Abstract: An information processing system includes a storage unit that stores association information that is obtained by associating identifying information of a plurality of second communication networks that are interconnected via a first communication network with identifying information of a virtual device that exists in the second communication network; a first specifying unit that specifies according to the association information a second communication network in which a target virtual device exists, in a case in which the first specifying unit acquires a request for a setting change to the target virtual device; a second specifying unit that specifies a physical server on which the target virtual device runs from among physical servers that exist in the specified second communication network; and a setting unit that performs the setting change to the target virtual device that runs on the specified physical server.

Abstract: A non-transitory computer-readable medium including a program, which when executed by a computer, causes the computer to execute a process including obtaining first information indicating a load in the computer, second information indicating a first amount of communication handled by a virtual switch executed in the computer, and third information indicating a second amount of communication between the computer and another computer; and determining whether to switch from a first mode, in which the virtual machine executes a switch operation, to a second mode, in which the virtual switch and a physical switch that relays a communication of the computer cooperatively execute the switch operation, on the basis of the first information, the second information and the third information.

Abstract: An information processing system includes a storage unit that stores association information that is obtained by associating identifying information of a plurality of second communication networks that are interconnected via a first communication network with identifying information of a virtual device that exists in the second communication network; a first specifying unit that specifies according to the association information a second communication network in which a target virtual device exists, in a case in which the first specifying unit acquires a request for a setting change to the target virtual device; a second specifying unit that specifies a physical server on which the target virtual device runs from among physical servers that exist in the specified second communication network; and a setting unit that performs the setting change to the target virtual device that runs on the specified physical server.

Abstract: A computer-readable recording medium stores therein a patch determination program causing a computer to execute a process including acquiring, from each of nodes constituting a layer 2 network, node information indicating an adjacent node to be selected as a relay destination of data by each of the nodes among adjacent nodes adjacent to each of the nodes; and extracting each route on which the data is relayed in the layer 2 network based on the acquired node information of each of the nodes and connection information between the nodes.

Abstract: A management device includes a storage unit and a processor. The processor is configured to store, when configuration information is updated by one client of a plurality of clients, the updated configuration information, generation information on a generation of the updated configuration information, and identification information of the one client in association with one another in the storage unit. The processor is configured to generate, when restoration to a first generation is requested by a first client, new configuration information with reference to information stored in the storage unit. The new configuration information does not include first contents of first updates made by the first client in second generations later than the first generation and includes second contents of second updates made in the second generations by second clients. The processor is configured to perform a configuration of a network device using the new configuration information.

Abstract: A non-transitory computer-readable medium including a program, which when executed by a computer, causes the computer to execute a process including obtaining first information indicating a load in the computer, second information indicating a first amount of communication handled by a virtual switch executed in the computer, and third information indicating a second amount of communication between the computer and another computer; and determining whether switches from a first mode, in which the virtual machine executes a switch operation, to a second mode, in which the virtual machine and a physical switch that relays a communication of the computer cooperatively execute the switch operation, on the basis of the first information, the second information and the third information.

Abstract: A computer-readable recording medium has stored therein a program for causing a computer to execute a usage mode data generation process. The process comprising (a) reading from a storage device association data associating each of a plurality of different expression formats of component data and a standardized expression format which can be converted to each of the plurality of different expression formats, and (b) based on the association data read at (a), generating according to the standardized expression format standardized usage mode data containing component data from first usage mode data that is usage mode data for a first virtual computer included in a plurality of virtual computers and that contains component data for the connector in a first relay device with the type of a first type expressed in a first expression format corresponding to the first relay device.

Abstract: A computer-readable recording medium stores therein a patch determination program causing a computer to execute a process including acquiring, from each of nodes constituting a layer 2 network, node information indicating an adjacent node to be selected as a relay destination of data by each of the nodes among adjacent nodes adjacent to each of the nodes; and extracting each route on which the data is relayed in the layer 2 network based on the acquired node information of each of the nodes and connection information between the nodes.

Abstract: An unauthorized access prevention system that includes a search unit searching the flowing-in path of the unauthorized access to the services by a Web system disclosed by a user's ISP, a determination unit determining the place to implement a countermeasure for protecting the services from the unauthorized access based on the result of the search, and a notification unit notifying, according to a determination that that the countermeasure is implemented in the flow source that makes the unauthorized access flow into the user's communication network, the determination to the flow source.

Abstract: An unauthorized access prevention system includes a countermeasure method determination unit determining a method of taking countermeasures to protect a destination against unauthorized access based on a rate indicating a probability that predetermined traffic is unauthorized access. The rate is determined by calculating a number of times that the countermeasures were taken and subtracting a number of times that countermeasures were suspended, and dividing the resultant number of times that countermeasures were taken without suspension by the number of times that countermeasures were taken, for the predetermined traffic. The system also includes a storage device storing the number of times that countermeasures were taken and the number of times that countermeasures were taken without suspension. A countermeasure execution control unit controls when to take the countermeasures in the determined method.

Abstract: This invention is to minimize influence to other network by preventing unauthorized accesses such as DDoS attacks and probing by worms. When the blocking apparatuses 10a and 10b detect outbound packets by the DDoS attacks or by the probing by the worm, they carry out the Egress filtering for such outbound packets to prevent the packets relating to the unauthorized access from being sent to the backbone network 1000. Moreover, because a notice to the effect that the unauthorized access is detected is sent to other blocking apparatuses 10c and 10d via the management apparatus 16, for example, the blocking apparatuses 10c and 10d precautionarily carry out the Ingress filtering to prevent the packets relating to the unauthorized access from being sent to the network C and D.

Abstract: This invention is to minimize influence to other network by preventing unauthorized accesses such as DDoS attacks and probing by worms. When the blocking apparatuses 10a and 10b detect outbound packets by the DDoS attacks or by the probing by the worm, they carry out the Egress filtering for such outbound packets to prevent the packets relating to the unauthorized access from being sent to the backbone network 1000. Moreover, because a notice to the effect that the unauthorized access is detected is sent to other blocking apparatuses 10c and 10d via the management apparatus 16, for example, the blocking apparatuses 10c and 10d precautionarily carry out the Ingress filtering to prevent the packets relating to the unauthorized access from being sent to the network C and D.

Abstract: An unauthorized access prevention system includes a countermeasure execution status screen generation unit, a countermeasure execution instruction obtaining unit, and a countermeasure execution control unit. With the configuration, the countermeasure execution status screen generation unit generates a screen on which a case where countermeasures are being taken to protect a destination against unauthorized access in traffic entering a predetermined position on a communications network can be identified. The countermeasure execution instruction obtaining unit obtains an instruction to take the countermeasures to be taken for each type of traffic or an instruction to suspend the countermeasures being taken. The countermeasure execution control unit controls to take the countermeasures or to suspend the countermeasures at the instruction.

Abstract: An unauthorized access prevention system that includes a search unit searching the flowing-in path of the unauthorized access to the services by a Web system disclosed by a user's ISP, a determination unit determining the place to implement a countermeasure for protecting the services from the unauthorized access based on the result of the search, and a notification unit notifying, according to a determination that that the countermeasure is implemented in the flow source that makes the unauthorized access flow into the user's communication network, the determination to the flow source.