Fujitsu Corporation

Masanobu Morinaga

Noriyuki Fukuyama

Hideaki Miyazaki

Sumiyo Okada

Yuki Fujishima

Masahiro Matsuda

Satoshi Okuyama

Masahiro Yamada

Yuji Nomura

Hitoshi Yamauchi

Masahiko Takenaka

Kazuyoshi Furukawa

Masahiko Murakami

Kenichi Horio

Masahide Noda

Tadashige Iwao

Ai Yano

Kazuyuki Ohtsu

Mebae Yamaoka

Takeaki Terada

Yasuhide Matsumoto

Hiroshi Tsuda

Takeshi Yasuie

Kouichi Itoh

Satoru Torii

Shingo Fujimoto

Masaaki Noro

Ikuya Morikawa

Masaaki Wakamoto

Tomoyoshi Takebayashi

Tsuneo Katsuyama

Yoshinori Katayama

Yoshiki Higashikado

Satoshi Nojima

Nobuyuki Kanaya

Masayuki Tashiro

Yoshiaki Inoue

Yasutaka Iwasaki

Ikuro Hibino

Takanori Oikawa

Takuma Takeuchi

Takahiro Shirakawa

Kenichi Tonomura

Sumiyo Taoka

Takeshi Kinoshita

Yonekura Yuki

A control method includes generating third key information, when receiving a recording request for asset information to a blockchain and first key information, based on the first key information and second key information stored in a specific storage area, generating fourth key information by decrypting key information associated with the blockchain among a plurality of pieces of encrypted key information, by using the generated third key information, transmitting the fourth key information and the recording request to the blockchain.

Control method, non-transitory computer-readable storage medium, and information processing apparatus

An information processing apparatus includes: a memory; and a processor coupled to the memory and configured to: specify, from among packets which are captured in a network, a head packet for transmitting a response related to remote control; extract a total size of the response from the head packet; calculate an area size which is assigned for the response in the head packet; and determine, based on the total size and the area size, that the remote control succeeds.

Information processing apparatus, recording medium recording network monitoring program, and network monitoring method

There is provided a network monitoring apparatus including a memory in which information of a remote operation and a combination of one or more command codes are associated with each other, and a processor coupled to the memory and the processor configured to acquire a command code of the one or more commands codes from a header of an encrypted execution request packet for executing the one or more commands for implementing a remote operation, determine whether or not there exists the combination included in a command code list in which acquired command codes are sequentially indicated, by referring the memory, and determine that the remote operation associated with the combination is successful when it is determined that there exists the combination included in the command code list.

Network monitoring apparatus and network monitoring method

A system includes at least one of first devices respectively including a first memory and a first processor, and a second device including a second memory and a second processor. The first processor is configured to extract a credential from first communication data between a terminal device and an issuing device which issues the credential to the terminal device, and store the credential and a user account of the credential in the first memory. The second processor is configured to obtain, from the first device, the user account corresponding to the credential extracted from second communication data, the second communication data corresponding to an authentication request from the terminal device to a providing device which processes a remote operation by the terminal device, and record remote operation data extracted from third communication data from the terminal device to the providing device and the user account in the second memory.

Network monitoring method and device

A disclosed network monitoring method includes: specifying a feature value for each of plural packet groups that were transferred between a first terminal and a second terminal on a connection between the first terminal and the second terminal; calculating a value representing variation in specified feature values; and determining whether the calculated value is equal to or greater than a predetermined threshold value.

Method and apparatus for monitoring network

A method includes executing a determination process that determines that a setting value is a search key, the setting value being for an item from among a plurality of items in a record identified in a plurality of records, the plurality of records relating to a plurality of pieces of log information that are collected from a plurality of computers; executing a first identification process that identifies, as the record, another record including the search key from among the plurality of records; executing a second identification process that identifies, as the item, a new item from among the plurality of items, the new item being different from an item used to identify the another record in the executing of the first identification process; repeating executing of the processes; and outputting information on at least one computer that is suspected of a cyber-attack, based on the identified records.

Identification method and information processing device

A management method comprising, extracting, using a processor, psychological characteristics that are characteristic of people who have experienced a certain incident; extracting, using the processor, behavioral characteristics that are characteristic of people who have experienced a certain incident; obtaining, using the processor, a relational expression between each item of the extracted psychological characteristics and a plurality of items of the extracted behavioral characteristics; and calculating, using the processor, a psychological characteristic value from the relational expression of each psychological characteristic item and a value of log data for each user and, distributing, using the processor, to any user whose psychological characteristic value exceeds a predetermined value, a measure devised for the exceeded psychological characteristic.

Management method, management device, and management program

A system includes first circuitry in a first computing device configured to issue a credential, second circuitry in a second computing device configured to perform an operation corresponding to content at a third computing device based on the credential, third circuitry in the third computing device configured to receive a request to perform the operation corresponding to the content from the second computing device, and fourth circuitry in a fourth computing device configured to monitor communication between the first computing device, the second computing device and the third computing device.

System, device and method for monitoring network

A device includes a processor configured to accumulate a plurality of logs in the memory, by repeating a capturing process and a logging process, the logging process including extracting a source identifier of a source computer, a destination identifier of a destination computer, and an attribute parameter which is set in an attribute item regarding an operation for the destination computer by the source computer, execute a detection process of detecting a target computer and another infected computer, the detection process including extracting a first destination identifier and a first attribute parameter, from a first log having an identifier of the infected computer in the source identifier, and extracting a second source identifier and a second destination identifier, from a second log having the first attribute parameter in the attribute parameter, and output the first destination identifier, the second source identifier, and the second destination identifier.

Network monitoring method and network monitoring device

A disclosed network monitoring method includes: obtaining, by a first apparatus, packets from a node outside a network to a first terminal in the network, and packets from the first terminal to a second terminal in the network; transmitting, by the first apparatus and to a third apparatus, information on first plural packets that satisfy a first condition; obtaining, by a second apparatus, packets from the first terminal to the second terminal, and packets from the second terminal to the node; transmitting, by the second apparatus and to the third apparatus, information on second plural packets that satisfy a second condition; receiving, by the third apparatus, the information on the first and second plural packets; and determining, by the third apparatus, whether an attack from outside the network occurred, based on whether a same packet is included in the first and second plural packets.

Network monitoring system and method

A computer is disclosed that performs an electronic mail creation process. The computer creates an electronic mail by referring to a storage part in which received electronic mails are stored, using at least one electronic mail of the received electronic mails stored in the storage part, the at least one electronic mail selected based on a criteria being set beforehand, and changing at least one of header information and a body text of the at least one electronic mail.

Electronic mail creation recording medium, method, and information processing apparatus

An apparatus acquires a packet transmitted according to a protocol employing block access, from a communication network, and determines which one of a system attribution block storing stores file system attribution data, a file attribution block storing file attribution data, and a file name block storing file name data the packet is related to. The apparatus calculates a block number of the file attribution block, based on addresses provided to the system and file attribution blocks, when the packet is determined to be related to the file attribution block. The apparatus calculates an identification number of each piece of the file attribution data, based on the system attribution data and the calculated block number, and associates file attribution data stored in the file attribution block with file name data stored in the file name block, based on the calculated identification numbers and identification numbers provided to the file name data.

Apparatus and method for monitoring communication

When obtained communication data corresponds to an external communication from the outside of the network to the inside, external communication data is stored. When the obtained communication data corresponds to a service start, external communication data associated with the service start is extracted, and service start data is stored in correlation with the extracted external communication data. When the obtained communication data corresponds to an operation end, operation end data is stored. When the obtained communication data corresponds to a communication from the inside to the outside of the network, operation end data associated with the obtained communication data is extracted. Then, it is determined that a condition is satisfied that external communication data associated with the obtained communication data is stored in correlation with the service start data associated with the extracted operation end data. When the condition is satisfied, an attack for the system is detected.

Network monitoring apparatus and method

A method for detecting unauthorized access is executed by a network monitoring apparatus connected to a network in which packets are transmitted between a plurality of information processing apparatuses. The method includes obtaining, by the network monitoring apparatus, packets regarding at least one access performed from a first information processing apparatus to a second information processing apparatus. The method includes selecting at least one condition from among predefined at least two conditions. The selection is performed according to a combination between the first information processing apparatus as an access source and the second information processing apparatus as an access destination. The method includes determining whether each of the obtained packets satisfies the selected at least one condition. The method includes determining a possibility that unauthorized access has been performed on the second information processing apparatus, based on a number of conditions determined to be satisfied.

Method for detecting unauthorized access and network monitoring apparatus

A monitoring apparatus include a memory which stores a program for executing procedures and a processor coupled to the memory and executes the procedures based on the program, wherein the procedures includes detecting a destination of access from a server apparatus to a storage apparatus on the basis of a result of analysis of a packet transmitted and received between the storage apparatus and the server apparatus, the storage apparatus including a plurality of storage areas, the server apparatus executing a plurality of virtual servers, part of the plurality of storage areas being allocated to each of the plurality of virtual servers as an accessible storage area, and determining that abnormal access is performed from the server apparatus to the storage apparatus when the storage areas of the detected destination are beyond a certain criterion in the plurality of storage areas.

Monitoring apparatus, control method, and computer-readable recording medium

Growing community of inventors

Kawasaki, Japan

Masanobu Morinaga