Fujitsu Corporation

Mayuko Morita

Naohiro Tamura

Osamu Koyano

Takuya Habu

Satoru Torii

Makoto Yoshida

Yusuke Hara

Susumu Watanabe

Yuta Kawamura

Futoshi Watanabe

Hajime Hoashi

Yushiro Furukawa

Hiroshi Takamure

Kazuhiro Miyashita

An information processing system includes a storage unit that stores association information that is obtained by associating identifying information of a plurality of second communication networks that are interconnected via a first communication network with identifying information of a virtual device that exists in the second communication network; a first specifying unit that specifies according to the association information a second communication network in which a target virtual device exists, in a case in which the first specifying unit acquires a request for a setting change to the target virtual device; a second specifying unit that specifies a physical server on which the target virtual device runs from among physical servers that exist in the specified second communication network; and a setting unit that performs the setting change to the target virtual device that runs on the specified physical server.

Information processing system and information processing method

A non-transitory computer-readable medium including a program, which when executed by a computer, causes the computer to execute a process including obtaining first information indicating a load in the computer, second information indicating a first amount of communication handled by a virtual switch executed in the computer, and third information indicating a second amount of communication between the computer and another computer; and determining whether to switch from a first mode, in which the virtual machine executes a switch operation, to a second mode, in which the virtual switch and a physical switch that relays a communication of the computer cooperatively execute the switch operation, on the basis of the first information, the second information and the third information.

Computer-readable medium, apparatus, and method for offloading processing from a virtual switch to a physical switch

A computer-readable recording medium stores therein a patch determination program causing a computer to execute a process including acquiring, from each of nodes constituting a layer 2 network, node information indicating an adjacent node to be selected as a relay destination of data by each of the nodes among adjacent nodes adjacent to each of the nodes; and extracting each route on which the data is relayed in the layer 2 network based on the acquired node information of each of the nodes and connection information between the nodes.

Apparatus for searching route in layer 2 network

An unauthorized access prevention system that includes a search unit searching the flowing-in path of the unauthorized access to the services by a Web system disclosed by a user's ISP, a determination unit determining the place to implement a countermeasure for protecting the services from the unauthorized access based on the result of the search, and a notification unit notifying, according to a determination that that the countermeasure is implemented in the flow source that makes the unauthorized access flow into the user's communication network, the determination to the flow source.

Unauthorized access prevention system

An unauthorized access prevention system includes a countermeasure method determination unit determining a method of taking countermeasures to protect a destination against unauthorized access based on a rate indicating a probability that predetermined traffic is unauthorized access. The rate is determined by calculating a number of times that the countermeasures were taken and subtracting a number of times that countermeasures were suspended, and dividing the resultant number of times that countermeasures were taken without suspension by the number of times that countermeasures were taken, for the predetermined traffic. The system also includes a storage device storing the number of times that countermeasures were taken and the number of times that countermeasures were taken without suspension. A countermeasure execution control unit controls when to take the countermeasures in the determined method. The countermeasure method determination unit selects an appropriate method of taking countermeasures by comparing the rate to predetermined threshold values.

This invention is to minimize influence to other network by preventing unauthorized accesses such as DDoS attacks and probing by worms. When the blocking apparatusesanddetect outbound packets by the DDoS attacks or by the probing by the worm, they carry out the Egress filtering for such outbound packets to prevent the packets relating to the unauthorized access from being sent to the backbone network. Moreover, because a notice to the effect that the unauthorized access is detected is sent to other blocking apparatusesandvia the management apparatus, for example, the blocking apparatusesandprecautionarily carry out the Ingress filtering to prevent the packets relating to the unauthorized access from being sent to the network C and D.

Growing community of inventors

Yokohama, Japan

Mayuko Morita