Abstract: The present invention reduces the load on a user when performing remote machine diagnosis. An acquisition unit (11) acquires time-series data obtained from equipment of the machine, a prediction unit (12) predicts the state of the machine on the basis of the time-series data, a search unit (13) uses the time-series data as a query to search a knowledge database, storing records of past diagnoses, for knowledge information related to the state of the machine, and a provision unit (14) provides the prediction result and the knowledge information.

Abstract: An analysis condition for security risk for a data flow in a system to be analyzed is automatically generated. An analysis condition generating apparatus lA generates from a natural sentence, using ontology in which a relationship is described between one or more nodes on a data flow graph that indicates a data flow in a system to be analyzed and one or more edges that indicate an event related to the nodes, graph structural data indicating the relationship between the nodes and the edges, and generates an analysis condition for analyzing security risk for the system to be analyzed based on the graph structural data.

Abstract: It is determined whether to involve the security risk based on the data flow in the system to be analyzed. An analysis apparatus 1A a historical information collecting unit 220A configured to collect historical information on an operational history for a program executed in a system to be analyzed, an information adding unit 230 configured to add to the historical information, external information obtained from an information resource other than an information processing apparatus that executes the program, and a risk determining unit 180A configured to perform a risk determining processing for determining based on preset determining condition, whether to involve security risk in the historical information to which the external information is added.

Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Abstract: An information processing apparatus (2000) classifies each event that occurred in a target apparatus to be determined (10) either as an event (event of a first class) that also occurs in a standard apparatus (20) or as an event (event of a second class) that does not occur in the standard apparatus (20). Herein, a first model used for a determination with respect to an event that also occurs in the standard apparatus (20) and a second model used for a determination with respect to an event that does not occur in the standard apparatus (20) are used as models for determining whether an event that occurs in a target apparatus to be determined (10) is a target for warning. The information processing apparatus (2000) performs learning of the first model using an event of the first class. Further, the information processing apparatus (2000) performs learning of the second model using an event of the second class.

Abstract: A learning model is trained so that a signal state can be estimated with high accuracy even in a case where a constellation on a complex plane is rotated. A learning apparatus (1) includes: an acquisition section (11) that acquires a constellation of a known state optical signal transmitted through optical fiber; a generation section (12) that generates a corrected constellation obtained by rotating the constellation on a complex plane; and a learning section (13) that uses the constellation and the corrected constellation to train a learning model.

Abstract: At least one processor included in an optical signal state estimation apparatus carries out: an acquisition process for acquiring a constellation of an optical signal; a generation process for generating time series data in which pieces of histogram information are arranged in time series, the histogram information being obtained by counting the number of signal points of the constellation, the signal points being included in each of grids obtained by dividing an in-phase component direction and a quadrature component direction into a specific number of rows and the specific number of columns, respectively; and an estimation process for estimating a state of the optical signal by inputting the time series data to a learned model.

Abstract: A system monitoring apparatus comprising: a complementing unit that generates complemented node information by complementing, based on a complementing model trained using information collected in a testing system using a monitoring command and an agent, first node information collected in an operated system using the monitoring command; and an estimating unit that estimates the probability of a link being present between nodes by inputting the complemented node information to a link estimating model trained using the information collected in the testing system using the monitoring command and the agent.

Abstract: To extract data-for-machine-leaning so as to enable accurate detection of an abnormality while reducing normal state patterns in a mobile network. A learning data extracting apparatus includes: an issuing section that issues a network service use request which is to be processed by cooperation of a plurality of communication apparatuses constituting C-plane; an obtaining section that obtains, as pieces of candidate learning data, time series data of information relating to the plurality of communication apparatuses; and an extracting section that extracts, as data-for-machine-leaning, a piece of candidate learning data with which the process in response to the network service use request has been successfully ended, from among the pieces of candidate learning data.

Abstract: A structure deterioration detection system according to the present disclosure includes: a sensing optical fiber (10) laid on a structure; a reception unit (201) that receives vibration information detected by the sensing optical fiber (10); an identification unit (202) that identifies a change pattern of a vibration characteristic of each of a plurality of points on the structure, based on the vibration information; and an analysis unit (203) that analyzes a deterioration state of at least one point among the plurality of points, based on a change pattern of a vibration characteristic of each of the plurality of points.

Abstract: A first information processing apparatus (2000) determines an alternative representation (20) of an event sequence represented by a plurality of event histories (12), by use of dictionary data (30). The first information processing apparatus (2000) outputs information including the determined alternative representation (20). The dictionary data (30) indicate an event sequence and an alternative representation (20) relating to the event sequence in association with each other.

Abstract: An information processing device 1X mainly includes a selection means 32X and an inference means 35X. The selection means 32X is configured to select, based on one or more geographical center points according to a movement history of an inference target device, one or more adaptive inference models to be used from inference models generated on an area-by-area basis, the inference models making inferences of a state of the inference target device. The inference means 35X is configured to make an inference of the state of the inference target device based on inference results of the adaptive inference models which use data acquired by the inference target device.

Abstract: To enable a user to easily recognize temporal order of elements included in a retrieval sentence, a retrieval sentence utilization device 10 includes: a retrieval sentence division unit 11 for dividing a retrieval sentence into a plurality of retrieval contents each of which includes an event; and a directed graph generation unit 12 for generating, from each of the retrieval contents, a subtree in which the event is an edge and a source of the event and an object of the event are nodes, and integrating a plurality of subtrees generated from the retrieval contents to generate a directed graph, wherein the directed graph generation unit 12 places the plurality of subtrees in the directed graph according to occurrence order of events corresponding to the plurality of subtrees.

Abstract: In order to appropriately provide information related to vulnerability that may be included in a container as a transmission target, a transmission apparatus 100a includes an information obtaining unit 131 configured to obtain information related to a change-prohibited region included in a container 2 to be transmitted, information indicating that the change-prohibited region has not been changed, and information related to vulnerability inspection for the change-prohibited region, and a transmission processing unit 133 configured to include, in the container 2, the information related to the change-prohibited region, the information indicating that the change-prohibited region has not been changed, and the information related to the vulnerability inspection for the change-prohibited region, and transmit the container 2.

Abstract: An object is to provide a verification device capable of securely verifying a package with less loads on a developer side.

Abstract: A utility pole degradation detection system according to the present disclosure includes: a sensing optical fiber (10) laid on a plurality of utility poles (30); a receiving unit (201) that receives vibration information detected by the sensing optical fiber (10); an identifying unit (202) that identifies a natural frequency of each of the plurality of utility poles (30) on the basis of the vibration information; and an analyzing unit (203) that analyzes a degradation state of at least one utility pole (30) among the plurality of utility poles (30) on the basis of a natural frequency of each of the plurality of utility poles (30).

Abstract: In order to provide an evaluation apparatus that appropriately evaluates risk of a source code changing over time, an evaluation apparatus includes a generating unit and an output unit. The generating unit generates an evaluation related to risk of a first library described in a source code. The output unit calculates the degree of risk of the fist library, based on at least the generated evaluation, calculates a risk value indicating risk inherent in the source code, based on the calculated degree of risk, and also outputs time-series data of the calculated risk value.

Abstract: An information processing apparatus 2000 executes analysis for an event history set (10). The event history set (10) is a set of a plurality of event histories (12). The event history (12) is information relating to an event generated in a target computer system. The information processing apparatus 2000 selects, based on a result of the analysis, an event history (12) to be excluded from deletion targets. The information processing apparatus (2000) deletes, from the event history set (10), an event history (12) other than the event history (12) excluded from the deletion targets.

Abstract: In order to provide an evaluation apparatus that appropriately evaluates a risk from continuous execution of an application without stopping execution of the application, an evaluation apparatus includes a first obtaining section, an evaluating section, and an output section. The first obtaining section is configured to obtain application information related to an application being executed on a server. The evaluating section is configured to evaluate a risk degree from continuous execution of the application on the server, based on the application information. The output section is configured to output an evaluation result of the risk degree.

Abstract: An execution control system (2000) determines whether to permit execution of a target application (30). The determination includes first determination and second determination. The second determination is performed when the first determination cannot determine whether to permit the execution of the target application (30). The execution control system (2000) executes the target application (30) in a protected environment after the first determination is finished and while the second determination is performed.