Abstract: An aggregation unit (15a) aggregates an input pulse train signal including a time-series pulse corresponding to a predetermined observation time into pulses for respective unit times. A calculation unit (15b) calculates a time shift amount of an autocorrelation function using the aggregated pulse train signal. A detection unit (15c) calculates an autocorrelation value and a threshold with respect to each of time shift amounts selected in ascending order from the calculated time shift amount and detects the time shift amount as a period of the aggregated pulse train signal when the autocorrelation value exceeds the threshold. A conversion unit (15d) converts the detected period to a period of the input pulse train signal using the unit time. An exclusion unit (15e) excludes the pulse train signal having the converted period from the input pulse train signal.

Abstract: A period estimation apparatus includes processing circuitry configured to extract candidate periods being a target of period determination from an input pulse train, use at least one of the candidate periods extracted to determine whether the at least one of the candidate periods exists as an actual period, and, when determining that the at least one of the candidate periods does not exist as the actual period, suspend the period determination for the at least one of the candidate periods, perform the period determination for the at least one of the candidate periods determined to exist as the actual period, generate a pseudo periodic pulse train, adjust, based on a differential value between the pseudo periodic pulse train generated and the input pulse train, a pulse position of the pseudo periodic pulse train, and detect a periodic pulse train according to results of the period determination and adjustment.

Abstract: An extraction unit 141 extracts predetermined pieces of information from each of a plurality of packets and sent from equipment 20. Then, an inference unit 142 infers a piece of equipment information that is information on the equipment 20, for each of the plurality of packets on the basis of the pieces of information extracted by the extraction unit 141. Then, the first selection unit 143 selects a predetermined piece of equipment information for each packet type from among pieces of equipment information on the basis of a level of detail of each piece of equipment information. Then, the second selection unit 144 selects, on the basis of a level of reliability predefined according to each packet type, a predetermined piece of equipment information corresponding to the equipment 20 from among pieces of equipment information inferred by the first selection unit 143.

Abstract: A device estimating apparatus acquires one or more DNS queries transmitted from each device connected to a network and generates comparison source data in which each content of the acquired DNS queries is associated with one or more pieces of attribute information of each of the one or more devices that have transmitted the DNS queries having the content. Thereafter, when one or more DNS queries are acquired from an estimation target device, the device estimating apparatus reads, for each DNS query, attribute information of one or more devices associated with a content of the DNS query from the comparison source data and estimates an attribute of the estimation target device using the read attribute information.

Abstract: A device estimating apparatus acquires one or more DNS queries transmitted from each device connected to a network and generates comparison source data in which each content of the acquired DNS queries is associated with one or more pieces of attribute information of each of the one or more devices that have transmitted the DNS queries having the content. Thereafter, when one or more DNS queries are acquired from an estimation target device, the device estimating apparatus reads, for each DNS query, attribute information of one or more devices associated with a content of the DNS query from the comparison source data and estimates an attribute of the estimation target device using the read attribute information.

Abstract: A communication control apparatus includes a collection control unit, an analysis unit, and a coordination unit. The collection control unit collects communication performed with a device connected to a subordinate network, and controls communication performed by the device based on a first control condition; The analysis unit analyzes the communication collected by the collection control unit to extract device identification information indicating characteristics of the communication performed by the device. The analysis unit specifies a device name of the device and the first control condition corresponding to a normal communication range extracted from the device identification information, based on the device identification information.

Abstract: A gateway device (10) stores therein a first filtering rule and a second filtering rule for filtering packets which are transmitted from a terminal (20) in a network (2) as a transmission source to a terminal (20) in a network (3) as a destination. The gateway device (10) acquires, on the basis of a packet transmitted from the terminal (20) in the network (3), identification information for identifying the terminal (20). The gateway device (10) notifies a management device (30) of the acquired identification information. The management device (30) generates a management screen on the basis of the notified information, and transmits the management screen to a display device (40). The management device (30) transmits an instruction based on input to the display device (40) to the gateway device (10). The gateway device (10) sets the first filtering rule on the basis of the instruction from the management device (30).

Abstract: An extraction unit 141 extracts predetermined pieces of information from each of a plurality of packets and sent from equipment 20. Then, an inference unit 142 infers a piece of equipment information that is information on the equipment 20, for each of the plurality of packets on the basis of the pieces of information extracted by the extraction unit 141. Then, the first selection unit 143 selects a predetermined piece of equipment information for each packet type from among pieces of equipment information on the basis of a level of detail of each piece of equipment information. Then, the second selection unit 144 selects, on the basis of a level of reliability predefined according to each packet type, a predetermined piece of equipment information corresponding to the equipment 20 from among pieces of equipment information inferred by the first selection unit 143.

Abstract: A cycle estimation device (10) includes: a candidate cycle extraction unit (11) which extracts a candidate cycle that is a cycle determination target from an input time-series pulse train; a pulse train shape analysis unit (12) which converts arrangement of the time-series pulse train into numerical values on the basis of the extracted candidate cycle and outputs a constant that adjusts a random noise threshold value of pulse repetition interval (PRI) conversion in response to an index indicating a degree of concentration of calculated numerical values; and a cycle detection unit (13) which executes PRI conversion using a value of the candidate cycle and the constant and performs cycle determination and cycle value detection.

Abstract: A communication terminal apparatus includes processing circuitry configured to collect communication of an application and control the communication of the application based on a first control condition, analyze the communication collected to determine whether the application is a communication control target, and generate the first control condition based on a normal communication range of the application that is the communication control target, and transmit at least a part of first shared information including identification information about the application and the first control condition to a second communication terminal apparatus that is different from the communication terminal apparatus.

Abstract: A period estimation apparatus includes processing circuitry configured to extract candidate periods being a target of period determination from an input pulse train, use at least one of the candidate periods extracted to determine whether the at least one of the candidate periods exists as an actual period, and, when determining that the at least one of the candidate periods does not exist as the actual period, suspend the period determination for the at least one of the candidate periods, perform the period determination for the at least one of the candidate periods determined to exist as the actual period, generate a pseudo periodic pulse train, adjust, based on a differential value between the pseudo periodic pulse train generated and the input pulse train, a pulse position of the pseudo periodic pulse train, and detect a periodic pulse train according to results of the period determination and adjustment.

Abstract: A cycle estimation device (10) includes: a candidate cycle extraction unit (11) which extracts a candidate cycle that is a cycle determination target from an input time-series pulse train; a pulse train shape analysis unit (12) which converts arrangement of the time-series pulse train into numerical values on the basis of the extracted candidate cycle and outputs a constant that adjusts a random noise threshold value of pulse repetition interval (PRI) conversion in response to an index indicating a degree of concentration of calculated numerical values; and a cycle detection unit (13) which executes PRI conversion using a value of the candidate cycle and the constant and performs cycle determination and cycle value detection.

Abstract: An aggregation unit (15a) aggregates an input pulse train signal including a time-series pulse corresponding to a predetermined observation time into pulses for respective unit times. A calculation unit (15b) calculates a time shift amount of an autocorrelation function using the aggregated pulse train signal. A detection unit (15c) calculates an autocorrelation value and a threshold with respect to each of time shift amounts selected in ascending order from the calculated time shift amount and detects the time shift amount as a period of the aggregated pulse train signal when the autocorrelation value exceeds the threshold. A conversion unit (15d) converts the detected period to a period of the input pulse train signal using the unit time. An exclusion unit (15e) excludes the pulse train signal having the converted period from the input pulse train signal.

Abstract: A device estimation apparatus includes: a DNS query acquisition unit (121) configured to acquire a DNS query from a device to be estimated; an aggregation unit (122) configured to aggregate contents of the acquired DNS query for each of the devices that are transmission sources of the DNS query; a comparison source data generation unit (123) configured to generate comparison source data including entries in which models of devices, software used by the devices, and an aggregation result of contents of DNS queries transmitted from the devices are associated with each other; and an estimation unit (124) configured to extract, from the comparison source data, an entry similar to an aggregation result of contents of the DNS query transmitted from the device to be estimated and to estimate, as a model and software of the device to be estimated, a model and software indicated in the extracted entry.

Abstract: A gateway device (10) acquires terminal addresses and identification information of a terminal (20). Further, the gateway device (10) forwards an access request packet transmitted from the terminal (20) to a determination device (30), and forwards a response packet transmitted by the determination device (30) to the terminal (20). Then, the determination device (30) determines whether or not the packet forwarded by the gateway device (10) is abnormal, and transmits a response packet indicating the determination result. Further, at the time of transmitting a response packet indicating an abnormality, the gateway device (10) identifies the identification information of the terminal that has transmitted the packet on which the response packet is based.

Abstract: A communication control apparatus includes a collection control unit, an analysis unit, and a coordination unit. The collection control unit collects communication performed with a device connected to a subordinate network, and controls communication performed by the device based on a first control condition; The analysis unit analyzes the communication collected by the collection control unit to extract device identification information indicating characteristics of the communication performed by the device. The analysis unit specifies a device name of the device and the first control condition corresponding to a normal communication range extracted from the device identification information, based on the device identification information.

Abstract: A gateway device (10) stores therein a first filtering rule and a second filtering rule for filtering packets which are transmitted from a terminal (20) in a network (2) as a transmission source to a terminal (20) in a network (3) as a destination. The gateway device (10) acquires, on the basis of a packet transmitted from the terminal (20) in the network (3), identification information for identifying the terminal (20). The gateway device (10) notifies a management device (30) of the acquired identification information. The management device (30) generates a management screen on the basis of the notified information, and transmits the management screen to a display device (40). The management device (30) transmits an instruction based on input to the display device (40) to the gateway device (10). The gateway device (10) sets the first filtering rule on the basis of the instruction from the management device (30).

Abstract: An objective lens includes a diffractive optical element constructed of a medium having an internal transmittance of at least 50% at a wavelength of 300 nm when the thickness is 10 mm and a cemented doublet made up of two lenses having media of different refractive indices and Abbe's numbers. The diffractive optical element is optimized to take advantage of a fluorescent wavelength. An NA of the objective lens where correction for aberration is made and an NA of the objective lens where the effective diameter is determined are different from each other to satisfy the following condition: NAe>1.5×NAc where NAe is the NA of the objective lens where the effective diameter is determined and NAc is the NA of the objective lens where correction for aberration is made. The objective lens is constructed as a water-immersion objective lens in which the NA of the objective lens where the effective diameter is determined is at least 0.6.

Abstract: An objective lens includes a diffractive optical element constructed of a medium having an internal transmittance of at least 50% at a wavelength of 300 nm when the thickness is 10 mm and a cemented doublet made up of two lenses having media of different refractive indices and Abbe's numbers. The diffractive optical element is optimized to take advantage of a fluorescent wavelength.

Abstract: An optical filter has a spectral transmittance characteristic plotted as a curve that is not mirror-symmetric with respect to any vertical axis upon wavelength being taken along the axis of abscissa and transmittance being taken along the axis of ordinate. The optical filter can be designed and fabricated easily and efficiently. The optical filter is used with a light source that causes self-absorption, to constitute an illumination optical system. In the illumination optical system, an image of the arc lamp is projected with a sufficiently high magnification in good aberration condition on the pupil of the objective lens, light in a wavelength region that was conventionally unused is efficiently used, and, in addition, the heat problem is solved.