Abstract: An apparatus extracts a server process from a communication in a network to generate log data in which a combination of addresses of access sources in the server process is recorded, and compares a combination of past addresses recorded in the log data with a combination of addresses in a specific target access to identify a first communication apparatus performing an abnormal communication.

Abstract: A method of network monitoring includes, acquiring a log including site information for identifying a web site that is previously accessed by an access source and content information for identifying a content that is requested by the access source, generating a first relationship information that includes site information for identifying the web site which provides the content, generating a second relationship information that includes content information for identifying another content that is requested by the access source requesting the content, generating a third relationship information that includes a second combination of the access source and the web site which provides both the content and the other content for the access source, and determining a group that includes the first combinations corresponding to the second combinations whose degree of similarity is no less than a threshold, based on the third relationship information.

Abstract: An apparatus extracts a server process from a communication in a network to generate log data in which a combination of addresses of access sources in the server process is recorded, and compares a combination of past addresses recorded in the log data with a combination of addresses in a specific target access to identify a first communication apparatus performing an abnormal communication.

Abstract: A monitoring apparatus, includes a memory configured to store history information regarding a login attempt to a system by a communication apparatus in a state in which a first address is set, the system being a target to be monitored, and set a second address, and a processor coupled to the memory and configured to extract, from the history information, at least one of a variance of a number of login attempts per unit time and a length of a time of the login attempts, determine whether an attack in which accesses are attempted while an address is changed was executed on the system, according to the at least one of the variance and the length of the time, and add the second address of the system to a list that manages systems that had the attack when it is determined that the attack was executed.

Abstract: A network monitoring device includes: a memory; and a processor coupled to the memory and configured to: based on identifying information and attribute information of an access source included in a history of access to plural dummy servers installed in a monitoring target network, the access source having accessed the individual dummy servers, tally a number of the dummy servers accessed and a number of types of the attribute information for each access source; and estimate the legitimacy of individual access sources based on the number of dummy servers and the number of attribute information types tallied for each access source.

Abstract: A method of network monitoring includes, acquiring a log including site information for identifying a web site that is previously accessed by an access source and content information for identifying a content that is requested by the access source, generating a first relationship information that includes site information for identifying the web site which provides the content, generating a second relationship information that includes content information for identifying another content that is requested by the access source requesting the content, generating a third relationship information that includes a second combination of the access source and the web site which provides both the content and the other content for the access source, and determining a group that includes the first combinations corresponding to the second combinations whose degree of similarity is no less than a threshold, based on the third relationship information.

Abstract: There is provided a network monitoring device including: a memory; and a processor coupled to the memory and the processor configured to: detect, based on history record information on attempts to log into a plurality of information processing devices from a plurality of terminals via a network, occurrences of attempts that were made to log into the plurality of information processing devices with common account information a predetermined number of times or less; and reject an attempt to log into an information processing device among the plurality of information processing devices from a terminal among the plurality of terminals and notify the terminal of a re-attempt to log into the information processing device after the occurrences of attempts are detected.

Abstract: A monitoring apparatus, includes a memory configured to store history information regarding a login attempt to a system by a communication apparatus in a state in which a first address is set, the system being a target to be monitored, and set a second address, and a processor coupled to the memory and configured to extract, from the history information, at least one of a variance of a number of login attempts per unit time and a length of a time of the login attempts, determine whether an attack in which accesses are attempted while an address is changed was executed on the system, according to the at least one of the variance and the length of the time, and add the second address of the system to a list that manages systems that had the attack when it is determined that the attack was executed.

Abstract: A cherry tree rootstock characterized by wide and strong root anchorage, easy vegetative propagation, a thicker shoot and a harder root than the known variety "Colt", a more compact tree shape and darker green leaves than the Colt variety, and a hexaploid (2n=48) chromosome structure as compared to the triploid (2n=24) chromosome structure in the Colt variety.