Abstract: A non-transitory computer-readable recording medium stores a resource management program for causing a computer to execute a process including: classifying backup processing devices for backup based on information representing a feature of each of a plurality of processing devices related to provision of one or more services such that, among the backup processing devices for backup that correspond to each of the plurality of processing devices, backup processing devices used at a same timing are not in a same group; and allocating resources to classified backup processing devices in a group in an overlapping manner such that resources are shared between the backup processing devices in a group.

Abstract: A network management includes a memory and a processor coupled to the memory. The processor configured to calculate respective communication routes of traffic to be forwarded from each of the plurality of edge routers to an attack target device that receives an attack from an outside of the network, set a communication route of traffic to a second router such that the communication routes merge at a first router, and instruct the first router to suppress forwarding of traffic of the attack. The processor selects the first router and the second router so as to satisfy a condition regarding a load of forward processing of traffic in the network and not to allow the traffic to loop from among the plurality of edge routers and the plurality of intermediate routers on the basis of a connection relationship between the plurality of edge routers and the plurality of intermediate routers.

Abstract: The network management apparatus includes a processor coupled to memory and configured to calculate a communication route of traffic that each of a plurality of edge routers transfers to an attack target device that is attacked from outside the network, select a first router where the communication routes of a plurality of flows of traffic that is transferred to the attack target device merge, instruct the first router to restrict transfer of the traffic of the attack, detect a change in traffic of the attack in response to a restriction on transfer of the traffic of the attack, and identify an edge router of an inflow source from a part of the plurality of edge routers or the edge router of the inflow source of the traffic of the attack from rest of the plurality of edge routers.

Abstract: There is provided a control device configured to control a plurality of virtual machine groups arranged on a plurality of stages, the plurality of virtual machine groups performing predetermined functions, the control device including a memory, and a processor coupled to the memory and the processor configured to specify, when a first virtual machine is added into a first virtual machine group of the plurality of virtual machine groups configured to perform a first function of the predetermined functions, a second virtual machine group of the plurality of virtual machine groups configured to perform a second function of the predetermined functions, the second virtual machine group being arranged on a forefront stage of the plurality of stages, and add a second virtual machine into the second virtual machine group based on a number of second virtual machines in the second virtual machine group.

Abstract: A management apparatus is configured to manage a processing load on a virtual machine of virtual machines forming a network, the management apparatus includes a memory, and a processor coupled to the memory and the processor configured to specify first virtual machines to perform a load distribution processing from the virtual machines, based on a type of first processing performed by the virtual machine and a sequence of which the first processing is performed, determine a destination of a transfer packet to be transferred to the first virtual machines at any of the first virtual machines, based on the processing load on the first virtual machines, in a case where the transfer packet is terminated by the first virtual machines, and transmit a first control packet including information of the determined destination of the transfer packet to a virtual machine of the virtual machines which generates the transfer packet.

Abstract: A management server manages a transfer path within a network, and includes a transmitter and a processor. The transmitter transmits a request to activate a virtual machine included in the transfer path, and a request to activate an application that executes, as a substitute for the virtual machine, a transfer process executed by the virtual machine until the virtual machine is activated. The processor sets a first path including an execution device that executes an application in the transfer path when the application has been activated. The processor performs a control for switching the first path to a second path in which the execution device in the first path is replaced with the virtual machine after the virtual machine has been activated.