Nec Corporation

Juniper Networks, Inc.

Nec C Orporation

Kazuhiko Isoyama

Yoshiaki Sakae

Yuji Kobayashi

Etsuko Ichihara

Jun Nishioka

Junpei Kamimura

Koji Kida

Takashi Nomura

Toshiya Aramaki

Hiroki Tagato

Daisuke Kawasaki

Kentaro Yamasaki

Yuuichi Tasaki

Takahiro Ohkuma

Etsuko Katsuda

Masato Yasuda

Shuichi Karino

Masahiko Honda

Akira Arutaki

Tatsuhiko Amagai

Kosuke Yoshida

Hiroshi Ikeda

Tadashi Sato

Motoo Nishihara

Tatsuo Aramizu

Takashi Konashi

Takayoshi Asakura

Tadashi Satou

Arata Toyoda

Takehiro Hokimoto

Yuich Tasaki

Yasuo Hamakawa

In order to appropriately provide information related to vulnerability that may be included in a container as a transmission target, a transmission apparatus includes an information obtaining unit configured to obtain information related to a change-prohibited region included in a container to be transmitted, information indicating that the change-prohibited region has not been changed, and information related to vulnerability inspection for the change-prohibited region, and a transmission processing unit configured to include, in the container, the information related to the change-prohibited region, the information indicating that the change-prohibited region has not been changed, and the information related to the vulnerability inspection for the change-prohibited region, and transmit the container.

Transmission apparatus, reception apparatus, container transmission system, method, and program

An object is to provide a verification device capable of securely verifying a package with less loads on a developer side. A verification device according to the present disclosure includes a receiving means for receiving, between a distribution server that distributes a distribution package for software development and a terminal device, an installation request for the distribution package transmitted from the terminal device, an acquisition means for acquiring, from the distribution server, the distribution package requested by the received installation request, a construction means for constructing a testing environment consistent with a development environment of the terminal device on the basis of the received installation request, a verification means for performing installation verification of the acquired distribution package by using the constructed testing environment, and a transmitting means for transmitting the acquired distribution package to the terminal device on the basis of a verification result of the installation verification.

Verification device, verification system, verification method, and computer readable medium

In order to provide an evaluation apparatus that appropriately evaluates a risk from continuous execution of an application without stopping execution of the application, an evaluation apparatus includes a first obtaining section, an evaluating section, and an output section. The first obtaining section is configured to obtain application information related to an application being executed on a server. The evaluating section is configured to evaluate a risk degree from continuous execution of the application on the server, based on the application information. The output section is configured to output an evaluation result of the risk degree.

Evaluation apparatus, evaluation system, evaluation method, and program

In order to provide an evaluation apparatus that appropriately evaluates risk of a source code changing over time, an evaluation apparatus includes a generating unit and an output unit. The generating unit generates an evaluation related to risk of a first library described in a source code. The output unit calculates the degree of risk of the fist library, based on at least the generated evaluation, calculates a risk value indicating risk inherent in the source code, based on the calculated degree of risk, and also outputs time-series data of the calculated risk value.

Evaluation apparatus, evaluation method, and program

Based on a normal model, it is detected whether or not an event signal of a computer system is anomalous. In parallel with the normal-model-based anomaly detection, it is detected based on a rule whether or not the event signal is anomalous. Then, a final anomaly detection result is generated by performing comprehensive determination based on detection results of the normal-model-based anomaly detection and the rule-based anomaly detection.

Anomaly detection device

A policy evaluation apparatus () acquires, with respect to each of a plurality of control groups () including an evaluation target group, control policies (). Each of the control policy () indicates execution permission/non-permission of an application. Further, the policy evaluation apparatus () compares an evaluation target policy being the control policy () of the evaluation target group with other plurality of control policies (), and generates evaluation information () based on the comparison result.

Policy evaluation apparatus, control method, and program

A warning apparatus () acquires first detected event information () representing, at a first abstraction level, an event set being a set of events having occurred in a target system. The warning apparatus () generates second detected event information () from the first detected event information (). The second detected event information () represents, at a second abstraction level, the event set represented by the first detected event information (). The warning apparatus () determines, from among a plurality of pieces of threat information () each representing a threat activity, the threat information () having a high degree of relevance to at least either of the first detected event information () and the second detected event information (). The warning apparatus () generates warning information () relating to a threat being occurring in the target system, based on the determined threat information () and a matching level being an abstraction level associated with the detected event information having a high degree of relevance to the threat information ().

Warning apparatus, control method, and program

Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Information processing device, information processing system, monitoring method, and recording medium

An information processing apparatus () classifies each event that occurred in a target apparatus to be determined () either as an event (event of a first class) that also occurs in a standard apparatus () or as an event (event of a second class) that does not occur in the standard apparatus (). Herein, a first model used for a determination with respect to an event that also occurs in the standard apparatus () and a second model used for a determination with respect to an event that does not occur in the standard apparatus () are used as models for determining whether an event that occurs in a target apparatus to be determined () is a target for warning. The information processing apparatus () performs learning of the first model using an event of the first class. Further, the information processing apparatus () performs learning of the second model using an event of the second class.

Information processing apparatus, control method, and program

A first information processing apparatus () determines an alternative representation () of an event sequence represented by a plurality of event histories (), by use of dictionary data (). The first information processing apparatus () outputs information including the determined alternative representation (). The dictionary data () indicate an event sequence and an alternative representation () relating to the event sequence in association with each other.

To enable a user to easily recognize temporal order of elements included in a retrieval sentence, a retrieval sentence utilization deviceincludes: a retrieval sentence division unitfor dividing a retrieval sentence into a plurality of retrieval contents each of which includes an event; and a directed graph generation unitfor generating, from each of the retrieval contents, a subtree in which the event is an edge and a source of the event and an object of the event are nodes, and integrating a plurality of subtrees generated from the retrieval contents to generate a directed graph, wherein the directed graph generation unitplaces the plurality of subtrees in the directed graph according to occurrence order of events corresponding to the plurality of subtrees.

Retrieval sentence utilization device and retrieval sentence utilization method

An information processing apparatusexecutes analysis for an event history set (). The event history set () is a set of a plurality of event histories (). The event history () is information relating to an event generated in a target computer system. The information processing apparatusselects, based on a result of the analysis, an event history () to be excluded from deletion targets. The information processing apparatus () deletes, from the event history set (), an event history () other than the event history () excluded from the deletion targets.

Information processing apparatus, control method, and program for flexibly managing event history

An information processing apparatus generates a graph that represents an action of a program. On the graph, an edge represents action contents of a process in an event. Further, two nodes connected by the edge respectively represent a subject and an object of the event. The information processing apparatus outputs the generated graph. Further, the information processing apparatus also alters the generated graph. When an index value of an event satisfies a first predetermined condition which index value is based on the number of occurrences or the frequency of occurrences of the event, the information processing apparatus alters the graph with respect to an edge representing the event.

The purpose of the present invention is to provide a technology which assists a verifying party in ascertaining an anomaly in an event of which notification has been made. Provided is an assistance device, comprising: an acquisition unit which acquires as an associated event, from among events which take place among a plurality of elements, and with respect to elements which have been associated with an event which has been detected as an anomalous event, an event other than the anomalous event which has been associated with the elements; and a generating unit which, on the basis of the anomalous event and the associated event, generates a relational graph in which the elements are vertices, the relations among the elements are edges, the anomalous event and the associated event are respectively represented, and the associated event is displayed in a display screen in a different manner from the manner in which the anomalous event is displayed.

Anomalous event confirmation assistance apparatus, anomalous event confirmation assistance meithod, and recording medium

The present invention provides an information processing system for more appropriately classifying elements that constitute an information processing device or the like. This information processing system is provided with: a means that, on the basis of information indicating the relationship between a plurality of elements that constitute a system, acquires, for first elements to be classified, a set of second elements capable of arriving at the first elements via a relationship of arbitrary numbers; and a means that, on the basis of the set corresponding to the first elements, classifies each of the first elements in any of a plurality of roles.

Growing community of inventors

Tokyo, Japan

Kazuhiko Isoyama