Abstract: An information processing apparatus includes processing circuitry configured to acquire a security log including information regarding unauthorized communication stored in an upper network device being a device constituting an overlay network, an authentication log stored in a cloud server, and a communication log stored in a lower network device being a device constituting an underlay network, specify information such that, when the authentication log includes a connection source IP address that does not exist in the communication log acquired and the security log includes information regarding an access not permitted to be used from the connection source IP address, the processing circuitry specifies the information regarding the access as unauthorized communication, and give an instruction to block the unauthorized communication specified.

Abstract: The information processing system is an information processing system includes an upper network device being a device constituting an overlay network and a lower network device being a device constituting an underlay network. In this system, the upper network device includes first processing circuitry configured to detect unauthorized communication, specify at least one of a communication destination and a communication source of the unauthorized communication using information regarding the unauthorized communication detected, notify the lower network device of at least one of the communication destination and the communication source of the specified unauthorized communication. The lower network device includes second processing circuitry configured to acquire information related to communication of a terminal connected to the lower network device, and block unauthorized communication based on the information regarding the unauthorized communication notification of which is provided.

Abstract: An information processing apparatus includes processing circuitry configured to acquire a security log including information regarding unauthorized communication stored in an upper network device being a device constituting an overlay network, an authentication log stored in a cloud server, and a communication log stored in a lower network device being a device constituting an underlay network, specify information such that, when the authentication log includes a connection source IP address that does not exist in the communication log acquired and the security log includes information regarding an access not permitted to be used from the connection source IP address, the processing circuitry specifies the information regarding the access as unauthorized communication, and give an instruction to block the unauthorized communication specified.

Abstract: An information processing system includes an upper network device being a device constituting an overlay network, and a lower network device being a device constituting an underlay network. The upper network device includes first processing circuitry configured to detect unauthorized communication, and notify the lower network device of information related to the unauthorized communication detected, and the lower network device includes second processing circuitry configured to acquire information related to communication of a terminal connected to the lower network device, determine an inconsistency level among a plurality of pieces of flow data in the underlay network having the same connection destination address as the information related to unauthorized communication notification of which is provided, and block the information related to unauthorized communication notification of which is provided as unauthorized communication in accordance with the inconsistency level determined.

Abstract: An information processing system is an information processing system including an upper network device being a device constituting an overlay network and a lower network device being a device constituting an underlay network. In this system, the upper network device includes first processing circuitry configured to block unauthorized communication notification of which is provided from the lower network device based on information regarding unauthorized communication and the lower network device includes second processing circuitry configured to acquire information related to communication of a terminal connected to the lower network device, detect unauthorized communication based on the acquired information related to communication of a terminal connected to the lower network device, and notify the upper network device of information regarding the detected unauthorized communication.