Abstract: Provided is a determination device including an acquisition unit that acquires a vulnerability identifier for uniquely identifying a vulnerability, a search unit that searches for vulnerability information identified by the vulnerability identifier by referring to a database in which vulnerability information for each vulnerability identifier is registered, a generation unit that generates an instruction to determine necessity of responding to a vulnerability identified by the vulnerability identifier by using the vulnerability information identified by the vulnerability identifier and a norm regarding information security, and an output unit that outputs determination data including a determination result output from a model in response to the instruction.

Abstract: An execution support device according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: receive a request for a procedure of processing on a target; specify a target task by using a model that specifies the target task, from history information and a target request that is the received request, among a plurality of tasks each of which includes an individual task, the history information including information indicating a task on which execution has been completed in the processing; derive a procedure of executing a target individual task from information of the target task and already obtained information in information of the target, the target individual task being the individual task to be executed next in the individual task included in the target task; and present the procedure.

Abstract: A diagnosis support device according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: extract a device characteristic indicating information related to security of a target device from information of the target device; determine, from the device characteristic, a magnitude of a device risk based on a magnitude of a risk of a security item that is a predetermined item related to security, the device risk being a risk that is capable of existing in the target device; and output a magnitude of the device risk.

Abstract: An extraction unit extracts damage information including a keyword related to content of a case of damage caused by a certain type of vulnerability in information security, from a document describing the case of damage; a generation unit generates an explanation regarding the case of damage by using the damage information extracted from the document; and an output unit outputs information based on the generated explanation.

Abstract: Provided is an information presentation device including an acquisition unit that acquires document data regarding cybersecurity, an extraction unit that extracts a candidate for an entity related to the cybersecurity from the acquired document data, a search unit that searches for relevant information associated with the extracted candidate, a generation unit that generates an instruction to request identification of an entity related to security, which is included in the document data, by using the document data and the relevant information extracted for each candidate, and an output unit that outputs attack information including an entity output from a model in response to the instruction.

Abstract: A setting unit (11) sets a path or a procedure for a cyber attack that is obtained through analysis of a risk to a communication system. A collection unit (12) collects safety information that is associated with safety in terms of information security regarding the constituent apparatuses of a communication system. An evaluation unit (13) evaluates the magnitude of a security risk present in the communication system, in accordance with the path or procedure for the cyber attack, on the basis of the security information, the security risk to a constituent apparatus related to the path or procedure for the cyber attack being evaluated to be lower when inspection for information security has been carried out on the constituent apparatus related to the path or procedure for the cyber attack than when inspection for information security is not carried out.

Abstract: An information presentation device includes an acquisition unit that acquires attack data including an attack technique in a cyberattack test, a search unit that searches for a method for using a security tool correlated with the attack technique, a generation unit that generates an instruction to request presentation of an attack instruction using the method for using the security tool found in the search, and an output unit that outputs attack instruction data including the attack instruction output from a model in response to an input of the instruction.

Abstract: Whether the information indicated by a plurality of pieces of text data describing an information security-related event is consistent is determined. An acquisition unit acquires a plurality of pieces of text data describing an information security-related event; an analysis unit analyzes whether information indicated by the pieces of acquired text data is consistent by using information security-related knowledge information; and an output unit outputs information based on an analysis result as to whether the information indicated by the pieces of text data is consistent.

Abstract: To provide a virtual model for a communication system, the virtual model being required for specific diagnosis of the security risk of the communication system. An acquisition unit (11) acquires the inspection result of an information security inspection on a device constituting a communication system, an extraction unit (12) extracts, from the inspection result, security inspection information including at least one of first information about a library function used by the constituent device or second information about the presence or absence of access to a file via the library function, and a generation unit (13) generates a virtual model for the communication system by using configuration information for identifying a constituent component of an information communication device and the security inspection information.

Abstract: A diagnostic device according to an aspect of the present disclosure includes: at least one memory storing a set of instructions; and at least one processor configured to execute the set of instructions to: estimate a management impact that is a magnitude of influence on revenue loss resulting due to an attack on a device included in a diagnostic target system based on information on a purpose of the device; identify an entry point device and an attack target device in the device by using information on a configuration of the diagnostic target system and the management impact of the device; detect an attack route through which the attack from the entry point device to the attack target device is capable of being successful; and output information on a diagnostic result indicating the management impact due to the attack on the attack target device through the detected attack route.

Abstract: An attack scenario generating apparatus including: first attack step detection unit executes an attack simulation on a first virtual model obtained from a storage device in which a plurality of virtual models used to represent a target system are stored, and detects a first attack step that satisfies a damage condition with which damage occurs in the first virtual model; an input/output condition extraction unit extracts an input condition or an output condition of the first virtual model from the detected first attack step, or both the input condition and the output condition; a second attack step detection unit executes an attack simulation on a second virtual model obtained from the storage device, and detects a second attack step in which output of the second virtual model satisfies the input condition; and a combination unit combines the first attack step and the second attack step to generate an attack scenario.

Abstract: An information management apparatus acquires first evaluation information for at least a first element among a plurality of elements constituting an information system in a first stage, and registers first configuration information corresponding to the first element and the first evaluation information in a database in association; acquires first state information indicating a state of the first element in a second stage other than the first stage, and registers the first configuration information and the first state information in the database in association; and, in response to a display request, displays a plurality of pieces of configuration information respectively corresponding to the plurality of elements in a connection form based on a relationship between the elements, and displays the first configuration information, the first state information, and the first evaluation information in a connection form based on an association in the database.

Abstract: A power transmission resin gear includes an annular resin part having, on an outer peripheral surface thereof, teeth of a gear. The annular resin part includes an annular inner resin member that covers an outer periphery of a core metal and an annular outer resin member that covers an outer periphery of the annular inner resin member. The annular inner resin member has a plurality of axially downgauged portions arranged at intervals in a circumferential direction. The annular outer resin member has filling portions respectively filling the axially downgauged portions and an axial surface covering portion that is located radially inward of a tooth side of the teeth and covers the filling portions.

Abstract: Generation of an attack scenario to be used for risk analysis of a system to be analyzed is enabled without depending on the technique and the knowledge of a person who creates it. An analysis result acquisition means acquires a risk analysis result of a first risk analysis performed on a system to be analyzed. A condition acquisition means acquires conditions for an attack scenario to be used for a second risk analysis on the basis of an attack scenario table and the risk analysis result. An attack scenario generation means generates an attack scenario to be used for the second risk analysis on the basis of the conditions for the attack scenario acquired by the condition acquisition means.

Abstract: To provide a virtual model for a communication system, the virtual model being required for specific diagnosis of the security risk of the communication system. An acquisition unit (11) acquires the inspection result of an information security inspection on a device constituting a communication system, an extraction unit (12) extracts, from the inspection result, security inspection information including at least one of first information about a library function used by the constituent device or second information about the presence or absence of access to a file via the library function, and a generation unit (13) generates a virtual model for the communication system by using configuration information for identifying a constituent component of an information communication device and the security inspection information.

Abstract: A data distribution system that distributes an encrypted data from a transmitting device to a receiving device via a relay device with support by a key issuing device, wherein the key issuing device is configured to generate public parameters for ElGamal encryption and a secret key for attribute-based encryption, send the public parameters to the transmitting device and keep the secret key; and the transmitting device is configured to encrypt data by the public parameters, create a user defined policy for each data ID, attach the defined policy for the corresponding data ID to the encrypted data and send the encrypted data with the user defined policy to the relay device.

Abstract: A fitting nut made of a resin material includes: a hollow, large-diameter tube portion having a female thread formed on its inner peripheral wall; and a small-diameter tube portion that is continuous to the large-diameter tube portion and having a hollow cylindrical shape with a smaller diameter than the large-diameter tube portion. The small-diameter tube portion includes, in the outer peripheral wall thereof, a plurality of engagement grooves that are depressed inwardly in the diameter direction of the small-diameter tube portion and extend along the longitudinal direction that is orthogonal to the diameter direction.

Abstract: A fitting nut made of a resin material includes: a hollow, large-diameter tube portion having a female thread formed on its inner peripheral wall; and a small-diameter tube portion that is continuous to the large-diameter tube portion and having a hollow cylindrical shape with a smaller diameter than the large-diameter tube portion. The small-diameter tube portion includes, in the outer peripheral wall thereof, a plurality of engagement grooves that are depressed inwardly in the diameter direction of the small-diameter tube portion and extend along the longitudinal direction that is orthogonal to the diameter direction.

Abstract: Attack path information includes information about an attack path including at least one attack step including an attack source, an attack destination, and an attack method. Vulnerability specification means refers to the attack path information and thereby specifies vulnerabilities exploitable by an attack on the attack destination in the attack step. In the vulnerability information DB, vulnerabilities and presence/absence of exploit codes for the vulnerabilities are stored and associated with each other. Diagnosis evaluation generation means refers to the vulnerability information DB, and thereby examines whether or not there is an exploit code for the specified vulnerability and generates, for the attack step, a risk diagnosis evaluation including the number of specified vulnerabilities and the presence/absence of the exploit codes therefor. Output means outputs the attack step and the risk diagnosis evaluation while associating them with each other.

Abstract: To provide a virtual model for a communication system, the virtual model being required for specific diagnosis of the security risk of the communication system. An acquisition unit (11) acquires the inspection result of an information security inspection on a device constituting a communication system, an extraction unit (12) extracts, from the inspection result, security inspection information including at least one of first information about a library function used by the constituent device or second information about the presence or absence of access to a file via the library function, and a generation unit (13) generates a virtual model for the communication system by using configuration information for identifying a constituent component of an information communication device and the security inspection information.