Abstract: A control device that controls a communication system in which a network device and a virtual network device on a cloud communicate with each other through a tunnel, the control device including: a calculation unit that calculates a predicted value of the number of future setting entries in the virtual network device; an autoscale execution unit that executes scale-out or scale-in of the virtual network device on the basis of a result of comparison between the predicted value and a threshold; and a control unit that performs routing control between an application and the virtual network device in a service platform on the cloud.

Abstract: A control apparatus configured to, in a network constituted by the multiple communication apparatuses, control one or more anchor nodes designated in advance among the multiple communication apparatuses, includes: a route creation unit configured to create route information including labels of communication apparatuses or links to be passed through, based on an input required condition; a route compression unit configured to divide the labels included in the route information in units of anchor nodes, and compress at least a portion of the labels included in the route information into a compressed label that can be expanded in at least one anchor node among the communication apparatuses determined based on the route information, so as not to exceed a processing limit of a communication apparatus determined based on the route information; and a distribution unit configured to distribute information for expanding the compressed label to the at least one anchor node.

Abstract: A control apparatus configured to control communication between locations includes a database configured to store, for each location, a key and an IP address of CPE in association with each other, a search section configured to receive a CPE address request message including a key of a communication destination from CPE of a certain location and search the database to acquire an IP address of CPE corresponding to the key of the communication destination, and a response section configured to transmit the IP address of the CPE acquired by the search section to the CPE that is a transmission source of the CPE address request message.

Abstract: A thermistor layer of the present invention is configured to be disposed in an electrical current path. The thermistor layer comprises a thermosensitive particle, a plurality of electro-conductive particles covering a surface of the thermosensitive particle, and a binder adhering the electro-conductive particles, the electro-conductive particles form an electro-conductive network, at least the surface of the thermosensitive particle is made of a thermoplastic resin, the thermoplastic resin softens at a temperature lower than a temperature at which the binder softens, and the thermistor layer is provided to become highly resistive due to softening and deformation of the thermoplastic resin.

Abstract: A control device that controls a communication system in which a network device and a virtual network device on a cloud communicate with each other through a tunnel, the control device including: a calculation unit that calculates a predicted value of the number of future setting entries in the virtual network device; an autoscale execution unit that executes scale-out or scale-in of the virtual network device on the basis of a result of comparison between the predicted value and a threshold; and a control unit that performs routing control between an application and the virtual network device in a service platform on the cloud.

Abstract: Provided is an infection-spreading attack detection system and method, as well as a program enabling an occurrence of an infection-spreading attack to be detected with high accuracy. A first feature amount is calculated based on traffic information on a packet transferred by a transfer device, and M partial address space(s) are identified to be a monitoring target based on the first feature amount. A second feature amount is calculated for each of the M partial address space(s) based on the traffic information related to the M partial address space(s). Abnormality detection determination is performed on each of the M partial address space(s) based on the second feature amount. Whether the infection-spreading attack has occurred is determined by evaluating M determination results.

Abstract: A DDoS handling device configured to handle communication directed to a target of a DDoS attack flowing in from an adjacent autonomous system in an autonomous system provided with a plurality of mitigating locations includes: a load distribution determination unit configured to determine whether or not to execute load distribution processing on the basis of an amount of available resources at mitigating locations corresponding to a gateway device into which the communication directed to the target flows and an amount of the communication directed to the target in a case in which at least one attack has been detected; a load distribution processing unit configured to decide mitigating locations to be used to handle the communication directed to the target from among the plurality of mitigating locations to solve shortage of resources at the mitigating locations for each attack, in a case in which the load distribution determination unit determines to execute the load distribution processing; and an attack hand

Abstract: An occurrence of an infection-spreading attack and an attack source thereof are detected with high accuracy. A first feature value is calculated based on traffic information regarding a packet forwarded by a forwarding device, and M partial address spaces to be monitored are specified based on the first feature value. A second feature value is calculated for each address of a terminal in a network, based on traffic information regarding the M partial address spaces, the second feature value is learned to classify terminal addresses into a plurality of clusters, and whether or not each of the clusters is an infection-spreading attack is determined to generate cluster information. Whether or not an infection-spreading attack has occurred and an address of a terminal that is an attack source are specified based on the second feature value and the cluster information.

Abstract: A communication management apparatus suppresses occurrence of a communication anomaly in a cluster by including: an acquisition unit acquiring quantities of traffic of communications performed by one or more communication units operating in each of a plurality of computers constituting a cluster; a prediction unit predicting future quantities of traffic of the communications; an identification unit calculating, for each of the computers, a total of the future quantities of traffic of the communication units operating in the computer and identifying a first computer for which the total exceeds a threshold; and a move control unit controlling, for a communication unit operating in the first computer, move to a second computer.

Abstract: A path information managing apparatus includes a storage unit configured to store, in association with a virtual IP address, a locator of each of a plurality of aggregation routers and a locator of each of a plurality of virtual accommodation routers that are accommodated in each aggregation router and accommodate cluster, an acquisition unit configured to acquire the locator of the aggregation router associated with the virtual IP address and the locator of each virtual accommodation router, in response to an inquiry for a virtual IP address to a destination of a packet, the inquiry being transmitted from an accommodation router that receives the packet from a terminal, and a transmission unit configured to transmit, to the accommodation router, the acquired locator of the aggregation router, the acquired locator of each virtual accommodation router, and a weight of each virtual accommodation router, or the locator of any virtual accommodation router.

Abstract: An information provision apparatus includes a memory configured to store personal data for each user, and a processor coupled to the memory and configured to in response to receiving a request for first personal data of a first user from a terminal device, determine difference between first data stored in the memory as the first personal data at a first time of receiving the request and second data stored in the memory as the first personal data at a second time before the first time, provision of the second data being permitted, perform, in accordance with the difference, determination of whether provision of the first data is permitted, and when it is determined that the provision of the first data is permitted, transmit the first data to the terminal device.

Abstract: A communication device for use in a system including a database storing a unique identifier and position information for every mobile communication terminal is provided with an acquisition unit that acquires, based on the unique identifier of a mobile communication terminal serving as a communication destination, the position information of the mobile communication terminal serving as the communication destination from the database, and acquires an IP address of a router accommodating the mobile communication terminal serving as the communication destination, based on the acquired position information, and a communication unit that transmits a packet having the IP address in a header.

Abstract: A communication management apparatus suppresses occurrence of a communication anomaly in a cluster by including: an acquisition unit acquiring quantities of traffic of communications performed by one or more communication units operating in each of a plurality of computers constituting a cluster; a prediction unit predicting future quantities of traffic of the communications; an identification unit calculating, for each of the computers, a total of the future quantities of traffic of the communication units operating in the computer and identifying a first computer for which the total exceeds a threshold; and a move control unit controlling, for a communication unit operating in the first computer, move to a second computer.

Abstract: A control apparatus configured to control communication between locations includes a database configured to store, for each location, a key and an IP address of CPE in association with each other, a search section configured to receive a CPE address request message including a key of a communication destination from CPE of a certain location and search the database to acquire an IP address of CPE corresponding to the key of the communication destination, and a response section configured to transmit the IP address of the CPE acquired by the search section to the CPE that is a transmission source of the CPE address request message.

Abstract: A DDoS attack handling technology is provided in which even when a plurality of IP addresses are attacked at the same time, resource load distribution between sites can be achieved while an increase in delay of target-addressed communications due to the handling of DDoS attacks is prevented. A DDoS handling apparatus 100 includes a load distribution determination unit 112 that determines whether load distribution processing is necessary, a processability determination unit 113 that determines whether load distribution processing is capable of being performed within a desired time, a grouping processing unit 115 that groups target-addressed communications into a plurality of groups, a load distribution processing unit 116 that determines, for each group, a mitigation site to be used to handle the target-addressed communications from among a plurality of mitigation sites, and an attack handling setting unit 117 that performs route control of the target-addressed communications.

Abstract: A communication system realizes End-to-End communication between communication devices via at least one service function by using Segment Routing IPv6. The communication system includes: transfer means for transferring a packet received from one of the communication devices at a communication origin of the End-to-End communication, by using an abstracted ID obtained by abstracting a segment ID in a prescribed range determined in advance; and conversion means for converting, upon receipt of the packet including the abstracted ID, the abstracted ID into an address or a segment ID of a service function instance providing the service function.

Abstract: A control apparatus configured to, in a network constituted by the multiple communication apparatuses, control one or more anchor nodes designated in advance among the multiple communication apparatuses, includes: a route creation unit configured to create route information including labels of communication apparatuses or links to be passed through, based on an input required condition; a route compression unit configured to divide the labels included in the route information in units of anchor nodes, and compress at least a portion of the labels included in the route information into a compressed label that can be expanded in at least one anchor node among the communication apparatuses determined based on the route information, so as not to exceed a processing limit of a communication apparatus determined based on the route information; and a distribution unit configured to distribute information for expanding the compressed label to the at least one anchor node.

Abstract: A connector includes a terminal that is to be contacted with a conductive member of a wire, a housing in which the terminal is arranged, and a holding member that is fit in the housing and in contact with the terminal to hold a position of the terminal. At least one of the terminal and the housing includes a pressing portion that presses the conductive member in a direction such that the conductive member comes in contact with the terminal.

Abstract: An occurrence of an infection-spreading attack and an attack source thereof are detected with high accuracy. A first feature value is calculated based on traffic information regarding a packet forwarded by a forwarding device, and M partial address spaces to be monitored are specified based on the first feature value. A second feature value is calculated for each address of a terminal in a network, based on traffic information regarding the M partial address spaces, the second feature value is learned to classify terminal addresses into a plurality of clusters, and whether or not each of the clusters is an infection-spreading attack is determined to generate cluster information. Whether or not an infection-spreading attack has occurred and an address of a terminal that is an attack source are specified based on the second feature value and the cluster information.

Abstract: A DDoS attack handling technology is provided in which even when a plurality of IP addresses are attacked at the same time, resource load distribution between sites can be achieved while an increase in delay of target-addressed communications due to the handling of DDoS attacks is prevented. A DDoS handling apparatus 100 includes a load distribution determination unit 112 that determines whether load distribution processing is necessary, a processability determination unit 113 that determines whether load distribution processing is capable of being performed within a desired time, a grouping processing unit 115 that groups target-addressed communications into a plurality of groups, a load distribution processing unit 116 that determines, for each group, a mitigation site to be used to handle the target-addressed communications from among a plurality of mitigation sites, and an attack handling setting unit 117 that performs route control of the target-addressed communications.