Panasonic Corporation

Matsushita Electric Industrial Co., Ltd.

Panasonic Intellectual Property Management Co., Ltd.

Panasonic Automotive Systems Co., Ltd.

Kabushiki Kaisha Toshiba

Kaoru Yokota

Motoji Ohmori

Masao Nonaka

Yuichi Futa

Toshihisa Nakano

Natsume Matsuzaki

Makoto Tatebayashi

Masaya Miyazaki

Masaya Yamamoto

Kaoru Murase

Manabu Maeda

Senichi Onoda

Shunji Harada

Yuishi Torisaki

Jun Anzai

Shingo Hasegawa

Shuji Isobe

Hiroki Shizuya

Masao Sakai

Eisuke Koizumi

Takayuki Fujii

Yoshikatsu Ito

Yuji Unagami

Yusuke Nemoto

Atsushi Saso

Jun Takahashi

Akihito Takeuchi

Kou Ishii

Marika Minagawa

Makoto Usui

Hideshi Ishihara

Makoto Fujiwara

Masaki Yoshida

Masato Tanabe

Kenji Hisatomi

Fumihiko Sano

Masami Yamamichi, Legal Representative

Shogo Hamasaki

Shoichiro Sekiya

Satomi Yamamichi

Keiko Yamamichi

Akihito Katsura

Hideki Matsushima

Yoshihisa Fukushima

Tomoyuki Haga

Shinichi Kawamura

Hisashi Takayama

Taichi Sato

Mizuho Sakakibara

Tetsuya Inoue

Takashi Yumiba

Tsutomu Sekibe

Mitsuhiro Inoue

Tohru Wakabayashi

Minehisa Nagata

Yuusaku Ohta

Yosuke Tajika

Masato Yamamichi

Kazuhisa Watanabe

Atsuko Miyaji

Tohru Nakahara

Satomi Yamamichi, Legal Representative

Keiko Yamamichi, Legal Representative

Akio Higashi

Koichi Morioka

Daisuke Kobayashi

Kazuhiro Aizu

Naoki Endo

Kento Tamura

Naoaki Yamamoto

Hiromichi Nishiyama

Hirohito Kitatora

Takashi Muroyama

Shuichi Ohki

Akinobu Ito

Motoji Oomori

Masami Yamamichi

Takumaru Nagai

Masato (deceased) Yamamichi

An attack path generation method according to the present disclosure is an attack path generation method executed by acquiring logs in devices connected to a network including at least one of a branch and a merge where each device has an attack detection function. The method includes: generating a primary-attack path without the branch and merge based on the acquired logs; generating a secondary-attack path branching from the primary-attack path or merging with the primary-attack path based on the logs; and outputting the generated primary-attack path and secondary-attack path to a device that performs attack-determination. The secondary-attack path is an attack path including an upstream or downstream device in which an event assumed to be an attack occurs within a certain period of time from an event assumed to be an attack on a device included in the primary-attack path and connected to the network merging/branching point.

Attack path generation method and attack path generation device

An integrated monitoring apparatus is mounted on a vehicle. An evidence log collection unit that of the integrated monitoring apparatus starts collecting a log from an ECU mounted on the vehicle when a predetermined log collection start condition is met. A determination unit of the integrated monitoring apparatus determines whether the ECU is operating normally based on the log of the ECU collected. When the ECU is determined to be operating normally, the log collection unit of the integrated monitoring apparatus stops collecting the log from the ECU.

Monitoring apparatus and monitoring method

An information output device that outputs monitoring information including monitoring logs generated by monitoring devices, and includes: memory; and a processor coupled to the memory. The processor, by using the memory, operates as: a receiver that sequentially receives monitoring logs, each including a monitoring result indicating whether a monitoring target has an anomaly; a manager that manages, based on the monitoring logs, a first state that is a state of anomaly occurrence in a monitoring target of each of the monitoring devices; a storage that stores path information indicating transmission paths, each indicated by one or more devices through which a monitoring log transmitted by a source passes; a determiner that determines the reliability level of each received monitoring log based on a first transmission path of the monitoring log and the first state; and an outputter that outputs, based on the reliability level, monitoring information including the monitoring log.

Information output device, information output method, and recording medium

A server includes: an obtainer that obtains items of information including an item of frame information regarding a communication frame transmitted on an in-vehicle network of each of a plurality of vehicles; and a generator that generates an integrated rule that is suitable for the items of information obtained by the obtainer and is for anomaly detection processing in the in-vehicle network of one of the vehicles; and a provider that outputs the integrated rule generated by the generator. For example, the obtainer obtains condition information indicating a condition pertaining to each of the plurality of vehicles at a time when the communication frame is transmitted on the in-vehicle network, and the generator generates the integrated rule using the items of frame information associated with the condition information.

Information processing device and information processing method

An information processing device includes: a log transmitter that transmits a monitoring log generated in the information processing device to an SOC (); an HIDS monitor that verifies an integrity of the log transmitter; and a monitoring ROT that verifies an integrity of the HIDS monitor, and repeatedly outputs a heartbeat signal to the log transmitter. Each time the heartbeat signal is output from the monitoring ROT, the log transmitter transmits the heartbeat signal to the SOC. When the integrity of the log transmitter is anomalous, the HIDS monitor outputs, to the monitoring RoT, an output stop request signal for requesting the monitoring ROT to stop outputting the heartbeat signal. The monitoring RoT stops outputting the heartbeat signal based on the output stop request signal.

Information processing device and control method for information processing device

An anomaly detection device is a device for detecting an anomaly in a mobile body and includes: a type determiner that determines a type of an anomaly detected; a type change determiner that determines whether or not a change has occurred between a type of an anomaly detected last time and a type of an anomaly detected this time; and an anomaly detection log transmitter that transmits an anomaly detection log related to the anomaly detected this time when the change has occurred, and does not transmit the anomaly detection log related to the anomaly detected this time when the change has not occurred.

Anomaly detection device and anomaly detection method

An information processing device includes: an obtainer that obtains, from an anomaly detection sensor that detects an anomaly in a network, a detection log related to the anomaly in the network and the detection time of the anomaly indicated in the detection log; an occurrence time determiner that determines the occurrence time of an attack on the network based on the obtained detection time, and records the determined occurrence time; and an end time determiner that determines the expected end time of the attack on the network based on the obtained detection log, and records the determined expected end time.

An information processing device that detects an anomaly in an in-vehicle network provided in a vehicle includes: a local rule storage in which at least an individual rule which is a rule generated for the vehicle is stored; a global rule storage in which an integrated rule which is a rule generated for a plurality of vehicles including the vehicle is stored; and a processing unit that performs, using a rule stored in at least one of the local rule storage or the global rule storage, an anomaly detection process on a frame transmitted on the in-vehicle network.

An electronic control device includes: an acquisition unit that acquires state information indicating at least one of a state of a movable body and a state of an external environment in which the movable body is moving, and a control instruction indicating at least one of a steering control instruction for steering the movable body and an acceleration control instruction for adjusting acceleration of the movable body; and a determining unit that determines whether the control instruction is a false control instruction based on the at least one state indicated by the state information acquired and control indicated by the control instruction acquired.

Electronic control device, recording medium, and gateway device

An electronic control apparatus includes: an obtaining unit configured to obtain data transmitted via a network in a system; and a judging unit configured to judge presence or absence of an anomaly in the data obtained by the obtaining unit, based on a transmission state of the data. The judging unit is configured to judge that an anomaly is present in the data, when the transmission state of the data is a transmission stopped state.

Electronic control apparatus, monitoring method, recording medium, and gateway apparatus

An electronic control unit includes: a first determination unit which determines whether a message received is an address claim message; a second determination unit which determines, when it is determined that the message received is an address claim message, whether a device name included in the address claim message received is a predetermined device name; and a third determination unit which performs a predefined determination process, when it is determined that the device name included in the address claim message received is the predetermined device name, and determine whether the address claim message received is an unauthorized message according to a result of the predefined determination process.

Electronic control unit, electronic control system, and recording medium

A master control device is communicatively coupled to a first slave control device and a second slave control device via a first network and a second network, respectively. The master control device provides output data to the first slave control device based on input data received from the second slave control device. A monitoring apparatus which monitors an operation of the master control device stores determination data indicating a correspondence relationship between the input data and the output data, obtains the input data provided to the second network by the second slave control device and the output data provided to the first slave control device via the first network, and determines a presence or an absence of an anomaly in the operation of the master control device by determining whether the input data and the output data correspond to the determination data.

Monitoring apparatus, monitoring method, and program

An information processing device includes: a first communication unit which transmits and receives communication data through a network connected to a first GW, a second GW, and at least one electronic control unit; a monitoring unit which determines whether the communication data is normal; and a notification unit which transmits, at least to the second GW, a notification that brings the network to a state in which one of a transfer function of the first GW and a transfer function of the second GW gateway is active and the other one of the transfer functions is inactive, when the monitoring unit does not determine that the communication data is normal.

Information processing device, information processing system, information processing method, and information processing program

An information processing device is provided. A first communication unit transmits and receives communication data through a network. The network is connected to a first gateway, a second gateway, and at least one electronic control unit. A monitoring unit determines whether the communication data is normal. A notification unit transmits, at least to the second gateway, a notification that brings the network to a state in which one of a transfer function of the first gateway and a transfer function of the second gateway is active and the other one of the transfer functions is inactive, when the monitoring unit determines that the communication data is not normal.

To aim provide a software update apparatus including an install module group composed of a plurality of install modules. Each of the install modules has a function of receiving, from an external server, a replacement protection control module to be used for updating a protection control module having a function of verifying whether a predetermined application has been tampered with. Each of the install modules simultaneously running is verified by at least another one of the install modules simultaneously running, as to whether the install module has a possibility of performing malicious operations. If any of the install modules is verified as having the possibility of performing the malicious operations, any another one of the install modules that is verified as not having the possibility revokes the any install module verified as having the possibility.

Software updating apparatus, software updating system, invalidation method, and invalidation program

Growing community of inventors

Hyogo, Japan

Kaoru Yokota