Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Abstract: An anomaly assessment device includes: a storage storing a correspondence relation between a type of a device, and a transition state candidate group in a stable state of the device of the type; at least one memory storing instructions; and at least one processor configured to execute the instructions to: acquire event information of a monitoring target device; identify a transition state associated with the event information acquired of the monitoring target device; and assesse normality/anomaly of the monitoring target device, based on the transition state candidate group associated with a type of the monitoring target device in the stored correspondence relation, and the identified transition state.

Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Abstract: Disclosed are an information selection device and the like that make it possible to rapidly acquire information about an event of interest. An information selection device is configured to specify target log information among log information. The log information represents that a process is executed for a processing object in a target system and the target log information represents a processing object that may affect an abnormal process executed in the target system. The information selection device is configured to calculate a frequency of the target log information for each combination of the process with the processing object, calculate an abnormality degree of the target log information based on the calculated frequency and select relevant log information with having the abnormality degree satisfying a condition for determining abnormal log information among the target log information.

Abstract: Provided is an information processing device which is capable of suppressing a deterioration in accuracy of detecting an anomaly and accuracy of analyzing the anomaly, while suppressing an increase in an amount of data to be stored. The information processing system includes anomaly detection unit that collects event data indicating a predetermined event detected in a process of a device to be monitored, determines whether a predetermined index value related to the event exceeds a preset first threshold, and instructs enhanced monitoring of the device to be monitored and the process related to the event when the index value exceeds the first threshold, and collection instruction unit that determines an additional event being an event to be additionally monitored when the enhanced monitoring is instructed, and instructs the device to be monitored, which is subjected to the enhanced monitoring, to monitor the determined additional event.

Abstract: To provide a terminal device capable of preventing user-unintended communication from being made. A communication control means 91 controls a packet transfer means for transmitting a packet. An instruction information giving means 92 gives instruction information indicating an instruction for the communication control means 91 to the communication control means 91. The communication control means 91 sends a flow detection notification that it detected a new flow to the instruction information giving means 92 when detecting the new flow. The instruction information giving means 92 determines whether to permit the flow to be communicated when receiving the flow detection notification. When determining to permit communication, the instruction information giving means 92 then gives instruction information for instructing to transmit a packet of the flow in a path as an access network designated by the instruction information giving means 92 to the communication control means 91.

Abstract: [Problem] A plurality of control devices cannot control a communication terminal. [Means for solving the problem] The communication terminal of the present invention, which is controlled by a control device, includes a first storage means for associating information identifying a packet with processing of the packet and storing it as an entry, a searching means for searching to processing corresponding to a received packet from the first storage means, and an inquiry means for determining the control device of which is inquired, based on the entry corresponding to the received packet, the entry being stored in the first storage means, if the searched processing is the inquiry to the control device, and for performing the inquiry addressed to the determined control device.

Abstract: A communication system, comprises: a first network switch that transmits to a network controller a control message containing ancillary data; the network controller that retrieves the ancillary data from the control message containing the ancillary data, holds the ancillary data, and transmits to a second network switch a control message containing the ancillary data; and the second network switch that receives the control message containing the ancillary data from the network controller, retrieves a packet to be outputted and the ancillary data, and forwards the packet and the ancillary data to a specified destination.

Abstract: The communication terminal of the present invention, which is controlled by a control device, includes a first storage means for associating information identifying a packet with processing of the packet and storing it as an entry, a searching means for searching processing corresponding to a received packet from the first storage means, and an inquiry means for determining the control device of which is inquired, based on the entry corresponding to the received packet, the entry being stored in the first storage means, if the searched processing is the inquiry to the control device, and for performing the inquiry addressed to the determined control device.

Abstract: A computer system has: a virtual machine operating on a physical machine; and a management block operating on the physical machine and managing the virtual machine. The virtual machine has a specific function processing module that performs specific function processing with respect to a packet for transmission and a received packet. The management block has a virtual switch that relays a packet transmitted and received by the virtual machine. The virtual switch has an offload processing block that performs the specific function processing if the specific function processing is offloaded to the management block. If the specific function processing is offloaded from the virtual machine to the management block, the specific function processing module notifies the management block of processing information required for the specific function processing, and the offload processing block executes the specific function processing based on the processing information received from the virtual machine.

Abstract: Provided is a terminal device capable of recognizing communication traffic in a mobile network for each piece of application software. Communication control means 91 controls packet transfer means for transmitting a packet. Instruction information imparting means 92 imparts instruction information representing an instruction for the communication control means 91 to the communication control means 91. The communication control means 91 acquires statistical information including communication traffic for each flow from the packet transfer means and retains the statistical information along with information on application software which is a flow transmission source and information on an access network used for communication. The instruction information imparting means 92 acquires statistical information of each access network from the communication control means 91 for each piece of application software.

Abstract: There is provided a flow control device for controlling flow control rules defining processing contents per flow in a packet transfer device for processing packets belonging to a flow between a first communication device and a second communication device, which receives a packet reception notification indicating that the packet transfer device receives a packet from at least one of the first communication device and the second communication device from the packet transfer device, determines a flow control rule to be notified to the packet transfer device in response to the received packet reception notification, manages a packet reception notification reception time when the packet reception notification is received, and calculates a first round-trip transmission delay time between two devices among the first communication device, the second communication device, and the packet transfer device based on the packet reception notification reception times.

Abstract: To provide a communication terminal capable of selecting a communication interface corresponding to a communicable wireless network without the use of a route determination dedicated packet. A packet generation means 93 generates a packet based on data for receiving a service from a destination device. A control means 94 selects a communication interface 91 from among a plurality of communication interfaces 91, instructs a packet processing means 95 to send a packet generated by the packet generation means 93 to the communication interface 91, and when a response packet for the packet is not input until a timeout determination reference time, selects a different communication interface 91 from the communication interface 91, instructs the packet processing means 95 to send a copy of the packet to the communication interface 91.

Abstract: The present invention provides a communication network comprising a host network, a plurality of base stations, at least a mobile host capable of establishing links to the base stations, and a hierarchy-network of plural routers which are improved in transferring performances for ensuring continuous operations with a reduced load without packet loss.

Abstract: A communication apparatus comprises: a plurality of storage units adapted to store a process corresponding to a packet; a first unit that refers to at least one of the plurality of storage units and searches for a process corresponding to an incoming packet; and a second unit that queries, from among a plurality of control apparatuses, a control apparatus associated with a storage unit, in which the first unit has detected a predetermined condition, for a process corresponding to the incoming packet.

Abstract: To provide a communication terminal capable of selecting a communication interface corresponding to a communicable wireless network without the use of a route determination dedicated packet. A packet generation means 93 generates a packet based on data for receiving a service from a destination device. A control means 94 selects a communication interface 91 from among a plurality of communication interfaces 91, instructs a packet processing means 95 to send a packet generated by the packet generation means 93 to the communication interface 91, and when a response packet for the packet is not input until a timeout determination reference time, selects a different communication interface 91 from the communication interface 91, instructs the packet processing means 95 to send a copy of the packet to the communication interface 91.

Abstract: A network system is provided. The network system includes a server, a switch connected to a server, and a controller controlling the functions of the server and the switch. The server includes a processor and a network adapter connected to a processor. The network adapter processes packets of each flow in accordance with a filter table. The processor includes a virtual machine and a virtual switch which relays packets transmitted and received by the virtual machine to and from an external entity. The network adapter has an offloading function which exchanges packets with the virtual machine without using the virtual switch. In a tunneling process, the switch exchanges packets with the virtual machine through a tunneling-dedicated port, and the network adapter forwards the packets between the switch and the virtual machine without referring to the filter table. The controller dynamically controls enabling/disenabling of the tunneling process for each flow.

Abstract: There is provided a flow control device for controlling flow control rules defining processing contents per flow in a packet transfer device for processing packets belonging to a flow between a first communication device and a second communication device, which receives a packet reception notification indicating that the packet transfer device receives a packet from at least one of the first communication device and the second communication device from the packet transfer device, determines a flow control rule to be notified to the packet transfer device in response to the received packet reception notification, manages a packet reception notification reception time when the packet reception notification is received, and calculates a first round-trip transmission delay time between two devices among the first communication device, the second communication device, and the packet transfer device based on the packet reception notification reception times.

Abstract: A mobile node comprises: selection unit that selects, from a base node(s), a base node that relays a packet(s) between the mobile node and a correspondent node; and rule change unit that sets, in the mobile node and the selected base node, a control rule(s) for forwarding the packet(s) between the mobile node and the correspondent node via the selected base node.