Nec Corporation

Kazuo Yanoo

Masahiro Hosokawa

Hiroshi Sakaki

An evaluation model generation device is provided to generate an evaluation model which evaluates the function or non-function of an IT system based on a system model including a process model which describes processing between processes on the IT system, a server model which describes a physical system configuration of the IT system, and allocations which represent correspondence relations between the elements in the process model and those in the server model. The evaluation model generation device includes: path enumeration meanswhich extracts a process path between processes in the process model, and a server path corresponding to the process path and located on the server model; allocation estimation meanswhich estimates the allocation based on the process path and the server path; and model conversion meanswhich converts the system model into the evaluation model using the process paths, the server paths, and the estimated allocations.

Evaluation model generation device, evaluation model generation method, and evaluation model generation program

A data dependence analyzer includes: inter-process communication detection means which, on the basis of a processing content of inter-process communication performed for transferring data to be copied between resources, detects the inter-process communication; access detection means which successively detects an access event to the data in the resource due to the process; recording means which, for each of the access events detected by the access detection means, records the access target data in the access event; and analysis means which, among the access target data recorded by the recording means, searches data respectively corresponding to the copy source and the copy destination of the data transferred through the inter-process communication detected by the inter-process communication detection means and imparts a dependence relationship between the searched data.

Data dependence analyzer, information processor, data dependence analysis method and program

Provided is a security management system for managing the security of a managed system including during operation of the managed system, the security management system comprising: state changing means for determining a state that satisfies a state rule, which defines a desired state of the managed system, as a target state if the state of the managed system does not satisfy the state rule; and action determining means for determining a predetermined process, which is for changing the difference between the state of the managed system when the target state is determined and the target state, as a countermeasure that needs to be carried out in the state of the managed system when the target state is determined.

Security operation management system, security operation management method, and security operation management program

There is disclosed a method for switching access folders in accordance with a confidential mode. In this method, a confidential root directory is located below a normal root directory. A directory structure constituted by the at least one confidential folder other than a confidential root directory is the same as that constituted by at least one normal folder other than a normal root directory. A file access request from an application program to a disk device is received. If the application program is operating as a process in a confidential mode, file access to the confidential file in the confidential folder is executed through a kernel, by rewriting a specified file path name with a file path name corresponding to the confidential folder below the confidential root directory. If the application program is operating as a process in the normal mode, file access to the confidential file in the confidential folder is not permitted.

Growing community of inventors

Tokyo, Japan

Kazuo Yanoo