Fujitsu Corporation

Takuya Habu

Naohiro Tamura

Mayuko Morita

Osamu Koyano

Satoru Torii

Yuki Unno

When a communication abnormality has occurred, links that are included in the communication path on which the communication abnormality has occurred and that are included in communication paths between nodes that allow communication are excluded while referring to information on physical links between nodes in the communication network and path information specifying at least one link included in communication paths between two points, and thereby the scope of positions that are plausible candidates for having been involved in a failure is narrowed.

Apparatus and method for locating trouble occurrence position in communication network

An unauthorized access prevention system that includes a search unit searching the flowing-in path of the unauthorized access to the services by a Web system disclosed by a user's ISP, a determination unit determining the place to implement a countermeasure for protecting the services from the unauthorized access based on the result of the search, and a notification unit notifying, according to a determination that that the countermeasure is implemented in the flow source that makes the unauthorized access flow into the user's communication network, the determination to the flow source.

Unauthorized access prevention system

An unauthorized access prevention system includes a countermeasure method determination unit determining a method of taking countermeasures to protect a destination against unauthorized access based on a rate indicating a probability that predetermined traffic is unauthorized access. The rate is determined by calculating a number of times that the countermeasures were taken and subtracting a number of times that countermeasures were suspended, and dividing the resultant number of times that countermeasures were taken without suspension by the number of times that countermeasures were taken, for the predetermined traffic. The system also includes a storage device storing the number of times that countermeasures were taken and the number of times that countermeasures were taken without suspension. A countermeasure execution control unit controls when to take the countermeasures in the determined method. The countermeasure method determination unit selects an appropriate method of taking countermeasures by comparing the rate to predetermined threshold values.

This invention is to minimize influence to other network by preventing unauthorized accesses such as DDoS attacks and probing by worms. When the blocking apparatusesanddetect outbound packets by the DDoS attacks or by the probing by the worm, they carry out the Egress filtering for such outbound packets to prevent the packets relating to the unauthorized access from being sent to the backbone network. Moreover, because a notice to the effect that the unauthorized access is detected is sent to other blocking apparatusesandvia the management apparatus, for example, the blocking apparatusesandprecautionarily carry out the Ingress filtering to prevent the packets relating to the unauthorized access from being sent to the network C and D.

Growing community of inventors

Kawasaki, Japan

Takuya Habu