Nippon Telegraph and Telephone Corporation

Mitsubishi Heavy Industries Limited

Keiichi Okabe

Tetsuo Takahashi

Yuki Mori

Toshiyuki Yamada

Hiroki Itoh

Takaaki Koyama

Jun Miyoshi

Yoshihiro Itoh

Naoki Yamasaki

Naohiko Yoshizumi

The present invention reduces the time required for inspecting packets and detecting unauthorized commands. An intrusion prevention device () is connected to a communication network (-) in which a packet including a command for a device to be controlled is transmitted according to a predetermined rule. An analysis table storage part () stores an analysis table comprised of a predetermined number of slots for storing a predetermined number of commands together with time information. An input part () extracts the command from the packet detected from the communication network (-). A parse part () inserts the command into the analysis table. An analysis part () analyzes whether or not the plurality of commands stored in the respective slots of the analysis table follow the predetermined rule. A notification part () outputs an alarm when an analysis result indicates an abnormality. An output part () determines whether to pass or discard the packet according to the analysis result.

Intrusion prevention device, intrusion prevention method, and program

An intrusion prevention device includes a reception unit, a monitoring unit, and a determination unit. The reception unit receives, from a control target device, a notification indicating a state of the control target device. The monitoring unit receives a control command transmitted from a control device to the control target device. The determination unit determines whether to permit or block passage of the control command received by the monitoring unit in accordance with the state of the control target device received by the reception unit.

Intrusion prevention device, intrusion prevention method, and intrusion prevention program

Growing community of inventors

Tokyo, Japan

Keiichi Okabe