Abstract: An identification apparatus includes processing circuitry configured to determine whether or not a first image and a second image are similar based on feature points extracted from each of the first image and the second image, and determine whether or not the first image and the second image are similar by comparing neighborhood graphs generated for each of the first image and the second image, the feature points being as nodes.

Abstract: A feature extraction unit extracts, from an advertising request to view an online advertisement, client information on a client as a transmission source of the advertising request and publisher information on a website of a publisher who displays advertising, and calculates a predetermined feature amount using the client information and the publisher information with respect to a plurality of advertising requests including at least a benign advertising request, and a determiner generation unit generates a determiner that determines whether an advertising request is malignant or not by using the calculated feature amount.

Abstract: A level estimation apparatus includes processing circuitry configured to receive event logs of events detected by a device or software, and calculate degrees of similarity among the events indicated by the event logs with use of the event logs, and estimate a level of a predetermined event based on the calculated degrees of similarity among the events and a level of at least one of the events, wherein in the calculation of the degrees of similarity among the events, when a degree of similarity between events detected by different devices or items of software is calculated, a degree of similarity to a common event is used, the common event being an event that has been detected mutually by the different devices or items of software.

Abstract: An identification apparatus includes processing circuitry configured to determine whether or not a first image and a second image are similar based on feature points extracted from each of the first image and the second image, and determine whether or not the first image and the second image are similar by comparing neighborhood graphs generated for each of the first image and the second image, the feature points being as nodes.

Abstract: A conversion unit converts directions of edges between vertices in a graph to arguments on a complex plane. A generation unit generates a Hermitian matrix that represents a relationship between vertices in the graph by using the arguments converted by the conversion unit. A calculation unit calculates eigenvectors of the Hermitian matrix generated by the generation unit. A signal processing unit performs graph signal processing such as graph Fourier transform taking the eigenvectors calculated by the calculation unit to be a Fourier basis for a graph Laplacian.

Abstract: A feature extraction unit extracts, from an advertising request to view an online advertisement, client information on a client as a transmission source of the advertising request and publisher information on a website of a publisher who displays advertising, and calculates a predetermined feature amount using the client information and the publisher information with respect to a plurality of advertising requests including at least a benign advertising request, and a determiner generation unit generates a determiner that determines whether an advertising request is malignant or not by using the calculated feature amount.

Abstract: A data classification device includes: a known data input unit that receives an input of known data, the known data being data already classified into a class and a subclass subordinate to the class; a feature extraction unit that extracts, from features included in the known data, a feature that causes classification of the known data belonging to the same class into a subclass using the feature to fail; and a classification unit that classifies classification target data into a class using the feature extracted by the feature extraction unit.

Abstract: An unauthorized-access detection device in which when a relationship between information regarding a request transmitted from a terminal operated by a user to a service server that provides a service, which is acquired by a request acquisition unit, and information regarding a query transmitted from the service server to a DB that accumulates information regarding the service, which is acquired by a query acquisition unit, is different from a normal pattern, a detection unit detects the query as unauthorized access to the DB.

Abstract: In a ring redundant communication path control method, each of transfer apparatuses periodically transmits an inspection frame for inspecting a communication path, detects a failure of the communication path when the inspection frame is not received for a fixed time, transmits a non-arrival notification frame for notifying that the inspection frame has not arrived yet, and detects a failure of the communication path when the non-arrival notification frame is received.

Abstract: An edge Bridge (2A) executes Ethernet encapsulation. Even when redundant MAC addresses are used in the network of a customer, the MAC address of the customer is not referred to in a backbone network (1). Since forwarding is done on the basis of a MAC address added by the edge Bridge (2A), correct forwarding is possible. Additionally, in the edge Bridge (2A), a Service VLAN ID based on the customer-facing port which has received a customer MAC frame and the VLAN ID in the customer MAC frame is added to the customer MAC frame, thereby building a completely closed network for each customer. The customer can belong to a plurality of Service VLANs through a single customer-facing port and select, by a VLAN ID, a Service VLAN to which he/she should belong.

Abstract: In receiving a MAC (media access control) frame whose destination address is any of a broadcast address, an unknown multicast address and an unknown unicast address, the flooding is reduced by broadcasting the received MAC frame to all the other ports than one that has received the MAC frame. An output control that attains this object is realized by using a destination group identifier (ID) look-up table (2-T1) which enables a look-up of a destination group ID by using, as a key, any one or combination of header information of the MAC frame, a port which received the MAC frame and a service VLAN (virtual local area network) ID corresponding to the MAC frame and a backbone port look-up table (2-T2) which enables a look-up of at least one backbone port which is to transmit or at least one backbone port which is not to transmit by using the destination group ID as a key.

Abstract: In receiving a MAC (media access control) frame whose destination address is any of a broadcast address, an unknown multicast address and an unknown unicast address, the flooding is reduced by broadcasting the received MAC frame to all the other ports than one that has received the MAC frame. An output control that attains this object is realized by using a destination group identifier (ID) look-up table (2-T1) which enables a look-up of a destination group ID by using, as a key, any one or combination of header information of the MAC frame, a port which received the MAC frame and a service VLAN (virtual local area network) ID corresponding to the MAC frame and a backbone port look-up table (2-T2) which enables a look-up of at least one backbone port which is to transmit or at least one backbone port which is not to transmit by using the destination group ID as a key.

Abstract: In a ring redundant communication path control method, each of transfer apparatuses periodically transmits an inspection frame for inspecting a communication path, detects a failure of the communication path when the inspection frame is not received for a fixed time, transmits a non-arrival notification frame for notifying that the inspection frame has not arrived yet, and detects a failure of the communication path when the non-arrival notification frame is received.

Abstract: An edge Bridge (2A) executes Ethernet encapsulation. Even when redundant MAC addresses are used in the network of a customer, the MAC address of the customer is not referred to in a backbone network (1). Since forwarding is done on the basis of a MAC address added by the edge Bridge (2A), correct forwarding is possible. Additionally, in the edge Bridge (2A), a Service VLAN ID based on the customer-facing port which has received a customer MAC frame and the VLAN ID in the customer MAC frame is added to the customer MAC frame, thereby building a completely closed network for each customer. The customer can belong to a plurality of Service VLANs through a single customer-facing port and select, by a VLAN ID, a Service VLAN to which he/she should belong.