Abstract: An integrated ECU, which is a monitoring apparatus, includes: a virtual command generator that obtains a physical signal and converts the physical signal into a virtual command; a virtual command notifier that transmits the virtual command to a control virtual machine; and a virtual command preparation component that causes a first command monitor to monitor the virtual command after the virtual command has been transmitted to the control virtual machine by the virtual command notifier.

Abstract: A monitoring device runs on a first virtual machine in which one or more monitoring programs operate, the first virtual machine being included in the two or more virtual machines, the one or more monitoring programs being for monitoring a command. The monitoring device includes a processor and a non-transitory memory. The processor executes a program to cause the monitoring device to operate as: a command receiver that receives a command transmitted or received in a process operating in a second virtual machine; a configuration information obtainer that obtains configuration information on the second virtual machine; a monitoring program controller that determines an execution method for executing the one or more monitoring programs, according to the configuration information and the feature of the command; and an anomaly responder that sends notice of an anomaly when the anomaly is included in a result of monitoring the command.

Abstract: The present invention relates to an optical filter including a resin base material including an infrared-absorbing pigment layer, and a pair of inorganic dielectric layers which are respectively disposed on or above both main surfaces of the resin base material as outermost layers, in which at least one of the pair of inorganic dielectric layers satisfies at least one of a condition in which a film thickness is 4 ?m or greater, and a condition in which the number of layers is 30 or greater, and a ratio of a total film thickness of the pair of inorganic dielectric layers to a film thickness of the resin base material is greater than 8%.

Abstract: A monitoring device provided in an in-vehicle system included in a vehicle includes: a monitoring unit that detects a security anomaly in the in-vehicle system; an emergency system control device (emergency system control unit 58) that switches from a first operating mode to a second operating mode different from the first operating mode when the monitoring unit detects the security anomaly; and a normal system control device (normal system control unit) that switches from the second operating mode to the first operating mode in response to, after switching to the second operating mode, completion of an update of software for resolving the security anomaly in the in-vehicle system.

Abstract: An anomaly detection device includes a processor and a non-transitory memory that stores a program. The processor executes the program to operate an anomaly detection device as an obtainer that obtains a first object detection result generated by a first object detection device that is included in a first apparatus which is a vehicle and detects an object in the vicinity of the first apparatus and a second object detection result generated by a second object detection device that is included in a second apparatus in the vicinity of the first apparatus and detects an object in the vicinity of the second apparatus; a determiner that determines whether at least one of the first apparatus or the second apparatus is being attacked, by comparing the first object detection result and the second object detection result; and an outputter that outputs a result of determination by the determiner.

Abstract: A service broker that is connected to each of a server unit and a client unit in a service offer system for offering a service from the server unit to the client unit by way of a service oriented communication includes: a communication controller that receives a frame for use in offer of the service, from the server unit or the client unit; and a service manager that determines whether a combination of a service identifier included in the frame received by the communication controller, an identifier indicating one of a transmission source and a destination of the frame, and a type of the frame is appropriate, and provides output of a result of the determination.

Abstract: An anomaly handling method in an in-vehicle network includes: transmitting and receiving frames; detecting a frame having an anomaly; and switching, when the anomaly is detected in the detecting, a transmission timing of the frame in which the anomaly is detected. The switching includes changing a switched transmission timing to which the transmission timing is switched, according to predetermined information.

Abstract: An integrated ECU includes: a host virtual machine; an anomaly detector that detects a security anomaly in the host virtual machine; a service list storage that stores a service list indicating a list of a plurality of services executed by the in-vehicle system; a determiner that determines a specific service from among the plurality of services indicated in the service list when the anomaly detector detects the security anomaly, the specific service being a service which needs to be stopped or needs a change in a setting in order to resolve the security anomaly; and an anomaly countermeasures unit that executes an anomaly countermeasures process of stopping the specific service or changing the setting of the specific service, based on a determination result of the determiner.

Abstract: The control network system is connected to electronic control unit(s) and a communication device, and includes security sensor(s) that transmits a security alert indicating that an indication of a security breach is detected to the network, if the indication is detected in at least one of the network, the electronic control unit(s), or the communication device. The intrusion path analysis device includes: an alert obtainer that obtains the security alert from the security sensor(s); an event obtainer that obtains an event history of an event that occurs in the control network system; and an intrusion path analyzer that performs an analysis on an intrusion path of an attack on the basis of the security alert, the event history, and an intrusion depth indicating an intrusion level to be assumed in a case the security alert occurs, and that outputs a result of the analysis.

Abstract: A vehicle log transmission device includes: an anomaly detector that obtains a vehicle log from at least one electronic control unit, detects an anomaly based on log information in the vehicle log, and extracts log information in which the anomaly is detected as an anomaly log; an anomaly notifier that transmits the anomaly log to a server; a change instructor that, based on a vehicle state extracted from the vehicle log, transmits, to the at least one electronic control unit, a change instruction to change a save priority level of the log information included in the vehicle log; and a vehicle log request responder that, when a vehicle log request is received, obtains the vehicle log including log information saved based on the save priority level changed in response to the change instruction, and transmits the vehicle log obtained to the server.

Abstract: An anomaly handling method in an in-vehicle network includes: transmitting and receiving frames; detecting a frame having an anomaly; and switching, when the anomaly is detected in the detecting, a transmission timing of the frame in which the anomaly is detected. The switching includes changing a switched transmission timing to which the transmission timing is switched, according to predetermined information.

Abstract: A particle analysis device that analyzes one or more particles, the particle analysis device being capable of operating in any of a plurality of operation patterns, in which the plurality of operation patterns includes: a first operation pattern for determining, after an image of one or more particles prepared in a first time is acquired at a first magnification, whether a form of a single particle meets a first criterion; a second operation pattern for determining, after an image of a plurality of particles prepared in the first time is acquired, whether a brightness and an area of the plurality of particles meet a second criterion; and a third operation pattern for determining, after an image of a plurality of particles prepared in a second time longer than the first time is acquired at a second magnification lower than the first magnification, whether a number of the plurality of particles meets a third criterion.

Abstract: A vehicle log transmission device includes: a vehicle log obtainer that obtains the vehicle log; a vehicle state extractor that extracts a vehicle state from the obtained vehicle log; difference generation log storage that stores a list of difference generation logs, each being a vehicle log for each of vehicle states shared between the vehicle log transmission device and a vehicle log analysis server; a difference generation log selector that selects a difference generation log from the list in accordance with the extracted vehicle state; a difference log generator that generates a difference log based on the obtained vehicle log and the selected difference generation log; and a difference log transmitter that transmits, to the vehicle log analysis server, the generated difference log and a difference generation log identifier corresponding to the selected difference generation log.

Abstract: An anomaly detection device included in a communication network adopting a time-triggered protocol based on a time slot includes: a frame transceiver that receives frames; and an anomaly detector that detects an occurrence of an anomalous frame in accordance with a time slot among a plurality of time slots included in a cycle and the number of repeated cycles of the cycle for each frame. The anomaly detector detects an occurrence of an anomalous frame by verifying a statistic on the frames received while the cycle is repeated a predetermined number of times, which is at least once, against a rule indicating a reference range of the statistic.

Abstract: A vehicle log transmission device includes: a vehicle log division processor that generates one or more divided logs; existing identifier storage that stores an existing identifier list, which is a list of identifiers corresponding to existing divided logs generated by dividing an existing vehicle log shared between the vehicle log transmission device and a vehicle log analysis server; a vehicle log transmission necessity determiner that determines that a divided log corresponding to an identifier present in the existing identifier list is a first divided log, and that a divided log corresponding to an identifier not present in the existing identifier list is a second divided log; and a vehicle-side communicator that transmits the identifier corresponding to the first divided log to the vehicle log analysis server, and transmits the second divided log to the vehicle log analysis server.

Abstract: A vehicle surveillance device for an in-vehicle network system that includes one or more electronic control units includes: a frame transmitter and receiver that receives a frame flowing over the in-vehicle network system; and a score calculator that detects a suspicious behavior different from a normal driving behavior based on the frame received by the frame transmitter and receiver and vehicle data including information on one or more frames received by the frame transmitter and receiver prior to receiving the frame, and calculates, based on a detection result, a score indicating a likelihood that reverse engineering has been performed on a vehicle provided with the in-vehicle network system.

Abstract: A method for manufacturing a semiconductor device in which probes and the layout of the electrode pads of a test element group (TEG) are associated is provided. As a semiconductor device is miniaturized, a scribe area on a wafer also tends to decrease. Accordingly, it is necessary to reduce the size of a TEG arranged in the scribe area, and efficiently arrange an electrode pad for probe contact. Thus, it is necessary to associate the probes and the layout of the electrode pad. According to the method, a layout of a TEG electrode pad corresponding to a plurality of probes arranged in a fan shape or probes manufactured by Micro Electro Mechanical Systems (MEMS) technology is provided.

Abstract: An anomaly detection device (IDS ECU) includes a detection rule generator that monitors a communication establishment frame flowing over Ethernet in a communication establishment phase of service-oriented communication and that generates, for each communication ID, a detection rule including the communication ID written in the communication establishment frame and a server (or client) address written in the communication establishment frame; an anomaly detector that monitors a communication frame flowing over the Ethernet in a communication phase of the service-oriented communication and that, by referring to a detection rule that includes a communication ID written in the communication frame, detects the communication frame as an anomalous frame when a server (or client) address written in the communication frame differs from a server (or client) address included in the detection rule; and an anomaly notifier that provides a notification of an anomaly in response to the anomalous frame being detected.

Abstract: A medical information processing apparatus according to an embodiment includes a storage and processing circuitry. The storage is configured to store therein, for each point of a frequency space represented by a plurality of pieces of first frequency component data acquired by applying frequency conversion to data inside regions of interest set to medical images, characteristic data representing a tendency of spectral values that appear at the point. The processing circuitry is configured to acquire second frequency component data by applying frequency conversion to a medical image to be processed, to determine similarity of a spectral value at each point of a frequency space represented by the second frequency component data, with the characteristic data, and to designate a target area in the frequency space represented by the second frequency component data based on the result of the determination.

Abstract: An integrity verification device, in which software is executed by one of one or more electronic control units connected to an in-vehicle network system, includes: a verification schedule determiner that determines a verification timing at which to verify the integrity of the software; an integrity verifier that, for the software, determines, at the verification timing determined for the software, whether first integrity information, that is information for verifying the integrity of the software and that corresponds to at least part of the software corresponding to a verification scope, matches second integrity information, that is information calculated from at least part of the software at the verification timing, and determines that the integrity of the software is ensured when the first integrity information and the second integrity information match; and a verification priority determiner that determines a verification priority that affects determining of the verification timing or the verification scop