Abstract: A communication control method which performs route control in a communication system comprising: a specific network constituting the Internet; a first network configured to accommodate a specific device connected to the specific network; a second network provided between the specific network and the first network; and a processing device configured to perform predetermined processing on the basis of a packet transmitted between the specific network and the first network, the communication control method comprising: causing a path setting device in the communication system to execute a communication route-setting process comprised of, in accordance with first routing information defining a path leading from the first network to the specific network to be branched in the second network, controlling a path so that a first path of the branched path is set as a path via the processing device, and a second path of the branched path is set as a path leading to the specific network.

Abstract: A communication control method which performs route control in a communication system comprising: a specific network constituting the Internet; a first network configured to accommodate a specific device connected to the specific network; a second network provided between the specific network and the first network; and a processing device configured to perform predetermined processing on the basis of a packet transmitted between the specific network and the first network, the communication control method comprising: causing a path setting device in the communication system to execute a communication route-setting process comprised of, in accordance with first routing information defining a path leading from the first network to the specific network to be branched in the second network, controlling a path so that a first path of the branched path is set as a path via the processing device, and a second path of the branched path is set as a path leading to the specific network.

Abstract: A mitigation system comprises a plurality of types of mitigation devices which execute a defense function against an attack, and a control device which selects, if it is detected that an attack has been performed on a network to be monitored, one of the plurality of types of mitigation devices, which executes a defense function in accordance with the type of the attack.

Abstract: A communication controller performs route control in a communication system comprising a specific network, a first network configured to accommodate a specific device connected to the specific network, a second network provided between the specific network and the first network, and a filter configured to restrict communication according to a predetermined condition. The communication controller device includes: a route-setting device which controls the path such that a first path of the branched path is set as a path leading to a predetermined address space including an address of the specific device via the filter, and a second path of the branched path is set as a path leading to the first network in which the predetermined address space is excluded from an address space of the first network.

Abstract: A mitigation system comprises a plurality of types of mitigation devices which execute a defense function against an attack, and a control device which selects, if it is detected that an attack has been performed on a network to be monitored, one of the plurality of types of mitigation devices, which executes a defense function in accordance with the type of the attack.

Abstract: A communication controller performs route control in a communication system including a specific network, a first network configured to accommodate a specific device connected to the specific network, a second network provided between the specific network and the first network, and a filter configured to restrict communication according to a predetermined condition. The communication controller includes: a route-setter which, in accordance with routing information defining a path leading from the specific network side to the first network to be branched in the second network, controls the path such that a first path of the branched path is set as a path leading to a predetermined address space including an address of the specific device via the filter, and a second path of the branched path is set as a path leading to the first network wherein the predetermined address space is excluded from an address space of the first network.

Abstract: A packet transfer apparatus is provided with: storage means configured to store a predetermined search pattern and an address identifying a predetermined apparatus; determination means configured to determine whether predetermined data in a packet received from a network interface matches the search pattern; determination means configured to determine a network interface for outputting the packet using the determination result; replacement means configured to replace an address identifying a destination apparatus of the packet with an address identifying the predetermined apparatus when outputting the packet from a network interface connected to the predetermined apparatus; and packet sending means configured to send the packet to the determined network interface.

Abstract: A packet transfer apparatus is provided with: storage means configured to store a predetermined search pattern and an address identifying a predetermined apparatus; determination means configured to determine whether predetermined data in a packet received from a network interface matches the search pattern; determination means configured to determine a network interface for outputting the packet using the determination result; replacement means configured to replace an address identifying a destination apparatus of the packet with an address identifying the predetermined apparatus when outputting the packet from a network interface connected to the predetermined apparatus; and packet sending means configured to send the packet to the determined network interface.