Abstract: The rule learning unit 81 performs rough sets analysis using training data that includes threat information including a plurality of explanatory variables representing a threat event and a discrimination result of discriminating the threat information, to learn a decision rule specifying the discrimination result depending on a combination of the explanatory variables. The input unit 82 inputs the threat information to be analyzed. The analysis unit 83 applies the input threat information to the decision rule to identify the discrimination result of the threat information, and the explanatory variable as a basis for the discrimination result.

Abstract: A query creation means 82 creates, in accordance with the threat event detected, at least one query for use in identification of, as a cause of a threat, an event caused by the user in the user terminal or an event that has occurred in the user terminal due to the threat from among events that the user becomes aware of. A query transmission and reception means 83 transmits the query created to the notification recipient associated with the user identified and receives an answer to the query from the user. An attack identification means 84 identifies, in an attack model representing phases of a series of attacks identified based on a type of the threat, a corresponding one of the phases based on the answer. A first response execution means 85 executes a first response to the threat indicated by the attack model in accordance with the phase identified.

Abstract: Provided is a security system or the like with which security can be improved. A security system according to one embodiment of the present invention is provided with: a packet reception means that receives a request from an intruding device that is attempting intrusion; a dummy resource characteristic information storage means that stores characteristic information for a plurality of virtual dummy resources; a dummy response generation means that generates a dummy response on the basis of the characteristic information in response to the request directed to the dummy resource; a dummy response transmission control means that controls a request end flag, which indicates the presence/absence of untransmitted dummy resources, on the basis of a timer value; and a dummy response transmission means that, on the basis of the request end flag, transmits the dummy response to the intruding device that transmits the request.

Abstract: Provided is a security system or the like with improved security.

Abstract: Provided is a security system or the like with which security can be improved. A security system according to one embodiment of the present invention is provided with: a packet reception means that receives a request from an intruding device that is attempting intrusion; a dummy resource characteristic information storage means that stores characteristic information for a plurality of virtual dummy resources; a dummy response generation means that generates a dummy response on the basis of the characteristic information in response to the request directed to the dummy resource; a dummy response transmission control means that controls a request end flag, which indicates the presence/absence of untransmitted dummy resources, on the basis of a timer value; and a dummy response transmission means that, on the basis of the request end flag, transmits the dummy response to the intruding device that transmits the request.

Abstract: Provided is a security system or the like with improved security.

Abstract: To provide a high-secured security system, security method, and program. The security system that defends against unauthorized invasion to a network system.

Abstract: A communication device selects a layer 2 address to be changed, and transmits a presence check request message via a network to which the communication device is connected. The communication device determines, based on a received result of the presence check request message, whether the layer 2 address is duplicated with another communication device connected to the network. When the communication device confirms the layer 2 address is not duplicated, the communication device changes the layer 2 address of the communication device.

Abstract: A wireless communication terminal (1) which performs handover control of wireless base stations acquires a layer 2 address concerning a new wireless base station (3) from a wireless communication interface unit (1A) before handover. A presence confirmation request transmitting unit (1D) transmits a presence confirmation request message to the layer 2 address acquired by an address acquisition unit (1B) via a currently connected wireless base station (2). Based on the presence confirmation response message reception result of a presence confirmation response receiving unit (1E), a subnet determination unit (1F) determines whether the new wireless base station (3) belongs to the same subnet as that of the wireless communication terminal (1).

Abstract: The object is to prevent a third party from specifying a condition of data communication executed by a radio terminal in a radio network using a radio communication device easily accessible to anyone such as WLAN. The radio base station 2 comprises a unit which determines whether to transmit a pseudo data frame assumed to be actual data communication according to a condition of data communication with the radio terminal 3 and a unit which stores information which is information for generating a pseudo data frame and based on actual data communication with the radio terminal 3, thereby generating and transmitting a pseudo data frame based on the stored information when starting pseudo data frame transmission.

Abstract: A wireless communication terminal includes a first detecting section for detecting whether or not a reception signal level indicating a level of a received signal from a base station currently in connection as the first base station reduces to be equal to or lower than a first threshold level, a second detecting section for detecting whether or not a communication situation of a communication application program currently in communication is a situation suitable for handover, a third detecting section for detecting whether or not a predetermined handover forcedly performing condition is established, a determining section for determining whether or not the handover control is necessary, based on detection results of the first to third detecting section, and a communication control section for performing a handover control to switch from the first base station to a second base station when the switching to the handover control is necessary.

Abstract: A radio terminal unit and a radio communication system, enabling power savings, the improvement of the quality of real-time communication such as voice communication, and the reduction of transmission delays which often occur when a plurality of radio terminal units are connected to one radio base station. A radio terminal unit comprises an operation mode of communication application determination unit for determining operation mode of one or more communication which is operated at the radio terminal unit, a control packet changing unit for changing a timing of transmission of the control packet according to the operation mode of one or more communication applications determined by the operation mode of communication application determination unit, and a communication control section for sending the control packet according to the timing of transmission changed by the control packet changing unit after the transmission of data from the application.

Abstract: A communication device selects a layer 2 address to be changed, and transmits a presence check request message via a network to which the communication device is connected. The communication device determines, based on a received result of the presence check request message, whether the layer 2 address is duplicated with another communication device connected to the network. When the communication device confirms the layer 2 address is not duplicated, the communication device changes the layer 2 address of the communication device.

Abstract: A wireless communication terminal (1) which performs handover control of wireless base stations acquires a layer 2 address concerning a new wireless base station (3) from a wireless communication interface unit (1A) before handover. A presence confirmation request transmitting unit (1D) transmits a presence confirmation request message to the layer 2 address acquired by an address acquisition unit (1B) via a currently connected wireless base station (2). Based on the presence confirmation response message reception result of a presence confirmation response receiving unit (1E), a subnet determination unit (1F) determines whether the new wireless base station (3) belongs to the same subnet as that of the wireless communication terminal (1).

Abstract: A radio terminal unit and a radio communication system, enabling power savings, the improvement of the quality of real-time communication such as voice communication, and the reduction of transmission delays which often occur when a plurality of radio terminal units are connected to one radio base station. A radio terminal unit comprises a communication control section for controlling a radio interface section to transmit a control packet using a timer value.

Abstract: The object is to prevent a third party from specifying a condition of data communication executed by a radio terminal in a radio network using a radio communication device easily accessible to anyone such as WLAN. The radio base station 2 comprises a unit which determines whether to transmit a pseudo data frame assumed to be actual data communication according to a condition of data communication with the radio terminal 3 and a unit which stores information which is information for generating a pseudo data frame and based on actual data communication with the radio terminal 3, thereby generating and transmitting a pseudo data frame based on the stored information when starting pseudo data frame transmission.

Abstract: A wireless communication terminal includes a first detecting section for detecting whether or not a reception signal level indicating a level of a received signal from a base station currently in connection as the first base station reduces to be equal to or lower than a first threshold level, a second detecting section for detecting whether or not a communication situation of a communication application program currently in communication is a situation suitable for handover, a third detecting section for detecting whether or not a predetermined handover forcedly performing condition is established, a determining section for determining whether or not the handover control is necessary, based on detection results of the first to third detecting section, and a communication control section for performing a handover control to switch from the first base station to a second base station when the switching to the handover control is necessary.

Abstract: A radio terminal and a radio communication system using the same, which enables power saving, the improvement of the quality of real-time communication such as voice communication, and a reduction of packet delay. An intermittent receiving interval for each radio terminal is set according to the operation mode of each application running on the radio terminal. Consequently, the intermittent receiving interval can be changed in cooperation with the operation mode of each application. Thus, power-saving control for the radio terminal can be carried out precisely. In addition, the radio terminal can assign priorities to data transmitted from the radio base station. The priorities are set according to the operation mode of each application running on the radio terminal, and the packets of real-time communication can be transmitted preferentially.

Abstract: For communication with a base station on an IP network, radio terminals have a function for encapsulating and releasing encapsulation of a packet for preparatory authentication defined in the IEEE 802.11i at a RADIUS client unit by an authentication packet communicable on the IP network. For communication with the radio terminals on the IP network, the base station has a function for encapsulating and releasing encapsulation of a packet for preparatory authentication defined in the IEEE 802.11i at a RADIUS server by an authentication packet communicable on the IP network. Thus, it is possible to provide an authentication method in a radio communication system enabling a preparatory authentication between a radio terminal and a base station even between IP sub-networks. There are also disclosed a radio terminal device and a radio base station using this authentication method, a radio communication system using them, and a program.

Abstract: There is provided a wireless communication system including a radio-signal base station, and a mobile wireless terminal operating in a power-saving mode in which the mobile wireless terminal intermittently receives packet signals, and in a normal mode in which the mobile wireless terminal regularly receives packet signals. When the radio-signal base station receives packet signals addressed to a mobile wireless terminal being in the power-saving mode, the radio-signal base station temporarily stores the received packet signals. The mobile wireless terminal requests the radio-signal base station to transmit the packet signals thereto, receives a part of the packet signal from the radio-signal base station, and, if the mobile wireless terminal judges that it would be necessary to carry out real-time communication for receiving entirety of the packet signals, the mobile wireless terminal transfers to the normal mode from the power-saving mode for receiving entirety of the packet signals.