Abstract: A system performs an application update process based on security management information that is information including meta information for each of a plurality of security services. The application update process is a process for adding one or more security services including a security service that reduces the security risk of an application having a plurality of distributed microservices having a graph structure relationship to the application.

Abstract: Constructed is a network management system which manages, in an integrated manner, a first communication system, a second communication system and a third communication system passed through by packets that are sent and received via wireless communication between a first device and a second device. The network management system performs information setting to these communication systems for dividing a communication system group, which includes these communication systems, into a plurality of logical partitions each corresponding to a plurality of different service levels based on the management information of each of these communication systems. A logical partition corresponding to a service level with regard to each of the plurality of different service levels is a partition passed through by packets that are sent and received via wireless communication between the first device and the second device belonging to that service level.

Abstract: A wireless communication device including a network device, a wireless base station, and a server device includes: a plurality of surfaces that is a plurality of logical network sections; and a control device connected to the network device. The network device has: a plurality of first NW-IFs connected to the server device; and a second NW-IF connected to at least one of a network and wireless base station and connected to any one of the plurality of first NW-IFs. The server device has: a plurality of applications; a plurality of network settings; and a plurality of SV-IFs connected to the plurality of first NW-IFs. Each of the plurality of surfaces includes an application, network setting, SV-IF, and first NW-IF. The control device selects a surface conforming to conditions, and causes the network device to execute surface switching for connecting the second NW-IF to the first NW-IF in the selected surface.

Abstract: An analysis apparatus comprises: a processor; and a storage device that stores a prediction model that predicts results for contributing factors of a group of events, wherein the processor executes: a prediction error calculation process in which, on the basis of a first prediction value attained by providing the prediction model with a first appearance frequency for contributing factors of a first event among the group of events, and results corresponding to the first appearance frequency, a prediction error of the first prediction value is calculated; and an error factor extraction process in which, on the basis of a correlation between a second appearance frequency for a contributing factor of a second event among the group of events and the prediction error calculated by the prediction error calculation process, an error factor of the prediction error is extracted from among the contributing factors of the first event.

Abstract: A system includes a plurality of processing servers connected to a plurality of networks with different address systems. For each module that constitutes an application, a processing server at an arrangement destination of the module has tunneling transmission information. The tunneling transmission information is information representing a module address and a processing server address for each module. The processing server address is an address that follows an address system of a network to which the processing server is connected, while the module address is an address that follows an address system of a virtual network. The processing server specifies the processing server address of the processing server in which a module at a transmission destination of a packet is arranged from the tunneling transmission information, and transmits the packet based on the specified processing server address.

Abstract: Constructed is a network management system which manages, in an integrated manner, a first communication system, a second communication system and a third communication system passed through by packets that are sent and received via wireless communication between a first device and a second device. The network management system performs information setting to these communication systems for dividing a communication system group, which includes these communication systems, into a plurality of logical partitions each corresponding to a plurality of different service levels based on the management information of each of these communication systems. A logical partition corresponding to a service level with regard to each of the plurality of different service levels is a partition passed through by packets that are sent and received via wireless communication between the first device and the second device belonging to that service level.

Abstract: A system performs an application update process based on security management information that is information including meta information for each of a plurality of security services. The application update process is a process for adding one or more security services including a security service that reduces the security risk of an application having a plurality of distributed microservices having a graph structure relationship to the application.

Abstract: An analysis apparatus comprises: a processor; and a storage device that stores a prediction model that predicts results for contributing factors of a group of events, wherein the processor executes: a prediction error calculation process in which, on the basis of a first prediction value attained by providing the prediction model with a first appearance frequency for contributing factors of a first event among the group of events, and results corresponding to the first appearance frequency, a prediction error of the first prediction value is calculated; and an error factor extraction process in which, on the basis of a correlation between a second appearance frequency for a contributing factor of a second event among the group of events and the prediction error calculated by the prediction error calculation process, an error factor of the prediction error is extracted from among the contributing factors of the first event.

Abstract: To analyze communication information correctly and to extract task information, it is provided a network apparatus, which is configured to process packets, the network apparatus comprising: an arithmetic device; a storage device coupled to the arithmetic device; and an interface coupled to an apparatus, the apparatus being configured to transmit and receive packets. The arithmetic device being configured to execute processing in accordance with a predetermined procedure to implement: a reception processing module configured to receive a packet from the apparatus; and a vectorization module configured to convert a scalar value, which is a value of each byte of the received packet, into a vector value based on a predetermined vectorization algorithm.

Abstract: A communication system comprising computers and a management computer, wherein the computers include a communication control unit configured to control a communication using a session of a terminal. The communication control unit manages a database storing in a plurality of pieces of session information. The management computer includes property management information for managing a property of each of the plurality of pieces of session information. The session information migration control unit is configured to: detect a migration trigger of the plurality of pieces of session information stored in a first database; select the plurality of pieces of session information from the plurality of pieces of session information stored in the first database based on the property management information; determine a migration order for the selected plurality of pieces of session information based on the property of the each of the selected plurality of pieces of session information.

Abstract: To reduce a load of an inspection process on a server apparatus . A computer system includes a server apparatus, a gateway apparatus, and a plurality of devices coupled to the gateway apparatus. The gateway apparatus retains a range of a normal value of a device, calculated based on device information, for the plurality of devices, and when device information related to a certain device is not included in a range of a normal value of the device, notifies the server apparatus of the fact that an anomaly with respect to the device has been detected. When the server apparatus receives from the gateway apparatus a notification of the fact that an anomaly has been detected, the server apparatus inspects device information related to the device in which the anomaly had been detected.

Abstract: Appropriate bandwidths are allocated to base stations in response to variations in the arrangement of mobile terminals and according to the type of mobile terminals. Mobile gateways disposed between a plurality of base stations connecting a plurality of mobile terminals and a service network include a base station information acquiring unit that acquires communication capacities of the base stations; a mobile terminal information acquiring unit that acquires a communication capacity of each type of the mobile terminals; a communication bandwidth estimating unit that estimates the communication bandwidths of the base stations on the basis of the acquired communication capacities of the base stations and the acquired communication capacities of mobile terminals; and a communication bandwidth control unit that controls communication bandwidths corresponding to the base stations on the basis of the estimated communication bandwidth.

Abstract: A communication system comprising computers and a management computer, wherein the computers include a communication control unit configured to control a communication using a session of a terminal. The communication control unit manages a database storing in a plurality of pieces of session information. The management computer includes property management information for managing a property of each of the plurality of pieces of session information. The session information migration control unit is configured to: detect a migration trigger of the plurality of pieces of session information stored in a first database; select the plurality of pieces of session information from the plurality of pieces of session information stored in the first database based on the property management information; determine a migration order for the selected plurality of pieces of session information based on the property of the each of the selected plurality of pieces of session information.

Abstract: It is provided a control apparatus being configured to: calculate a number of groups to which plurality of data processing apparatus are to belong; determine an associated group of each of the plurality of data processing apparatus; determine an operational data item to be assigned to the associated group; determine as an assignment destination of the operational data item assigned to the associated group, any one of the data processing apparatus belonging to the associated group whose number is the minimum count or larger, and determine as an assignment destination of a redundant data item, the data processing apparatus that is different front the data processing apparatus corresponding to an assignment destination of the operational data item; and assign based on determination results, the group of operational data items and a group of the redundant data items to the plurality of data processing apparatus.

Abstract: A management and orchestration server which manages a plurality of types of virtualized nodes included in server group includes a scaling executing unit configured to command the server group to scale virtual machines included in each of the plurality of types of virtualized nodes, a traffic load measuring unit configured to manage a traffic load of each of the virtual machines, and a scaling amount determining unit configured to determine a number of the virtual machines to be scaled. In this case, the traffic load measuring unit acquires a traffic load for each of the traffic types to be processed by each of the plurality of types of virtualized nodes, and the scaling amount determining unit determines the type of virtualized node for which virtual machines are to be scaled and a number of machines to be scaled based on the traffic loads of the traffic types.

Abstract: A scale-out of a gateway server is realized according to a rapid increase in communication volume, without incurring system down. A high-quality communication is provided to priority users even during scaling out the gateway server. A high-quality communication is continuously provided to priority users without incurring the system down even if the scale-out/in of the gateway server is repeated. A bandwidth control apparatus transmits packets to plural virtual nodes equipped in a server device, reads the packets from any high priority queue and any low priority queue which are associated with the subject apparatus, and limits the packets to an upper limit bandwidth determined for each of the virtual nodes, and changes association of the high priority queues and the low priority queues with the virtual node bandwidth limiters according to an instruction from the control server for determining the scale-out/in of the virtual node.

Abstract: Appropriate bandwidths are allocated to base stations in response to variations in the arrangement of mobile terminals and according to the type of mobile terminals. Mobile gateways disposed between a plurality of base stations connecting a plurality of mobile terminals and a service network include a base station information acquiring unit that acquires communication capacities of the base stations; a mobile terminal information acquiring unit that acquires a communication capacity of each type of the mobile terminals; a communication bandwidth estimating unit that estimates the communication bandwidths of the base stations on the basis of the acquired communication capacities of the base stations and the acquired communication capacities of mobile terminals; and a communication bandwidth control unit that controls communication bandwidths corresponding to the base stations on the basis of the estimated communication bandwidth.

Abstract: After a first base station connects to a first mobile terminal, a first GW (gateway) receives a request for connection between the first mobile terminal and a second GW and identifiers of the second GW and the first mobile terminal and transmits identifiers of the first mobile terminal and the first GW to the second GW. The second GW transmits an MPLS allocation flag to the first GW. The first GW transmits an MPLS allocation signal including an identifier of the first mobile terminal to the second GW via a second NW (network) apparatus. The first base station receives an identifier of the first GW and the MPLS allocation flag from the first GW via a management server and transmits the MPLS allocation signal including the identifier of the first mobile terminal to the first GW via a first NW apparatus.

Abstract: In packet communication using TCP, a gateway device for relaying communication packets between a mobile node and a correspondent node, temporarily rewrites a parameter of the receive window size of the ACK packet of the TCP communication from the mobile node, to adjust the amount of communication packets transmitted from the correspondent node. Whit this configuration, it is possible to reduce the packet loss due to error control for the existing TCP communication with respect to the mobile node, without converting the mobile node and the correspondent node.

Abstract: Radio communication system includes mobile terminal (UE), plurality of base stations connected by radio to the UE, gateway apparatus (GW) connected to the plurality of base stations, and data distribution server (SV) which is connected to the GW over the Internet and which distributes data to the UE. UE transmits a first data request (DR) and a second DR to the data distribution server through the base station and the GW. When the GW receives the first DR from the base station, GW transmits the received first DR to the data distribution server independent of a radio transmission load state from the base station to the UE. When the GW receives second DR from the base station, GW transmits the received second data request to the data distribution server with delay in accordance with radio transmission load state from the base station.