Hitachi, Ltd.

Alaxala Networks Corporation

Yoshinori Watanabe

Keiichi Nakane

Naomichi Nonaka

Hiromichi Itoh

Takeshi Aimoto

Yusuke Shomura

Hidemitsu Higuchi

Takashi Isobe

Takeshi Shibata

Makoto Kayashima

Kenichi Yoshida

Yoshihiro Nakao

Masayuki Shinohara

Masato Terada

Tatsuya Fujiyama

Takaaki Ogino

A history management unit within a discard determination unit manages transmission and reception packets related to a resource to be protected for each of users, and records communication history information for users high in use frequency through stateful measurement. A priority determination unit determines the priority of a communication on a per received packet basis on the basis of communication history information. A load determination unit determines a load level of the resource to be protected, and combines the load level with the priority of the communication determined on the per received packet basis. A discard rate determination unit and a packet discard unit implement forwarding processing, determine the priority of the communication on the per user basis, and discard communications low in the priority at a high ratio.

Network system, network relay method, and network relay device

An apparatus has a receiver module configured to receive packets including multiple different identifiers, an aggregation module configured to classify each packet, which is received by the receiver module into a certain aggregate flow and generate aggregate statistical information including number of packets belonging to the certain aggregate flow, and a statistical processing module configured to perform an updating process arranged to classify the certain aggregate flow into a specific statistical flow and to update statistical information including number of packets belonging to the specific statistical flow based on corresponding aggregate statistical information, the statistical processing module repeating the updating process for multiple aggregate flows, into which packets are classified by the aggregation module, so as to update the statistical information in each of the multiple different statistical conditions.

Communication data statistical apparatus, communication data statistical method, and computer program product

A network controller, capable of high-speed extraction of malicious traffic from networks and determining characteristics of such traffic, includes a unit for accumulating a number of packets for each arbitrary itemset included in the header portions of packets to be transferred, and a unit for determining whether the accumulated value obtained by the accumulating unit exceeds a predetermined threshold, and determines the types of packets to be transferred from accumulated values of the itemset and an itemset different from the itemset when the number of packets exceed a threshold.

Network controller and control method with flow analysis and control function

A traffic analysis apparatus includes: a packet transmitter/receiver; a packet aggregating unit, for adding the number of packets that employ the same values for items in a combination that includes one arbitrary item or multiple items in packets obtained by the packet transmitter/receiver; a variety aggregating unit, for adding the number of appearances of different values in the items that are not included in the combination; and a packet estimation unit for, when the total number of packets is greater than a designated threshold value, employing a relationship between the values of the items of the combination formed of one arbitrary item or multiple items, the number of appearances of different values and the threshold value, and estimating the characteristics of the packets for which the number has exceeded the threshold value.

Traffic analysis apparatus and analysis method

A packet information extraction circuit derives predetermined key information (for example, destination information or transmission source information) from a received packet. A HASH result computation circuit generates m (a plurality of) pseudo-random numbers (HASH results) of fixed length from the derived information. A cache table holds the key information and cumulative packet lengths within a predetermined time period by using the generated pseudo-random numbers as addresses. When a threshold value holding and comparing circuit senses that the cumulative packet length has exceeded a value held therein, it sends a notification signal to judgment means disposed in a packet exchange system. The key information items and the cumulative values of the packet lengths are stored in the cache table on the basis of the received packets in such a way that larger cumulative packet lengths are left behind, whereas smaller cumulative packet lengths are erased.

Excessive flow detection device, excessive flow detection circuit, terminal apparatus and network node

An information processing apparatus having a resume function which can maintain the security even when a plurality of users commonly use the apparatus. A work state at a power-off time of the apparatus is preserved together with a work state name including a user's ID in a different area in a plurality of preservation areas for resume function on a main memory for each user. When a power source is again turned on, data in the preservation area corresponding to the user's ID is used to reproduce the work state of the user at the power-off time. The work preservation areas can be provided on a file server apparatus in a network not needing battery back-up. When the information processing apparatus is used, a work state at a power-off time can be independently preserved and reproduced for each user.

Information processing apparatus with resume function and information processing system

A statistical information collecting system and device for finding the detailed state of traffic flowing in a network to effectively reduce the traffic flow by sending statistical information from a statistical information collection apparatus to a collector device. A statistical information collection system with a statistical information collection apparatus comprising a collector device, in which the statistical information collection apparatus receives packets and collects statistical information from the received packets, and sends the collected statistical information to a collector device; the statistical information collection apparatus contains flow information including flow identification conditions for identifying flows that the received packets belong to, and sorts the statistical information on the collected packets for each flow identified by the flow identification conditions while referring to statistical information sorted for each flow, and the statistical information collection apparatus decides the transmit intervals for each flow for sending the statistical information to the collector device.

Statistical information collecting system and apparatus thereof

A network management system which includes a plurality of network devices operating in a coordinated manner and a management server managing the network devices. The management server includes apparatus for defining policy information and for generating setup information using policy information to generate setup information for each network device. The system generates setup information for each network device, distributes setup information to each network device, installs setup information to each network device, enables settings, collects setup information for each network device, and organizes and checks for consistency in the collected information.

Network management system for generating setup information for a plurality of devices based on common meta-level information

An information processing apparatus having a resume function which can maintain security even when a plurality of users use a common information processing apparatus. A work state at a power-off time is preserved together with a work state name including a user's ID in a different area in a plurality of preservation areas for the resume operation function on a main memory for each user. When a power source is turned on again, data in the preservation area corresponding to the user's ID is used to reproduce the work state of the user at the power-off time. A work state preservation file on a file server apparatus in a network has a resume function which does not need battery back-up. When this information processing apparatus is used, a work state at a power-off time can be independently preserved and reproduced for each of users, thereby realizing a resume function that is excellent in terms of security and utility.

Growing community of inventors

Chigasaki, Japan

Yoshinori Watanabe