Abstract: Provided is an analysis system configured to obtain an encryption key for encryption communication between an information communication apparatus and a communication network, from memory space provided in the information communication apparatus.

Abstract: Provided is an analysis device with which it is possible to find information relating to the intention and purpose of an attacker. The analysis device is provided with a purpose estimating means that estimates the purpose of behavior, based on predetermined behavior in the computer and knowledge information that includes the relation between the behavior and the purpose of executing the behavior.

Abstract: A display unit displays a configuration of a system in a display device. An implementation scheme configuration support unit provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by a user to a component selected by a user. An associated function element configuration support unit provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by a user to a component selected by a user. An evaluation unit determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element. An output unit outputs a result of the determination by the associated function element evaluation unit.

Abstract: Provided is an analysis apparatus including a first storage device configured to store data, and a processing circuitry that is configured to control the own apparatus to function as: a dispatcher that is communicably connected to an analysis target device that performs operational processing by use of a processor and a memory unit, and generates collection target data for reproducing at least part of a state of the operational processing in the analysis target device, in accordance with data being transmitted and received between the processor and the memory unit; a data mapper that assigns, to one or more areas included in the collection target data, tag information for identifying the area; and a data writer that saves the one or more areas into the first storage device in accordance with a first policy defining a procedure of saving the collection target data into the first storage device.

Abstract: A security-function-design support device is provided.

Abstract: A display unit displays a configuration of a system in a display device. An implementation scheme configuration support unit provides a candidate of a security implementation scheme configurable for a component of the system and configures a security implementation scheme selected by a user to a component selected by a user. An associated function element configuration support unit provides a candidate of an associated function element configurable for a component of the system and configures an associated function element selected by a user to a component selected by a user. An evaluation unit determines whether or not the associated function element configured for the component of the system is appropriate based on a condition to determine appropriateness of the configuration of the certain associated function element. An output unit outputs a result of the determination by the associated function element evaluation unit.

Abstract: A security-function-design support device is provided.

Abstract: A communication system, includes: a node that requests a processing rule for processing a packet; and a control apparatus that notifies the node of the processing rule in response to the request. The control apparatus, upon being notified of change of a connection relationship between a communication apparatus to which a packet is addressed and the node, determines a forwarding path for a packet addressed to the communication apparatus and notifies the node of a processing rule for realizing the forwarding path.

Abstract: At a time of operation verification of programs associated with an update of a shared program, information about a functionality necessary to be verified on a target program of operation verification can be presented. An influence degree calculation unit 102 calculates an influence degree of an update of a shared file to be updated for a shared file referring directly or indirectly to the shared file to be updated, on the basis of the reference relationships. A verification support information generation unit 103 detects a shared file having the influence degree which is equal to or higher than a predetermined value from among shared files referred to directly or indirectly by a verification target application file, on the basis of the reference relationships and the influence degree, and outputs information about a function call included in the detected shared file as information on a functionality necessary to be verified on the verification target application file.

Abstract: A check code generating means 10 generates, based on metadata of files satisfying a designated condition, a first check code uniquely representing a characteristic of a first file set whose components are files satisfying the condition. Moreover, the check code generating means 10 generates, based on metadata of files satisfying the condition, a second check code uniquely representing a characteristic of a second file set whose components are files satisfying the condition. An inconsistency detecting means 20 compares the first check code and the second check code and, based on inconsistency between the check codes, detecting inconsistency between the first file set and the second file set.