Nec Corporation

Kentaro Sonoda

Hideyuki Shimonishi

Yoichiro Morita

Masayuki Nakae

Masaya Yamagata

Yoichi Hatano

Takayuki Sasaki

Takeo Ohno

Toshio Koide

Kayato Sekiya

Yoshiya Kizu

Yasuhiro Mizukoshi

Yuki Ashino

Takeo Hayashi

Toshiki Watanabe

Remi Numajiri

In order to efficiently perform security inspection, an inspection support apparatus includes a reception processing section configured to receive information related to a plurality of activity histories for security inspections performed by a plurality of inspection apparatuses, a specifying section configured to specify a conforming activity history meeting a predetermined correlation condition, from the plurality of activity histories, and a generating section configured to generate information related to the conforming activity history.

Automatic specification of conforming activity history meeting predetermined correlation condition

In order to appropriately detect flaws in a structure related to security of a system related to at least one of software and hardware, a security inspection apparatus includes an obtaining unit that obtains one or more pieces of configuration information related to configuration of a system to be inspected in security inspection, the system being related to at least one of software and hardware, a determining unit that determines whether or not each of the one or more pieces of configuration information is associated with any of one or more types of security functions set as inspection items for the security inspection, and a generating unit that generates information related to the determination.

Security inspection apparatus, security inspection method, and program

Provided is a more versatile technique that makes it possible to input dummy information in response to an attacker seeking to collect normal information that cannot be replaced with dummy information. In the present invention, a dummy information insertion device inserts dummy information into a second location that is determined using: first location information indicating a first location that contains normal information, from among all normal information in a computer, which cannot be replaced with other information; and insertion condition information that indicates conditions for determining the second location into which dummy information is to be inserted, with such dummy information resembling the normal information that cannot be replaced and not being present in the computer or in a local network connected to the computer.

Dummy information insertion device, dummy information insertion method, and storage medium

A network management apparatus that connects to a terminal by way of a communication apparatus, includes: a legitimate information generation unit configured to generate legitimate identification information that is identification information to identify the terminal on a network that the network management apparatus manages, the legitimate identification information being managed as legitimate information by the network management apparatus; a fake information generation unit configured to generate fake identification information that is different from the legitimate identification information and that cannot be used as it is for communication with another terminal; a management unit configured to manage the legitimate identification information and the fake identification information in association with each other; and a registration unit configured to register the fake identification information to the terminal.

Network management apparatus, network management method, and recording medium

A control execution apparatus is provided with a communication unit that makes an inquiry concerning a packet processing method with respect to a predetermined control instruction apparatus, and a packet processing unit that processes packets based on an instruction from the control instruction apparatus. The control instruction apparatus is provided with a communication history management unit that manages communication history between nodes via the control execution apparatus, a node state determination unit that determines, making reference to the communication history of the communication history management unit, whether or not a node that is a transmission source or a transmission destination of the packet for which an inquiry concerning a processing method was received, is on a side that provides a service to another node, and a control instruction unit that prohibits, when at least the node is on the side that provides a service to another node, new communication from the node in question to the other node.

Communication system, control instruction apparatus, communication control method and program

A visualization device is communicable with one or a plurality of host servers for hosting a virtual system, and includes an information acquisition unit for collecting configuration information on the virtual system and the host server, a storage unit for storing the configuration information therein, and a drawing unit for expressing a virtual machine and a virtual network configuring the virtual system with different axes based on the configuration information stored in the storage unit, expressing a connection relationship between a virtual machine and a virtual network by linking the lines extending from the respective axes, and grouping virtual machines in units of server on which the virtual machines operate thereby to generate drawing information for expressing the configuration of the virtual system and the host server.

Visualization system and visualization method

A communication system includes: a control apparatus setting control information in a forwarding node(s); a forwarding node(s); and an access control apparatus. The forwarding node(s) forwards packets by using first control information set by the control apparatus and second control information for forwarding packets that do not match a matching condition(s) in the first control information set by the control apparatus from a predetermined port of the forwarding node(s). The access control apparatus includes a determination unit determining whether to generate control information for the packets forwarded from the predetermined port of the forwarding node(s) and requesting the control apparatus to generate control information.

Communication system, access control apparatus, switch, network control method, and program

A apparatus management system includes: a forwarding node(s) that supplies identification information that uniquely identifies an individual terminal to a terminal management apparatus that manages the identification information; and the terminal management apparatus that discloses the identification information about a terminal to a corresponding user, requests the user to register himself/herself as a user of the terminal from a second terminal different from the terminal, and holds associates the terminal in association with the user.

Apparatus management system, apparatus management method, and program

A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

Communication system, control apparatus, communication apparatus, communication control method, and program

A display apparatus according to an exemplary aspect of the invention includes a display unit which displays information on a system, which includes a plurality of system resources and one or more than one networks connecting the system resources, on a screen of a display device, wherein the display unit displays system resource identifiers which identify the system resources respectively, and network identifiers which identify the networks respectively, and furthermore displays a state of connection between the system resource and the network at an area determined on the basis of the displayed system resource identifier and the displayed network identifier, on the screen.

Display apparatus, display method, and display program

A terminal communicating with a network including a forwarding device for forwarding a packet and a control device for controlling the forwarding device in accordance with a request from the forwarding device, includes a communication unit that receives a processing rule indicating that a packet for communicating with a first destination is changed so as to communicate with a second destination, from the control device, a storage unit that stores the received processing rule, and a processing unit that in a case of communicating with the network, changes a destination of a packet in accordance with a processing rule that corresponds to the packet by referring to the processing rule stored in the storage unit.

Terminal, control device, communication method, communication system, communication module, program, and information processing device

Visualization device, visualization system, and visualization method

A communication terminal comprises: first means that communicates with a network system that includes a forwarding apparatus forwarding a packet and a control apparatus informing the forwarding apparatus of a processing rule prescribing a packet processing method; second means that determines a processing operation to be executed by the network system from among packet processing operations to be executed by the communication terminal; and third means that informs the forwarding apparatus of a processing rule corresponding to the determined packet processing operation.

Communication terminal, method of communication and communication system

A network management service system includes a policy management apparatus that receives updating of a communication policy from an user and manages the communication policy for each user; a control apparatus that generates a packet handling operation of a packet associated with the communication policy of the user, in response to a request from the user, and sets the generated packet handling operation in a forwarding node(s); and the forwarding node(s) that processes the packet using the packet handling operation generated by the control apparatus.

Growing community of inventors

Tokyo, Japan

Kentaro Sonoda