Abstract: A communication system that performs communication among a plurality of nodes by a broker-less type publishing/subscribing model, the communication system including a computer including a memory and a processor configured to receive communication data among the plurality of nodes; based on the communication data, create first relationship information indicating a relationship among the nodes regarding transmission and reception of the communication data, second relationship information indicating a relationship among the nodes regarding a belonging domain and whether the nodes are on a publisher side or on a subscriber side, and third relationship information indicating a relationship among the nodes regarding a topic to be published and subscribed; and create configuration information indicating a network configuration of the communication system by associating the first relationship information, the second relationship information, and the third relationship information.

Abstract: In a communication system that performs communication among a plurality of nodes by a broker-less type publishing/subscribing model, in a case where a network configuration of the communication system changes, an anomaly of the communication system is detected based on configuration information indicating the network configuration and at least one of a predefined white list or black list.

Abstract: Provided is a technique for performing statistical processing such as processing for obtaining parameters of logistic regression analysis faster than before. A secure statistical processing system includes a cross tabulation table computing device 2 that performs secure computation on a cross tabulation table in which frequencies are in plain texts while keeping each record concealed; and a statistical processing device 3 that performs predetermined statistical processing using the cross tabulation table in which frequencies are in plain texts. The cross tabulation table computing device 2 may include a plurality of secure computation devices 221, . . . , 22N that perform secure computation on a cross tabulation table in which frequencies are fragments subjected to secret sharing while keeping each record concealed, and a management device 21 that restores the fragments to compute the cross tabulation table in which frequencies are in plain texts.

Abstract: A packet collection system for collecting a packet for abnormality detection in a communication system including segments in which a packet having an encrypted payload is transmitted and received.

Abstract: A protocol identification device retrieves multiple communication data items related to multiple communications from certain source IP addresses to certain destination IP addresses; extracts, based on the multiple communication data items, multiple communications from a single transmission source port to multiple destination ports, as candidates for a first communication based on a first protocol using multiple destination ports, excludes, from among the candidates for the first communication based on the first protocol using the multiple destination ports, a second communication based on a second protocol using a single destination port, and identifies a remaining communication as the first communication based on the first protocol using the multiple destination ports.

Abstract: A communication control system includes: a state switching support apparatus including a processor; and a communication control apparatus to control communication to a protection target according to its state. The processor executes generating grid point data in which a grid point group representing exhaustive communications to the target is associated with states corresponding to grid points of the grid point group using previously collected data related to the communication; generating, by using the grid point data and data related to current communication, generating a state distribution representing a distribution of the states in a vicinity of a point represented by the data related to current communication in the grid point group; predicting a time when the state transitions to another state from a change in the state distribution from past to present; and transmitting an instruction to switch the state to the communication control apparatus at the predicted time.

Abstract: Provided is a technique for performing statistical processing such as processing for obtaining parameters of logistic regression analysis faster than before. A secure statistical processing system includes a cross tabulation table computing device 2 that performs secure computation on a cross tabulation table in which frequencies are in plain texts while keeping each record concealed; and a statistical processing device 3 that performs predetermined statistical processing using the cross tabulation table in which frequencies are in plain texts. The cross tabulation table computing device 2 may include a plurality of secure computation devices 221, . . . , 22N that perform secure computation on a cross tabulation table in which frequencies are fragments subjected to secret sharing while keeping each record concealed, and a management device 21 that restores the fragments to compute the cross tabulation table in which frequencies are in plain texts.