Abstract: An anomaly detection apparatus for detecting data flow anomalies classes a plurality of data flows on the basis of similarity in time series changes in the data amounts of the data flows; calculates a correlation coefficient at a normal time and a correlation coefficient at a certain timing between at least two data flows belonging to the same class; and determines that at least one of the at least two data flows is anomalous when a difference between the correlation coefficient at the normal time and the correlation coefficient at the certain timing is greater than a predetermined threshold.

Abstract: The number of IP pools is increased independently of the number of network interfaces coupled to an external network. In response to a registration request requesting registration of an IP address pool, which is a part of an IP address space, in a first network, a control apparatus is configured to cause a processor to execute: generating a logical interface configured to operate as a logical network interface; logically coupling the logical interface to a logical switch; generating a NAT module logically coupled to a second network interface and configured to mutually convert an IP address in the IP address pool and an IP address in a second network; and logically coupling the NAT module to the logical interface.

Abstract: A network system, having: a gateway apparatus set in a network; a physical computer coupled to the gateway apparatus; a virtualization unit that allocates computer resources of the physical computer to virtual machines; and a management computer that manages the physical computer, the virtualization unit, and the gateway apparatus, wherein the management computer includes: a network mapping unit that controls the gateway apparatus by configuring settings in a virtual network and another gateway apparatus and a VLAN coupled to the virtual network; and a virtualization management unit that controls the virtualization unit, wherein the virtualization unit includes: a virtual port coupled to the virtual machines; and a virtual switch that configures settings for the VLAN coupling the virtual port to the gateway apparatus, and wherein the gateway apparatus converts transmissions between a format of the VLAN and a format of the virtual network and performs transmission.

Abstract: A management apparatus executes: receiving from a given communication apparatus where a fault has occurred, fault information; selecting a given flow that passes through the given communication apparatus from among a group of flows on the basis of the identification information of the given communication apparatus included in the fault information; determining whether the communication pattern of the given flow is similar to the given time series data indicating the change over time of the traffic within a period from a set period prior to the fault occurrence date and time to the fault occurrence date and time for the given flow; calculating the certainty that the given flow has been transmitted on the fault occurrence date and time on the basis of a frequency of appearance of the traffic of the communication pattern determined to be similar; and outputting calculation results.

Abstract: A log message grouping apparatus calculates a coincidence degree evaluation value E1 representing the degree of coincidence between minority words, which are relatively low occurrence frequency words, out of the words that form a log message and minority words in another log message. The log message grouping apparatus further calculates an occurrence degree evaluation value E2 representing the degree of occurrence of the combination of a classification value of a log message and the classification value of a past log message on the basis of the occurrence frequency of the combination of the classification values and calculates an association degree evaluation value E3 representing the degree of association between the log message and the past log message on the basis of the coincidence degree evaluation value E1 and the occurrence degree evaluation value E2.

Abstract: The data center (DC) linking system provides a line under specified communication conditions to each tenant, wherein in each DC, a virtual network identifier (i) and/or (ii) serving as a communication type identifier which separates communications of each tenant of each of a plurality of DCs and a virtual network identifier (iii) which is provided by a carrier and serves as a line identifier which separates a plurality of communications having different communication conditions are identified and managed in association with each other; and the communications of each tenant are identified on the basis of the communication type identifier. Any one line identifier for allocating a line having a communication condition desired by a tenant is assigned to each communication identified on the basis of communication content in a transmitting side DC.

Abstract: A data center including: a data center infrastructure including at least one service network accessed by a terminal of a logical infrastructure user and a terminal of a resource user, at least one infrastructure network accessed by the terminal of the resource user, and at least one resource coupled to the service network and the infrastructure network; and a resource management apparatus for managing the infrastructure network, the service network, and the at least one resource, the resource management apparatus being configured to: generate, in response to a request, a logical service network, which is created by virtualizing the service network, a logical infrastructure network, which is created by virtualizing the infrastructure network, and a logical infrastructure in which the at least one resource is allocated to the logical service network and the logical infrastructure network; and provide the logical infrastructure to the terminal of the logical infrastructure user.

Abstract: Provided is a network system including a management device and one or more external networks which connect each of any two of computer systems, wherein the management device acquires communication performance of each of the external networks among a bandwidth, a delay, and a maximum transferable packet, receives a calculation request for the communication performance of a virtual network, specifies a configuration of the requested virtual network, calculates the communication packet of the specified virtual network based on the acquired communication performance of the external network, and provides information of the calculated communication performance of the virtual network to a manager.

Abstract: A communication path switching device is configured to determine whether or not a specified network device where exclusion from a communication path or addition to the communication path is specified through an input device can perform path switching based on the individual pieces of information on a coupling configuration and a presence or absence of an independent control function; refer to a storage device for the individual pieces of information on the coupling configuration and a coupling policy to change the coupling policy according to a result of the determination; and processing of issuing, according to the result of the determination and the individual pieces of information in the storage device, a path switching instruction to a network device having the independent control function and a network device not having the independent control function that are path switching targets on a communication path directed to the specified network device.

Abstract: A network system, having: a gateway apparatus set in a network; a physical computer coupled to the gateway apparatus; a virtualization unit that allocates computer resources of the physical computer to virtual machines; and a management computer that manages the physical computer, the virtualization unit, and the gateway apparatus, wherein the management computer includes: a network mapping unit that controls the gateway apparatus by configuring settings in a virtual network and another gateway apparatus and a VLAN coupled to the virtual network; and a virtualization management unit that controls the virtualization unit, wherein the virtualization unit includes: a virtual port coupled to the virtual machines; and a virtual switch that configures settings for the VLAN coupling the virtual port to the gateway apparatus, and wherein the gateway apparatus converts transmissions between a format of the VLAN and a format of the virtual network and performs transmission.

Abstract: A management apparatus that manages a network apparatus having a packet control function, wherein the network apparatus has configuration information that sets the control function, and wherein the management apparatus has: parameter information that manages settings of the control function of the network apparatus; and an inconsistent data detection module that obtains the configuration information from the network apparatus, and upon comparison of the configuration information with the parameter information, detects, as inconsistent data, information that does not match.

Abstract: A management computer coupled to a network device comprises: a processor; and a storage unit that stores effect determination information that defines conditions for determining an effect of an operation by the network device, the conditions being applied to a combination of setting items for the network device, and wherein the processor executes: to select, from among the combination of setting items, a specific combination matching a combination of a first setting item for the network device and a second setting item associated with the first setting item; to determine whether or not the combination of the first setting item and the second setting item satisfies the conditions applied to the specific combination if the specific combination is selected; to identify the presence or absence of an effect resulting from an operation of the network device on the basis of determination results; and to output identification results.

Abstract: In a traffic information collection system in which a collection node collecting collection information regarding traffic acquired by nodes on a network identifies a collection point of the collection information, a transmission node to transmit the collection information from a designated transmission port and a collection control node are included. The collection control node manages a connection relation of the transmission port of the transmission node and a reception IF of the collection node. The collection control node determines the reception IF of the collection node receiving the collection information acquired at a designated collection point of any node. The collection control node designates the transmission port connected to the determined reception IF with respect to the transmission node and outputs the collection information from the designated transmission port. The collection control node informs the collection node of correspondence information of the collection point and the reception IF.

Abstract: It is provided a network extension system configured to couple a first network system in which a first gateway and a first host computer are capable of communicating to and from each other to a second network system in which a second gateway and a second host computer are capable of communicating to and from each other, the second network system comprising a management apparatus, the network extension system comprising a control apparatus configured to control the management apparatus, the control apparatus being configured to execute: acquisition processing of acquiring network address information of the first host computer; and assignment processing of controlling the management apparatus to assign the network address information of the first host computer that has been acquired in the acquisition processing to the interface that is coupled to the second host computer among the group of interfaces of the second gateway.

Abstract: A data center including: a data center infrastructure including at least one service network accessed by a terminal of a logical infrastructure user and a terminal of a resource user, at least one infrastructure network accessed by the terminal of the resource user, and at least one resource coupled to the service network and the infrastructure network; and a resource management apparatus for managing the infrastructure network, the service network, and the at least one resource, the resource management apparatus being configured to: generate, in response to a request, a logical service network, which is created by virtualizing the service network, a logical infrastructure network, which is created by virtualizing the infrastructure network, and a logical infrastructure in which the at least one resource is allocated to the logical service network and the logical infrastructure network; and provide the logical infrastructure to the terminal of the logical infrastructure user.

Abstract: A communication path switching device is configured to determine whether or not a specified network device where exclusion from a communication path or addition to the communication path is specified through an input device can perform path switching based on the individual pieces of information on a coupling configuration and a presence or absence of an independent control function; refer to a storage device for the individual pieces of information on the coupling configuration and a coupling policy to change the coupling policy according to a result of the determination; and processing of issuing, according to the result of the determination and the individual pieces of information in the storage device, a path switching instruction to a network device having the independent control function and a network device not having the independent control function that are path switching targets on a communication path directed to the specified network device.

Abstract: There is provided a management apparatus including a system configuration information management unit that manages coupling of a virtual switch and a network apparatus; a server information management unit that manages a multicast address to be used as a destination address when communication of a virtual server is converted into multicast communication; a multicast tree management unit that calculates a transfer route for a multicast packet on multiple physical routes; and a switch control unit that notifies the virtual switch or the network apparatus of the transfer route for the multicast packet that has been calculated by the multicast tree management unit, and thereby controls the transfer route for the multicast packet.

Abstract: Protection mechanism is provided for data stored in logical volumes, especially during the time the corresponding host computer is off line. Additionally, integrity check mechanism is provided for logical volume when the host computer is started, so that host computer can detect unauthorized access to its assigned logical volume during off-line period, and execute security check.

Abstract: System and method for archiving web content. The Intranet Web Contents Archive System incorporates one or more of the following modules: ID Management System for managing authentication and authorization information of each user; Data Archive Storage configured to directly access a web service and capture a web page using identification information of a certain user or a group; and a Web Service configured to communicate with ID management system and validate a request from the Data Archive Storage. In one implementation, the Data Archive Storage creates and stores additional information for the captured web page including the identification information of the user.

Abstract: The storage system extracts virtual machine resource files based on sources of accesses. In one embodiment, a storage system comprises a network attached storage (NAS) device which is connected to a plurality of computer devices via a network. The NAS device is configured, (i) in response to a request to access a virtual machine resource which is recognized by the NAS device through identification information associated with the request as one that does not require content access to the virtual machine resource, to show the virtual machine resource without content access; and (ii) in response to a request to access a virtual machine resource which is recognized by the NAS device through identification information associated with the request as one that requires content access to the virtual machine resource, to show the virtual machine resource with content access.