Hitachi, Ltd.

Hitachi Solutions, Ltd.

Kota Seki

Kota Ideguchi

Nobuyoshi Morita

An unauthorized access to a vehicle is accurately detected. An attack detection rule generation server includes: a general unauthorized access information receiving section receiving, from an external information processing apparatus, general unauthorized access information about an unauthorized access made to an information processing apparatus; a vehicle unauthorized access characteristic information generation section generating vehicle unauthorized access characteristic information about characteristics of an unauthorized access to a vehicle in a case of comparing the unauthorized access to the vehicle with the unauthorized access to the information processing apparatus; a vehicle unauthorized access information generation section generating vehicle unauthorized access information indicating a configuration of the unauthorized access to the vehicle, on the basis of the general unauthorized access information and the vehicle unauthorized access characteristic information; and a vehicle unauthorized access detection rule generation section generating a vehicle unauthorized access detection rule detecting the unauthorized access to the vehicle, on the basis of the vehicle unauthorized access information.

Vehicle unauthorized access countermeasure taking apparatus and vehicle unauthorized access countermeasure taking method

A monitor for monitoring a monitored object comprises: a processor configured to execute a program; a storage device configured to store the program; and a communication interface capable of communicating with the monitored object, wherein the processor is configured to execute: acquisition processing for acquiring threat information indicating association of a plurality of events necessary for an occurrence of a threat; and determination processing for determining, as a collection scheme of a log from the monitored object according to a rule for detecting an attack on the monitored object, either a passive scheme for collecting the log transmitted from the monitored object or an active scheme for collecting from the monitored object the log requested from the monitor to the monitored object.

Threat monitor, threat monitoring method, and recording medium therefore

When a cache miss occurs for a connection request from a client, a server calculates predicted next connection time which is the sum of time related to reception of the latest connection request from the client and a connection request period of the client. At least when the cache area is full, the server determines whether to cache, in the cache area, a session information set including a session ID associated with the latest connection request on the basis of the predicted next connection time calculated for the client.

Growing community of inventors

Tokyo, Japan

Kota Seki