Kabushiki Kaisha Toshiba

Satoshi Aoki

Hiroyoshi Haruki

Fukutomo Nakanishi

Tatsuyuki Matsushita

Toshinari Takahashi

Fangming Zhao

Daiki Ishihara

Yoshikazu Hanatani

Yasushi Nakajima

Kazuo Hatakeyama

A detection systemincludes a control deviceand a monitoring devicecommunicably connected to the control device. An acquisition unitA of the control deviceacquires a target's observation value by a sensor. A first-noise-output unitB outputs a first-noise-value changing with time and less than a resolution of the sensor. An integration unitC outputs an integrated value obtained by integrating the first-noise-value and the observation value. A transmission unitD transmits the integrated value to the monitoring device. A separation unitA of the monitoring deviceseparates the integrated value from the control deviceinto the observation value and the first-noise-value. A second-noise-output unitB outputs a second-noise-value as the first-noise-value. A detection unitC detects whether the integrated value is a replay attack using the spatial distance between the first-noise-value and the second-noise-value.

Detection system, detection method, and computer program product

An attack control device according to an embodiment is provided with a storage unit and one or more hardware processors configured to function as a selection unit, a determination unit, and a calculation unit. The storage unit associates and stores a normal communication data model representing a model of communication data of a normal system, with each network segment. The selection unit specifies the network segment based on the communication prediction data predicted upon execution of the attack scenario and selects the normal communication data model associated with the network segment. The determination unit determines the similarity degree between the normal communication data represented by the normal communication data model, and the communication prediction data. The calculation unit calculates an effectiveness degree of the attack scenario to be higher as the similarity degree is higher.

Information processing device and computer program product

A network packet analyzer according an embodiment includes a memory and one or more hardware processors. The memory stores a plurality of sets of training data in which semantics of one protocol field and one or more patterns indicating characteristics of variations of the parameters of the one protocol field are associated with each other. The hardware processors: captures a network packets and extracts a variable field whose parameter varies in time series; generates, based on the parameter varying in the time series in the variable field, one or more patterns indicating a characteristic of a variation of the parameter; and compares each of the one or more patterns with each of the one or more patterns of the training data and estimate the semantics of the variable field.

Network packet analyzer and computer program product

According to an embodiment, an information processing device includes a processor. The processor is configured to: execute a rewriting process to rewrite some of a plurality of factors, included in data for normal operation of a target device, into a value different from a normal value; execute a correction process that is performed in a course of generating test data to be used for a test of the target device; and determine a method of generating the test data based on a rewriting part that indicates a factor serving as a target of the rewriting process and based on a correction part that indicates a factor serving as a target of the correction process.

Information processing device, information processing method and computer program product

A condition determination device includes an acquiring unit, a specifying unit, a classifying unit, and a condition determining unit. The acquiring unit acquires a total execution history, which is an execution count for each component included in a program, when a test is performed by supplying a plurality of input data to a target device which executes the program. The specifying unit specifies a shortage component of which the execution count indicated by the total execution history does not satisfy test criteria among components included in the program. The classifying unit classifies each of the input data into first data, which causes the target device to execute the shortage component, and second data, which does not cause the target device to execute the shortage component. The condition determining unit determines a condition of input data having a common characteristic with the first data.

Information processing device, computer program product, and testing system with acquiring total execution history

A memory includes a sense amplifier connected to one or more of bit lines and configured to sense data stored in the memory cells; and a word line driver configured to control a voltage of one or more of word lines. The memory cells constitute a memory block. The memory cells constitute a memory block being a unit of memory cells on which a data erasing operation is performed. A controller changes an erase condition during the data erasing operation performed on the memory block or a verify condition for a verify check of verifying whether the data has been erased from the memory cells in the memory block, in proportion to a ratio of number of predetermined logical value data to the data in the memory block or the page before the data erasing operation.

Growing community of inventors

Fuchu, Japan

Satoshi Aoki