that generates complemented node information by complementing, based on a complementing model trained using information collected in a testing system using a monitoring command and an agent, first node information collected in an operated system using the monitoring command; and
an estimating unit that estimates the probability of a link being present between nodes by inputting the complemented node information to a link estimating model trained using the information collected in the testing system using the monitoring command and the agent.