Abstract: A management unit existence determination system includes: a query transmitter configured to transmit a first query, in which management unit information indicating a management unit is included, and at least one second query, in which a part of the management unit information is changed is included, which are queries for confirming an existence of the management unit of a file management system, to a determination target apparatus; a receiver configured to receive a response to the first query and a response to the second query from the determination target apparatus; and a determiner configured to determine whether the management unit exists by comparing the response to the first query with the response to the second query received by the receiver.

Abstract: A processing device includes a remote-controllable device position information acquisition unit that acquires information on a position of a remote-controllable device, a relative positional relationship information acquisition unit that acquires information on a relative positional relationship between a terminal device transmitting instructions to request control regarding the remote-controllable device via another device having a communication function not included in either the processing device or the remote-controllable device by communicating with the other device, and the remote-controllable device, a determination unit that determines if each condition regarding the position of the remote-controllable device and a condition regarding the relative positional relationship is satisfied on the basis of the acquired information, and determines whether to permit the terminal device to perform the control regarding the remote-controllable device according to a result of the determination, and a control unit

Abstract: An information processing system may be configured to count the number of one or more first time periods being included in a target time period. Each of the one or more first time periods has a plurality of communications each of which satisfies at least a condition. The plurality of communications includes two communications which are more distant from each other than a second time period which is shorter than the first time period.

Abstract: A processing device includes a remote-controllable device position information acquisition unit that acquires information on a position of a remote-controllable device, a relative positional relationship information acquisition unit that acquires information on a relative positional relationship between a terminal device transmitting instructions to request control regarding the remote-controllable device via another device having a communication function not included in either the processing device or the remote-controllable device by communicating with the other device, and the remote-controllable device, a determination unit that determines if each condition regarding the position of the remote-controllable device and a condition regarding the relative positional relationship is satisfied on the basis of the acquired information, and determines whether to permit the terminal device to perform the control regarding the remote-controllable device according to a result of the determination, and a control unit

Abstract: A communication control device that is included in a communication system in which a terminal device communicates a frame free of any transmission source information via a network, in which a detection device having a function of detecting a frame having a specific property, and a function of transmitting first information on the frame having a specific property to the network when the detection device detects a frame having a specific property is connected to the network, and the communication control device includes a control unit that refers to a frame storage unit that stores a frame that is a transmission target output from the terminal device to the network when the control unit determines that the first information has been received from the detection device connected to the network on the basis of information for determining being the first information transmitted by the detection device.

Abstract: A log analysis system includes a first processor unit, a second processor unit, a third processor unit, and a fourth processor unit. The first processor unit normalizes the detection log acquired by an acquirer, allocating the detection log into predefined monitoring target units, and outputs the monitoring target units. The second processor unit appends common information based on a predefined rule to each of the monitoring target units of the detection log output from the first processor unit, arranges the monitoring target units into information granularities based on the content of the detection log and common information, and outputs the monitoring target units as analysis unit information. The third processor unit gathers the analysis unit information output from the second processor unit and setting detection target event candidates based on a predefined rule, and outputs the detection target event candidates and the determination results.

Abstract: A log analysis system for analyze a detection log detected in a monitoring target system includes an acquisition device for detecting detection target processes performed in the monitoring target system, and acquiring a detection log of the detection target processes; and a processor device for processing the detection log acquired by the acquirer. The processor device includes a plurality of processing blocks that perform processing on the detection log sequentially. The processor device performs processing while sending the detection log in order from a most-upstream processing block to downstream processing blocks. A most-downstream processing block of the processor device notifies the most-upstream processing block of the processor device that the detection log has been received.

Abstract: A management unit existence determination system includes: a query transmitter configured to transmit a first query, in which management unit information indicating a management unit is included, and at least one second query, in which a part of the management unit information is changed is included, which are queries for confirming an existence of the management unit of a file management system, to a determination target apparatus; a receiver configured to receive a response to the first query and a response to the second query from the determination target apparatus; and a determiner configured to determine whether the management unit exists by comparing the response to the first query with the response to the second query received by the receiver.

Abstract: An information processing system includes a domain acquisitor configured to acquire a domain that is a connection destination of communication detected on a monitoring target network, a related information acquisitor configured to acquire related information which is information registered in association with the domain acquired by the domain acquisitor from a domain management device which holds information of domains that are registered, a storage configured to store a domain which is a connection destination satisfying at least a condition and related information of the domain.

Abstract: An information processing system may be configured to count the number of one or snore first time periods being included in a target time period. Each of the one or more first time periods has a plurality of communications each of which satisfies at least a condition. The plurality of communications includes two communications which are more distant from each other than a second time period which is shorter than the first time period.

Abstract: A log analysis system for analyze a detection log detected in a monitoring target system includes an acquisition device for detecting detection target processes performed in the monitoring target system, and acquiring a detection log of the detection target processes; and a processor device for processing the detection log acquired by the acquirer. The processor device includes a plurality of processing blocks that perform processing on the detection log sequentially. The processor device performs processing while sending the detection log in order from a most-upstream processing block to downstream processing blocks. A most-downstream processing block of the processor device notifies the most-upstream processing block of the processor device that the detection log has been received.

Abstract: A log analysis system includes a first processor unit, a second processor unit, a third processor unit, and a fourth processor unit. The first processor unit normalizes the detection log acquired by an acquirer, allocating the detection log into predefined monitoring target units, and outputs the monitoring target units. The second processor unit appends common information based on a predefined rule to each of the monitoring target units of the detection log output from the first processor unit, arranges the monitoring target units into information granularities based on the content of the detection log and common information, and outputs the monitoring target units as analysis unit information. The third processor unit gathers the analysis unit information output from the second processor unit and setting detection target event candidates based on a predefined rule, and outputs the detection target event candidates and the determination results.