Abstract: An information processing apparatus includes a storage unit configured to store a setting value for each of a plurality of security setting items, an update unit configured to perform update processing on software stored in the information processing apparatus, and a determination unit configured to determine a setting value of a setting item that is newly added or changed in a specification of the software through the update processing, based on the setting values stored in the storage unit.

Abstract: A server apparatus includes one or more memories and one or more processors. The one or more processors and the one or more memories are configured to acquire vulnerability information about an information processing apparatus, acquire information about a network to which the information processing apparatus is connected, and transmit, to the information processing apparatus, vulnerability countermeasure information based on the vulnerability information and the information about the network.

Abstract: An information processing apparatus stores first software and second software, the first software is stored in a first storage medium accessible by a central processing unit and an embedded controller, and the second software is used to restore the first software and stored in a second storage medium accessible by the embedded controller. The information processing apparatus includes an update unit configured to update the second software using the first software depending on a result of a comparison between version information about the first software and version information about the second software, a falsification detection unit configured to detect whether the first software is falsified; and a restoration unit configured to restore the first software using the second software in a case where the falsification detection unit detects that the first software is falsified.

Abstract: An information processing apparatus includes an acquisition unit that performs acquiring first information used for determining a network environment to which a device belongs, and second information indicating the network environment to which the device belongs, a determination unit that performs determining a network environment to which the device belongs, based on the first information, a generation unit that performs generating, based at least on whether the network environment determined by the determination unit matches with the network environment indicated by the second information, learning data used in learning processing of a learning model that is used by the device to determine the network environment, and a learning unit that performs the learning processing using the learning data.

Abstract: An apparatus comprising: a unit configured to verify whether a first region that specifies a verification range of a first boot code and a second region that specifies a verification range of a second boot code have been altered; a unit configured to, when the first region has not been altered, verify whether the first boot code has been altered; a unit configured to, when the first boot code has been altered and the second region has not been altered, verify whether the second boot code has been altered; and a unit configured to, when the second boot code has not been altered, restore the first boot code using the second boot code, wherein the first and second regions are regions that are not rewritten after a start of the apparatus.

Abstract: An information processing apparatus includes a holding unit configured to hold first input data having a plurality of fields, for use in machine learning, a generation unit configured to generate second input data having a plurality of fields, for use in the machine learning, based on the first input data, and an adjustment unit configured to adjust values stored in the plurality of fields in the second input data.

Abstract: An information processing system includes a management server and a multi-function peripheral (MFP). The management server specifies an environment of a network to which the MFP is connected, selects a security policy associated with the specified environment of the network, and delivers the security policy to the MFP. The MFP receives the security policy associated with the environment of the connected network from the management server, and applies the security policy.

Abstract: An information processing system comprising a first apparatus and a second apparatus, wherein the first apparatus includes: a collection unit that collects information on a surrounding environment of the first apparatus; a determination unit that determines an installation environment of the first apparatus based on the information; a detection unit that detects the second apparatus present under an installation environment identical to the installation environment; a generation unit that generates a setting template for setting the second apparatus based on the installation environment; and a transmission unit that transmits the setting template to the second apparatus, and the second information processing apparatus includes: a reception unit that receives the setting template; and an application unit that applies the received setting template to the second apparatus.

Abstract: An information processing apparatus, comprising a setting unit that executes a security setting on the information processing apparatus based on an installation environment of the information processing apparatus, wherein the setting unit executes the security setting again at a specific timing.

Abstract: An information processing apparatus includes a verification unit configured to verify, using a method starting with hardware verification at a time of startup of a system, partial software which is divided into a plurality of parts and gradually started up, a second verification unit configured to verify another partial software based on the verified partial software, and a third verification unit configured to verify software to be executed at an arbitrary timing prior to execution of the software. In a case where the third verification unit is in operation at a time of update of the partial software, the operation of the third verification unit is stopped, and restart is performed after completion of the update, so that a sequence of verification processes starting with the hardware verification up to a result of verification at a time of execution is applied.

Abstract: An information processing apparatus includes a rewrite request receiving unit configured to receive a rewrite request for rewriting an execution module, an update module determination unit configured to determine whether an update module that issues the rewrite request is an authorized module, a first falsification detection unit configured to detect falsification of a whitelist, an unauthorized-rewriting prevention unit configured to prevent unauthorized rewriting while maintaining a function of the information processing apparatus by rejecting the rewrite request without stopping the function of the information processing apparatus, in a case where the execution module for which the rewrite request is issued is registered in a whitelist for which the first falsification detection unit determines that no falsification is made and where the rewrite request is issued by an update module for which the update module determination unit determines to be an unauthorized update module.

Abstract: An information processing apparatus includes a first storage medium configured to store a first boot code, a boot code signature value for the entire first boot code, and a specific area signature value for a specific area in the first storage medium, and an alteration detection unit configured to perform detection of an alteration of the first boot code by using the boot code signature value stored in the first storage medium, and perform detection of an alteration in the specific area by using the specific area signature value stored in the first storage medium.

Abstract: An information processing apparatus includes a verification unit configured to verify, using a method starting with hardware verification at a time of startup of a system, partial software which is divided into a plurality of parts and gradually started up, a second verification unit configured to verify another partial software based on the verified partial software, and a third verification unit configured to verify software to be executed at an arbitrary timing prior to execution of the software. In a case where the third verification unit is in operation at a time of update of the partial software, the operation of the third verification unit is stopped, and restart is performed after completion of the update, so that a sequence of verification processes starting with the hardware verification up to a result of verification at a time of execution is applied.

Abstract: An information processing apparatus includes a rewrite request receiving unit configured to receive a rewrite request for rewriting an execution module, an update module determination unit configured to determine whether an update module that issues the rewrite request is an authorized module, a first falsification detection unit configured to detect falsification of a whitelist, an unauthorized-rewriting prevention unit configured to prevent unauthorized rewriting while maintaining a function of the information processing apparatus by rejecting the rewrite request without stopping the function of the information processing apparatus, in a case where the execution module for which the rewrite request is issued is registered in a whitelist for which the first falsification detection unit determines that no falsification is made and where the rewrite request is issued by an update module for which the update module determination unit determines to be an unauthorized update module.

Abstract: An apparatus comprising: a unit configured to verify whether a first region that specifies a verification range of a first boot code and a second region that specifies a verification range of a second boot code have been altered; a unit configured to, when the first region has not been altered, verify whether the first boot code has been altered; a unit configured to, when the first boot code has been altered and the second region has not been altered, verify whether the second boot code has been altered; and a unit configured to, when the second boot code has not been altered, restore the first boot code using the second boot code, wherein the first and second regions are regions that are not rewritten after a start of the apparatus.

Abstract: An information processing apparatus stores first software and second software, the first software is stored in a first storage medium accessible by a central processing unit and an embedded controller, and the second software is used to restore the first software and stored in a second storage medium accessible by the embedded controller. The information processing apparatus includes an update unit configured to update the second software using the first software depending on a result of a comparison between version information about the first software and version information about the second software, a falsification detection unit configured to detect whether the first software is falsified; and a restoration unit configured to restore the first software using the second software in a case where the falsification detection unit detects that the first software is falsified.

Abstract: An information processing apparatus comprising a verification unit configured to verify, among a plurality of divided parts of software to be started up, a part of software to be started up next and setting data relating to startup of the part of software to be started next.

Abstract: An information processing apparatus includes a request reception unit configured to receive a request for executing an execution module, a first alteration detection unit configured to detect an alteration of a white list upon reception of the execution request, a second alteration detection unit configured to detect an alteration of an execution module which has issued the execution request, by using a white list determined to have no alteration by the first alteration detection unit, and an error control unit configured to, upon detection of an alteration by the second alteration detection unit, select and control whether to deactivate a system of the information processing apparatus or to inhibit only execution of the execution module which has issued the execution request, depending on a current activation mode of the information processing apparatus and an activation mode using the execution module which has issued the execution request.

Abstract: An information processing apparatus includes a request reception unit configured to receive a request for executing an execution module, a first alteration detection unit configured to detect an alteration of a white list upon reception of the execution request, a second alteration detection unit configured to detect an alteration of an execution module which has issued the execution request, by using a white list determined to have no alteration by the first alteration detection unit, and an error control unit configured to, upon detection of an alteration by the second alteration detection unit, select and control whether to deactivate a system of the information processing apparatus or to inhibit only execution of the execution module which has issued the execution request, depending on a current activation mode of the information processing apparatus and an activation mode using the execution module which has issued the execution request.

Abstract: An information processing apparatus includes a request reception unit configured to receive a request for executing an execution module, a first alteration detection unit configured to detect an alteration of a white list upon reception of the execution request, a second alteration detection unit configured to detect an alteration of an execution module which has issued the execution request, by using a white list determined to have no alteration by the first alteration detection unit, and an error control unit configured to, upon detection of an alteration by the second alteration detection unit, select and control whether to deactivate a system of the information processing apparatus or to inhibit only execution of the execution module which has issued the execution request, depending on a current activation mode of the information processing apparatus and an activation mode using the execution module which has issued the execution request.