Nec Corporation

Hitachi High-tech Science Corporation

Renesas Electronics Corporation

Nec Electronics Corporation

Masafumi Watanabe

Yuki Ashino

Naoko Ito

Masato Yamane

Kazutoshi Watanabe

Masatsugu Shigeno

Hideyuki Akiyama

Natsuko Tsutazawa

Wen Zheng Li

Yoichiro Morita

Masahiro Toyama

Aya Ohmae

Kantaro Maruoka

Kota Toida

Hiroshi Ikeda

Atsushi Nakamura

Kentaro Yamada

Susumu Ito

Shigeru Wakiyama

Hirofumi Ueda

Hiroyoshi Yamamoto

Kazuo Chinone

Noriaki Sakai

Ryusuke Hirose

Takehiro Yamaoka

Toshitada Takeuchi

Shoichi Hasegawa

Satoshi Fujino

Hiroumi Momota

Toshihiro Ueno

Taniya Singh

The present disclosure provides a security assessment apparatus, a method, and a program capable of making an assessment of a security risk simply and appropriately. The security assessment apparatus according to the present disclosure is a security assessment apparatus of a facility to be controlled using a controller, including: an identification unit () configured to identify a compromised component which puts the facility into an unsafe situation based on data regarding a plurality of components provided in the facility and control program code of the controller, thereby generating a list of the compromised component; and a compromised behavior generating unit () configured to generate a compromised behavior of a selected component selected from the list of the compromised component.

Security assessment apparatus, security assessment method, and non-transitory computer readable medium

An information processing device () includes an anomaly receiving means () for receiving an anomaly detected by a monitoring device installed in a control system, a collating means () for receiving the anomaly from the anomaly receiving means (), making a first determination to determine whether the anomaly matches each of predetermined collating conditions for collating an event contained in an attack procedure and the anomaly, and when the first determination results in a match, making a further second determination to determine whether an event contained in each of predefined attack procedures matches the collating condition determined to match the anomaly, and when the second determination results in a match, specifying an attack procedure containing the event, and an extracting means () for extracting an event matching a predetermined extraction condition from the specified attack procedure.

Information processing device, display method, and non-transitory computer readable medium

An analysis assistance apparatusincludes: a control program obtainment unitthat obtains a control program of a plant based on sensor data from a sensor installed in the plant; an event information obtainment unitthat obtains event information, which includes a variable that defines a state of the plant when a predetermined event has occurred and a value thereof, as information necessary for searching the control program for a safety barrier for avoiding the occurrence of the predetermined event in the plant; and a safety barrier search unitthat extracts, from the control program, a causal relationship between an input variable and an output variable, and searches the control program for the safety barrier based on the variable and the value included in the event information and on the extracted causal relationship.

Analysis assistance apparatus, analysis assistance method, and computer-readable recording medium

Provided is an analysis device with which it is possible to find information relating to the intention and purpose of an attacker. The analysis device is provided with a purpose estimating means that estimates the purpose of behavior, based on predetermined behavior in the computer and knowledge information that includes the relation between the behavior and the purpose of executing the behavior.

Analysis device, analysis method and computer-readable recording medium

Disclosed is an apparatus and method for analyzing an evolved gas, wherein the precision of detection of a gas component is improved without enlarging the apparatus. The apparatus includes a gas component evolving unit, a detection member for detecting the gas component, and a mixed gas channel for allowing a mixed gas containing the gas component and carrier gas to flow therethrough, and further includes a branch channel branched from the mixed gas channel, an inert gas channel for allowing an inert gas to flow therethrough, a first flow rate regulator for adjusting the flow rate of the carrier gas, a second flow rate regulator for adjusting the flow rate of the inert gas, and a flow rate control unit for controlling the second flow rate regulator such that the flow rate of the mixed gas guided to the detection member is a predetermined value.

Apparatus and method for analyzing evolved gas

In order to monitor the operational status of a plant, a plant monitoring apparatusincludes: a control program acquisition unitconfigured to acquire a control program for controlling the plant on the basis of sensor data from a sensor installed in the plant; a causal relationship extraction unitconfigured to extract, from the control program, causal relationships between a plurality of signals that are used in the plant; a causal relationship specification unitconfigured to specify the current state of the plurality of signals and compare the specified state and the extracted causal relationships to specify a causal relationship corresponding to the specified state; and a display unitconfigured to display the specified causal relationship on a screen.

Plant monitoring apparatus, plant monitoring method, and computer readable recording medium

Provided is an analysis apparatus including a first storage device configured to store data, and a processing circuitry that is configured to control the own apparatus to function as: a dispatcher that is communicably connected to an analysis target device that performs operational processing by use of a processor and a memory unit, and generates collection target data for reproducing at least part of a state of the operational processing in the analysis target device, in accordance with data being transmitted and received between the processor and the memory unit; a data mapper that assigns, to one or more areas included in the collection target data, tag information for identifying the area; and a data writer that saves the one or more areas into the first storage device in accordance with a first policy defining a procedure of saving the collection target data into the first storage device.

Analysis device, analysis method, and storage medium in which analysis program is recorded

Provided is an analysis system configured to obtain an encryption key for encryption communication between an information communication apparatus and a communication network, from memory space provided in the information communication apparatus. The analysis system including a processing circuitry configured to function as: a memory acquisition unit that is configured to acquire at least part of data stored in a memory unit in an information communication apparatus including a computing unit and the memory unit; and a communication processing unit that is configured to determine whether key data including an encryption key used for encryption processing in a cryptographic communication protocol are stored in the memory unit, based on communication data transmitted and received in accordance with the cryptographic communication protocol between the information communication apparatus and a communication network, and instruct the memory acquisition unit to acquire data stored in the memory unit, based on the determination result.

Analysis system, analysis method, and storage medium

An analysis system that is able to obtain correct encryption key is provided. The analysis system includes a processing circuitry configured to function as a cryptanalysis processing unit. The cryptanalysis processing unit includes: a key candidate extraction unit that is configured to extract, from second data, one or more candidates of key data that include an encryption key that enables to decrypt first data encrypted by a specific encryption scheme, based on data indicating a feature of the key data; and a decryption unit that is configured to extract, from the extracted candidates of key data, correct key data that enables to correctly decrypt the encrypted first data, based on a result of decrypting the first data by use of the extracted candidates of key data.

Provided is an analysis system including a memory acquisition unit that is configured to acquire at least part of data stored in a memory unit in an information communication apparatus including a computing unit and the memory unit; a communication processing unit that is configured to instruct the memory acquisition unit to acquire data stored in the memory unit when determining that key data including an encryption key for cryptographic communication protocol are stored in the memory unit; and a cryptanalysis unit that is configured to extract one or more key data candidates that are candidates of the key data, from the stored in the memory unit, and extract, from one or more of the key data candidates, correct key data that enables to decrypt correctly the encrypted communication data. The communication processing unit is further configured to execute specific processing according to the decrypted communication data.

A scanning probe microscope includes: a cantilever; a cantilever supporting portion; a movement mechanism that moves a position of the cantilever; a light source that emits detection light; a detector that receives the detection light reflected on a reflecting surface of the cantilever; an objective lens; and a controller that controls the movement mechanism to perform a process including: detecting a spot position of a spot light of the detection light; detecting a position of the cantilever from an image captured by the imaging device; and controlling the movement mechanism based on the spot position, the position of the cantilever, an incident angle of the detection light, and the attachment angle such that the detection light is reflected on the reflecting surface when the cantilever is attached to the cantilever supporting portion.

Scanning probe microscope and optical axis adjustment method for scanning probe microscope

A three-dimensional fine movement device includes a moving body, a fixation member to which the moving body is fixed, a three-dimensional fine movement unit, to which the fixation member is fixed, and which allows for three-dimensional fine movement of the moving body with the fixation member interposed therebetween, a base member to which the three-dimensional fine movement unit is fixed, and movement amount detecting means that is fixed to the base member to detect a movement amount of the fixation member.

Growing community of inventors

Tokyo, Japan

Masafumi Watanabe