Nippon Telegraph and Telephone Corporation

Mitsubishi Heavy Industries Limited

Yasushi Okano

Takuma Koyama

Masashi Tanaka

Shinsuke Sato

Shigeto Hirai

Takeshi Matsuo

Shingo Orihara

Taisuke Nakamura

Hiroshi Asakura

Masaaki Shibata

Tomohiro Numajiri

Kazutaka Suzuki

Hiroaki Takeuchi

Yoshitomo Noda

Keita Hasegawa

Tohru Sato

Kazuhiro Takeda

Atsushi Yuge

Toshiki Shibahara

Akihiko Yano

Takafumi Yoshida

Atsutoshi Kumagai

Kazufumi Takayanagi

Masaru Matsubayashi

Tetsuya Abe

Chisato Tsukahara

Chuuhachi Gotou

Shinsaku Dobashi

Ryosuke Notomi

An authentication apparatus that performs authentication of a client terminal by challenge-response authentication, the authentication apparatus includes one or more computers each including a memory and a processor configured to: receive a challenge request from the client terminal; generate a challenge as to the challenge request; and transmit the challenge to the client terminal. The memory and the processor are configured to generate the challenge by one generating method out of a fixed generating method in which a challenge of a fixed value is generated, and a random generating method in which a challenge of a random value is generated, in accordance with a state of the authentication apparatus.

Authentication apparatus, authentication method and program for generating a challenge in accordance with a state of challenge-response authentication with a client terminal

Provided is a communication apparatus communicating with an external apparatus connected via a network, and the communication apparatus includes a processor and a memory storing program instructions that cause the processor to: calculate a communication interval of data communicated within the communication apparatus; determine whether to perform communication with the external apparatus based on whether the communication interval is within a range set in advance; and transmit, to the external apparatus, communication data including the communication interval determined to perform communication with the external apparatus, latter data in the communication interval, and a transition between former data and the latter data in the communication interval, so that traffic from an apparatus to outside is reduced while suppressing deterioration in detection accuracy of unauthorized communication.

Communication apparatus, external apparatus, communication system, communication method and program

An information processing apparatus includes a generation unit configured to generate, from a log obtained from a device, a graph structure indicating one or more associations between one or more processes and one or more objects related to the one or more processes, and an identifying unit configured to, in a case where one of objects of the device is specified, identify at least one process related to the specified one of the objects, based on the generated graph structure, and identify one or more objects related to the identified at least one process.

Information processing apparatus, log analysis method and program

A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with first context information related to the first data, and a determining unit configured to obtain second context information related to second data in a case where the second data is received from the device or any one of the multiple devices, and determine whether an analysis of the received second data is necessary based on the received second data and the obtained second context information and based on the first data and the first context information stored in the storage unit, are provided.

Information processing apparatus, data analysis method and program

A wind turbine blade is provided, which includes a blade body extending from a blade root toward a blade tip along a blade length direction, a first sprayed layer disposed so as to cover at least a leading edge on a side of the blade tip of the blade body, for suppressing erosion of the leading edge of the blade body, a second sprayed layer formed between the blade body and the first sprayed layer, and having a lower electrical resistivity than the first sprayed layer, and a first conductive part for electrically connecting the second sprayed layer to a ground.

Wind turbine blade with protecting layers

A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with a first feature context related to the first data, and an analyzing unit configured to obtain a second feature context related to second data in a case where the second data is received from the device or any one of the multiple devices, and analyze an anomaly of the received second data based on the received second data and the obtained second feature context and based on the first data and the first feature context stored in the storage unit, are provided.

Information processing apparatus, anomaly analysis method and program

There is provided an abnormal communication detection apparatus capable of reducing over-detection. The abnormal communication detection apparatus includes: a receiving part receiving communication data for learning that includes an identifier and communication data for detection that includes the identifier; a knowledge information acquiring part acquiring knowledge information that is information about at least either temporal characteristics or payload characteristics of the communication data for learning; an allocation rule generating part generating allocation rules that are rules for specifying which communication data having which identifier is to be allocated to which detector among a plurality of detectors, based on the knowledge information; an allocating part allocating the communication data to any of the detectors based on the allocation rules; and the plurality of detectors each of which learns, when the communication data for learning is allocated, a model for detecting whether the communication data allocated to the detector is normal or abnormal, and detects, when the communication data for detection is allocated, whether the communication data for detection is normal or abnormal based on the learned model.

Abnormal communication detection apparatus, abnormal communication detection method and program

An attack communication detection device that is robust against a deviation from the design value of a communication interval is provided. The attack communication detection device is an attack communication detection device that detects an attack communication from a communication of each electronic control unit in a communication network and includes: a receiving unit that receives communication data for detection which may or may not include an attack communication; a sum-of-communication-intervals calculation unit that calculates the sum of communication intervals, which is the sum of two adjacent communication intervals, of the communication data for detection; an estimated distribution model storage that stores in advance an estimated distribution model of a communication interval and the sum of communication intervals of communication data for learning which does not include an attack communication; and a detection unit that detects whether or not the communication data for detection includes an attack communication based on the estimated distribution model and the sum of communication intervals of the communication data for detection.

Attack communication detection device, attack communication detection method, and program

A device includes a memory; and a processor configured to execute first determining, for each data item generated in the device, a priority upon transmitting said each data item to an information processing apparatus, based on one or more rules set in advance; second determining, for said each data item, whether or not it is necessary to transmit said each data item to the information processing apparatus, based on the priority determined for said each data item; and transmitting a data item to the information processing apparatus among data items generated in the device for a predetermined period of time, the data item being determined by the second determining that it is necessary to transmit the data item to the information processing apparatus.

Prioritizing data using rules for transmission over network

A detection device includes: an object data extraction unit that extracts, from one or more pieces of communication data which are transmitted from one or more electronic control units, at least part of a payload contained in communication data that satisfies a predetermined condition, information by which the communication interval between the communication data can be calculated, and a serial number of the communication data as object data; a partial sequence creation unit that creates, using the extracted object data, a partial sequence containing information corresponding to at least part of a payload and information indicating a communication interval from two or more pieces of object data with the same serial number; and a detection unit that detects, using the created partial sequence, predetermined communication data based on the order relation between at least part of a payload and the corresponding part of another payload and a communication interval. The predetermined condition is a condition for extracting only communication data which is transmitted periodically and also in conjunction with a predetermined event.

Detection device, detection method, and program

A malicious communication log detection device compresses first character strings representing characteristics of a communication log that is known to be malicious or benign, and second character strings obtained by coupling the first character strings with a character string representing a characteristic of a target communication log. The malicious communication log detection device calculates a score for determining whether the target communication log is malicious or benign based on a data size of the compressed first character strings and a data size of the compressed second character strings. The malicious communication log detection device determines whether the target communication log is malicious or benign based on the calculated score and a predetermined parameter.

Malicious communication log detection device, malicious communication log detection method, and malicious communication log detection program

A bit assignment estimating device that accurately estimates bit assignment of a payload with fewer division patterns is provided. The bit assignment estimating device: divides a payload of received communication data to generate a plurality of blocks; estimates bit assignment of a block to be a certain value type; concatenates a block, which is adjacent to either of a block or a concatenation block which is estimated to be the continuous value type at a higher-order bit side, to the block or the concatenation block which is estimated to be the continuous value type when the block adjacent is estimated to be the status value type or the continuous value type; estimates whether the concatenation block is the continuous value type or not; and separates an immediately-close-concatenated block from a corresponding concatenation block when the concatenation block is estimated not to be the continuous value type.

Bit assignment estimating device, bit assignment estimating method, and program

In a security information management device (), security information, which is information related to security, is collected. The security information management device () extracts, by referring to a security dictionary storing therein a keyword related to security for each attribute, a keyword from referrer security information that becomes a source to be compared with security information for relevance thereto, and calculates, by comparing the extracted keyword with a keyword included in the collected security information, relevance between the referrer security information and the security information. The security information management device () then output security information having higher calculated relevance more preferentially.

Security information management system and security information management method

A malware determination device, in which, upon input of an attribute name and an attribute value of an attribute of an executable file, a feature-selection setting unit registers the attribute with the attribute name in an attribute table as an attribute to be extracted, and registers the attribute value as an attribute value to be deleted in an attribute value table. Upon input of an executable file to be learned or to be determined, a feature extraction unit extracts an attribute value of an attribute registered as an attribute to be extracted in the attribute table from the executable file, to generate a feature vector including the extracted attribute value as a feature. A feature selection unit performs deletion of an attribute value registered as an attribute value to be deleted in the attribute value table from the feature vector.

Malware determination device, malware determination system, malware determination method, and program

A wind turbine generator that is capable of completely eliminating heater heating of lubricating-oil piping or that is capable of reducing the number of heater heating locations to the minimum requirement is provided. A wind turbine generator is provided with a lubricating system that circulates lubricating oil (L) in a lubricating-oil storage tank through lubricating-oil piping connected to a lubricating-oil pump, to lubricate a main bearing connected to the lubricating-oil piping by supplying the lubricating oil (L) thereto. This lubricating system is provided with a lubricating-oil recovery line that is formed when the lubricating-oil pump is stopped and in which the lubricating oil (L) falls naturally and is recovered in the lubricating-oil storage tank.

Growing community of inventors

Musashino, Japan

Yasushi Okano