Abstract: A communication system (1) includes a terminal information acquisition unit configured to acquire version information of an OS of a terminal (10), a comparison unit configured to compare a version of the OS of the terminal (10) acquired by the terminal information acquisition unit with a latest version of the corresponding OS, and a setting unit configured to set, when the version of the OS of the terminal (10) is not the latest version, a path along which traffic of the terminal (10) passes through a security appliance (5), and set, when the version of the OS of the terminal (10) is the latest version, a path along which the traffic of the terminal (10) does not pass through the security appliance (5).

Abstract: A control device includes a control unit configured to transmit a request received from an information processing device performing setting on a relay device relaying a packet in software defined networking (SDN) to the relay device. The control unit sequentially transmits each request from the information processing device to the relay device and sequentially transmits each response from the relay device in response to each of the requests to the information processing device when a processing load of the control device is equal to or less than a threshold, and transmits a request in which a plurality of requests from the information processing device are collected to the relay device and transmits a response in which responses to the plurality of requests are collected to the information processing device when the processing load of the control device is not equal to or less than the threshold.

Abstract: An application information storage unit configured to store information obtained by associating application information including flow characteristics of an application of a flow constituted by a packet with a flow identifier for identifying the flow of the packet, an acquisition unit configured to acquire, in a case where an input port receives a packet, application information of a flow constituted by the packet from the application information storage unit, and an output unit configured to output the packet received by the input port to a packet transfer apparatus in a load state indicating that a load due to the flow of the flow characteristics is light among a plurality of packet transfer apparatuses according to the flow characteristics included in the application information acquired by the acquisition unit are provided.

Abstract: A storage unit configured to store information regarding flow characteristics indicating whether a flow constituted by a packet is a flow having a tendency to have a large number of short packets or a flow having a tendency to have a large number of long packets in association with destination information of the packet, a determination unit configured to, in a case where an input port receives a packet, determine flow characteristics of a flow constituted by the packet on the basis of the storage unit, and an output unit configured to output the packet received by the input port to a packet transfer apparatus in a load state indicating that a load due to the flow of the flow characteristics is light among a plurality of packet transfer apparatuses according to the flow characteristics determined by the determination unit are provided.

Abstract: An acquisition unit acquires a state of a server including pieces of virtual CPE, and an instructing unit instructs CPE connected to the virtual CPE to control a communication band based on the state of the server. The instructing unit instructs the CPE to limit a communication band to a predetermined value or less based on a CPU usage rate acquired by the acquisition unit exceeding a predetermined threshold value. The instructing unit instructs the CPE to limit a communication band to a predetermined value or less in based on the number of connections of the CPE acquired by the acquisition unit being less than a predetermined threshold value. The acquisition unit acquires presence or absence of CPE not connected to the virtual CPE, and the instructing unit instructs the CPE to block communication based on the presence of CPE not connected to the virtual CPE.

Abstract: An MDF (10) receives MLDv2 received by vCPE (20) that is connected to CPE (50) via a tunnel. When the MLDv2 is received, the MDF (10) determines an edge router (30) that accommodates the CPE (50) being a transmission source of the MLDv2. Then, the MDF (10) instructs the determined edge router (30) to perform copy distribution of contents to the CPE (50) being the transmission source of the MLDv2.

Abstract: A function management device that manages, in a communication system including a plurality of pieces of customer premises communication equipment and a server capable of providing a function to the plurality of pieces of customer premises communication equipment, the function provided by the server, and includes a resource management unit configured to collect resource information from the plurality of pieces of customer premises communication equipment, a network management unit configured to collect, from the server, network band information of each of the functions, the network band being between the plurality of pieces of customer premises communication equipment and the server, and a function processing unit configured to activate a virtual machine on one of the plurality of pieces of customer premises communication equipment on the basis of the resource information and the network band information to cause a first function selected on the basis of a band occupancy ratio from among the functions provided

Abstract: An application information storage unit configured to store information obtained by associating application information including flow characteristics of an application of a flow constituted by a packet with a flow identifier for identifying the flow of the packet, an acquisition unit configured to acquire, in a case where an input port receives a packet, application information of a flow constituted by the packet from the application information storage unit, and an output unit configured to output the packet received by the input port to a packet transfer apparatus in a load state indicating that a load due to the flow of the flow characteristics is light among a plurality of packet transfer apparatuses according to the flow characteristics included in the application information acquired by the acquisition unit are provided.

Abstract: A communication apparatus connected to a virtual apparatus having an address dispensing function via an access network is provided, wherein the communication apparatus includes a communication confirmation unit configured to perform a communication confirmation between the virtual apparatus and the communication apparatus; and an address dispensing unit configured to dispense an address to a user terminal under control of the communication apparatus when communication between the virtual apparatus and the communication apparatus is not able to be confirmed by the communication confirmation unit, and the address dispensing unit causes the user terminal to forcibly release the address when the communication between the virtual apparatus and the communication apparatus is able to be confirmed by the communication confirmation unit.

Abstract: A collection unit (22) collects traffic information generated when data is transmitted from an IoT device connected to the network. When the traffic information collected by the collection unit (22) satisfies the determination condition preset based on a traffic pattern of each IoT device, a determination unit (23) determines that an abnormality occurs in the IoT device that generates the traffic.

Abstract: An acquisition unit (11a) acquires a state of a server in which a plurality of pieces of virtual CPE are implemented, and an instructing unit (11b) instructs CPE connected to the virtual CPE to control a communication band in accordance with the state of the server. The instructing unit (11b) instructs the CPE connected to the virtual CPE to limit a communication band to a predetermined value or less in a case where a CPU usage rate acquired by the acquisition unit (11a) exceeds a predetermined threshold value. The instructing unit (11b) instructs the CPE connected to the virtual CPE to limit a communication band to a predetermined value or less in a case where the number of connections of the CPE connected to the virtual CPE acquired by the acquisition unit (11a) is less than a predetermined threshold value.

Abstract: A storage unit configured to store information regarding flow characteristics indicating whether a flow constituted by a packet is a flow having a tendency to have a large number of short packets or a flow having a tendency to have a large number of long packets in association with destination information of the packet, a determination unit configured to, in a case where an input port receives a packet, determine flow characteristics of a flow constituted by the packet on the basis of the storage unit, and an output unit configured to output the packet received by the input port to a packet transfer apparatus in a load state indicating that a load due to the flow of the flow characteristics is light among a plurality of packet transfer apparatuses according to the flow characteristics determined by the determination unit are provided.

Abstract: An MDF (10) receives MLDv2 received by vCPE (20) that is connected to CPE (50) via a tunnel. When the MLDv2 is received, the MDF (10) determines an edge router (30) that accommodates the CPE (50) being a transmission source of the MLDv2. Then, the MDF (10) instructs the determined edge router (30) to perform copy distribution of contents to the CPE (50) being the transmission source of the MLDv2.

Abstract: A load distribution system has: determination means for determining, upon an input port receiving a packet, a flow attribute indicating whether a flow configured by the packet is a flow that tends to include many long packets or a flow that tends to include many short packets; and output means for outputting the packet to a packet transfer device in a load state indicating that a load applied by the flow of the flow attribute is low, of a plurality of packet transfer devices, in accordance with the flow attribute determined by the determination means.

Abstract: A communication system (1) includes a terminal information acquisition unit configured to acquire version information of an OS of a terminal (10), a comparison unit configured to compare a version of the OS of the terminal (10) acquired by the terminal information acquisition unit with a latest version of the corresponding OS, and a setting unit configured to set, when the version of the OS of the terminal (10) is not the latest version, a path along which traffic of the terminal (10) passes through a security appliance (5), and set, when the version of the OS of the terminal (10) is the latest version, a path along which the traffic of the terminal (10) does not pass through the security appliance (5).

Abstract: There is provided an inspection method including acquiring an inspection image by irradiating a sample with a plurality of electron beams and by simultaneously scanning the sample by the electron beams, performing first correction of a reference image corresponding to the inspection image or second correction of the inspection image based on a plurality of distortions of each of the electron beams and on a position scanned by each of the electron beams in the inspection image, and performing first comparison of the reference image subjected to the first correction with the inspection image or second comparison of the reference image with the inspection image subjected to the second correction.

Abstract: A function management device that manages, in a communication system including a plurality of pieces of customer premises communication equipment and a server capable of providing a function to the plurality of pieces of customer premises communication equipment, the function provided by the server, and includes a resource management unit configured to collect resource information from the plurality of pieces of customer premises communication equipment, a network management unit configured to collect, from the server, network band information of each of the functions, the network band being between the plurality of pieces of customer premises communication equipment and the server, and a function processing unit configured to activate a virtual machine on one of the plurality of pieces of customer premises communication equipment on the basis of the resource information and the network band information to cause a first function selected on the basis of a band occupancy ratio from among the functions provided

Abstract: Provided is a pattern inspection method including: irradiating a substrate with an electron beam, a pattern being formed on the substrate; acquiring an inspection image as a secondary electron image of the pattern; setting a pixel value equal to or less than a first threshold value minus a half of a predetermined detection width of the inspection image and a pixel value equal to or more than the first threshold value plus a half of the predetermined detection width of the inspection image to unprocessed; acquiring a difference image between the inspection image having the pixel value having less than the first threshold value minus the half of the predetermined detection width and the pixel value having more of the first threshold value plus the half of the predetermined detection width being set to unprocessed and a reference image of the inspection image; and performing inspection on the basis of the difference image.

Abstract: A load distribution system has: determination means for determining, upon an input port receiving a packet, a flow attribute indicating whether a flow configured by the packet is a flow that tends to include many long packets or a flow that tends to include many short packets; and output means for outputting the packet to a packet transfer device in a load state indicating that a load applied by the flow of the flow attribute is low, of a plurality of packet transfer devices, in accordance with the flow attribute determined by the determination means.

Abstract: A communication apparatus connected to a virtual apparatus having an address dispensing function via an access network is provided, wherein the communication apparatus includes a communication confirmation unit configured to perform a communication confirmation between the virtual apparatus and the communication apparatus; and an address dispensing unit configured to dispense an address to a user terminal under control of the communication apparatus when communication between the virtual apparatus and the communication apparatus is not able to be confirmed by the communication confirmation unit, and the address dispensing unit causes the user terminal to forcibly release the address when the communication between the virtual apparatus and the communication apparatus is able to be confirmed by the communication confirmation unit.