Mitsubishi Electric Corporation

Mitsubishi Electric R&d Centre Europe B.v.

Tsunato Nakai

Koichi Shimizu

Nobuhiro Kobayashi

Teruyoshi Yamaguchi

Takeshi Ueda

Masaki Higuchi

Yoshinori Nakajima

Sachihiro Ichikawa

Benoit Boyer

Jin Kawasaki

Takehisa Miwa

A rich execution unit () executes an application () while executing a rich OS. A secure execution unit () executes a target operation, which is an operation based on a learning model, while executing a secure OS. A decryption processing unit () decrypts model information from encrypted model information of the learning model when execution of the target operation is requested by the application. An operation execution unit () executes the target operation using the model information. A falsification detection unit () determines whether the encrypted model information is falsified information. An output control unit () passes an execution result of the target operation to the application when it is determined that the encrypted model information is not the falsified information.

Information processing device, information processing method, and computer readable medium

A computation procedure change unit () changes a computation procedure, each time a computation execution time arrives to execute computation that uses a learning parameter having a value to be adjusted by machine learning, irregularly to a computation procedure which is different from a pre-change computation procedure and with which the same computation result as a computation result obtained by executing computation in accordance with the pre-change computation procedure is obtained. A computation execution unit () executes computation that uses the learning parameter, each time the computation execution time arrives, in accordance with the computation procedure that has been changed by the computation procedure change unit ().

Information processing device, information processing method, and non-transitory computer-readable recording medium

An object of this invention is to obtain a whitelist generator with which the accuracy of data relating to the specifications of normal communication serving as an automatic generation source can be guaranteed, whereby the accuracy of a generated whitelist can be guaranteed over an entire whitelist generation flow. The whitelist generator is applied to a system formed from a plurality of devices, the plurality of devices being configured to exchange data with each other, in order to generate a whitelist used for whitelisting intrusion detection, and includes a model verification unit that verifies, on the basis of an input model, at least one of whether or not normal communication in the system has been modeled correctly and whether or not the model is logically consistent, and a model conversion unit that converts the verified model into a whitelist.

Whitelist generator, whitelist evaluator, whitelist generator/evaluator, whitelist generation method, whitelist evaluation method, and whitelist generation/evaluation method

A state detection section () detects states of a plurality of controllers () included in a communication system (). An attack determination section () selects, from among a plurality of whitelists () each of which is associated with a combination of states, a whitelist () associated with the combination of the states of the plurality of controllers () detected by the state detection section (). The attack determination section () detects an attack on the communication system () by using the selected whitelist ().

Intrusion detection device, intrusion detection method, and computer readable medium

An allowed communication list conversion unit () assigns one or more flags to request communication and response communication, between which a correspondence relationship is described in a detection rule, and describes, in an allowed communication list, details of a flag operation specifying a value to be set to the flag and a flag condition for determining whether the value to be set is set in the flag, in association with each other. A determination unit () sets the value after determining that communication data on the request communication is normal, determines whether the value is set in the flag based on the flag condition when determining whether communication data on the response communication to the request communication is normal, and determines that the communication data on the response communication is normal when the value is set, to thereby reset the flag.

Data determination device, data determination method, and data determination program

A data determination apparatus of the present invention includes a state transition model storage unit to store a state transition model representing a state transition, a state management unit to hold an operating state of an own apparatus based on the state transition model, a communication permission list storage unit to store, as a communication permission list, communication permitted data whose communications are permitted in respective operating states, a communication unit to obtain communication determination data, and a determination unit to determine whether or not the communication determination data is communication permitted data whose communication has been permitted in a current operating state, using the current operating state and the communication permission list.

Growing community of inventors

Tokyo, Japan

Tsunato Nakai