Abstract: A scenario analysis unit (22) identifies an attack scenario indicating a chronological sequence of attack methods up to occurrence of a threat that may occur in a constituent element of a system. A past case collection unit (231) collects information on attack cases that have occurred in the past. A past case analysis unit (232) identifies a past scenario indicating a chronological sequence of attack methods for each attack case. A likelihood calculation unit (233) calculates a similarity between the attack scenario and the past scenario. Then, the likelihood calculation unit (233) calculates a likelihood of occurrence of the threat based on the similarity.

Abstract: A diversion determination unit (110) compares a configurational element included in a system threat (21) with a configurational element included in a scenario threat (311) which is a threat corresponded to an analysis scenario (31), where one attack scenario among a plurality of attack scenarios is used as the analysis scenario (31). The diversion determination unit (110) determines based on a comparison result, whether or not the analysis scenario (31) can be diverted to the attack scenario indicating a process up to occurrence of the system threat (21). When it is determined that the analysis scenario (31) can be diverted, a scenario diversion unit (120) generates a new attack scenario (32) indicating the process up to the occurrence of the system threat (21), by diverting the analysis scenario (31).

Abstract: A combination identification unit (27) identifies combinations of one or more components which constitute a target system and in each of which an intrusion detection system that detects unauthorized access can be installed. A combination reduction unit (28) extracts, from the combinations identified by the combination identification unit, a combination that satisfies an installation condition accepted by an installation condition input unit (22) and can detect unauthorized communications indicated by attack information accepted by an attack information input unit (24) at a rate higher than or equal to a threshold.

Abstract: A system dividing unit (110) divides a target system into a plurality of sub-systems. A root system selection unit (122) selects a sub-system in which a threat on security occurs, as a root system from among the plurality of sub-systems. A root tree generation unit (131) generates an attack tree of the root system, as a root tree. A descendant system selection unit (132) selects one sub-system or more located on an intrusion course to the root system, as one descendent system or more from among the plurality of sub-systems. A descendant tree generation unit (133) generates one attack tree or more corresponding to the one descendent system or more, as one descendent tree or more. A sub-attack tree integration unit (140) integrates the root tree and the one descendent tree or more, to thereby generate an attack tree of the target system.

Abstract: In an SNS server (103) corresponding to a false submission filter device, an event specifying unit (604) analyzes contents of a submission informing of an occurrence of an event and specifies a location (721) of occurrence of the event. A query destination specifying unit (605) searches a query destination database (613) and specifies a query destination corresponding to the location (721) specified by the event specifying unit (604). A query unit (606) transmits a request for checking the presence or absence of occurrence of the event from the observation result of one or more machines to the query destination specified by the query destination specifying unit (605). The query unit (606) receives a response to the request. A result reflecting unit (607) determines whether the contents of the submission are true or false from a check result indicated by the response received by the query unit (606).

Abstract: A system dividing unit (110) divides a target system into a plurality of sub-systems. A root system selection unit (122) selects a sub-system in which a threat on security occurs, as a root system from among the plurality of sub-systems. A root tree generation unit (131) generates an attack tree of the root system, as a root tree. A descendant system selection unit (132) selects one sub-system or more located on an intrusion course to the root system, as one descendent system or more from among the plurality of sub-systems. A descendant tree generation unit (133) generates one attack tree or more corresponding to the one descendent system or more, as one descendent tree or more. A sub-attack tree integration unit (140) integrates the root tree and the one descendent tree or more, to thereby generate an attack tree of the target system.

Abstract: An evaluation tree generation unit (101) generates as an evaluation tree, an attack tree about an information system, which is based on inference using predicate logic. A gold tree generation unit (102) generates a gold tree which covers an intrusion route to the information system and reflects an intrusion procedure for the information system, by using network configuration information indicating a network configuration of the information system and intrusion procedure information indicating an intrusion procedure assumed in intrusion into the information system. A tree comparison unit (103) compares the evaluation tree with the gold tree.

Abstract: A combination identification unit (27) identifies combinations of one or more components which constitute a target system and in each of which an intrusion detection system that detects unauthorized access can be installed. A combination reduction unit (28) extracts, from the combinations identified by the combination identification unit, a combination that satisfies an installation condition accepted by an installation condition input unit (22) and can detect unauthorized communications indicated by attack information accepted by an attack information input unit (24) at a rate higher than or equal to a threshold.

Abstract: In an input error detection device (100), a selection unit (108) selects a group of words that appear common to a system specification document (117) describing a specification of an information system in a natural language, and an analysis object document (116) describing at least either one of analysis device input information (111) being input information to an analysis device that analyzes the information system, and analysis device output information (112) being output information from the analysis device, in a natural language. A learning unit (109) learns a meaning of an individual word in each of the system specification document (117) and the analysis object document (116), wherein the individual word belongs to the group of words selected by the selection unit (108).

Abstract: A measure point extracting unit (203) extracts, from attack route information in which a threat and a plurality of attack routes each including one or more attack actions and being procedures for generating the threat are described, a plurality of combinations of attack actions to be addressed in order to inhibit generation of the threat. An objective-function deriving unit (204) acquires one or more measure candidates and an usability level of each of the measure candidates, for each of the attack actions included in the plurality of combinations of attack actions.

Abstract: A second communication unit (411) of a security management apparatus (201) externally receives dependency information (412) indicating a dependence relation between information assets individually held by a first system and a second system. Then, a selection unit (415) of the security management apparatus (201) selects a security measure to be implemented, from among candidates for a security measure against a threat to an information asset held by the first system, in accordance with a dependence relation indicated by the dependency information (412) received by the second communication unit (411).

Abstract: A storage apparatus includes a flash memory that includes multiple blocks; and a control portion that reads data written in the block and writes the data into the block. The flash memory includes one block set having n pieces of the blocks including BR1 to BRn. A write data and a write flag are capable of being written into each of blocks BRi, the write data being written in accordance with a request, the write flag indicating that the write data has been written into a target block BRj. In accordance with a write request, the control portion performs an erasure process, a first write process, and a second write process. The erasure process erases the data including the write data and the write flag. The first write process writes the new write data into the block BRl. The second write process writes the write flag into a block BRm.

Abstract: A storage apparatus includes a flash memory that includes multiple blocks; and a control portion that reads data written in the block and writes the data into the block. The flash memory includes one block set having n pieces of the blocks including BR1 to BRn. A write data and a write flag are capable of being written into each of blocks BRi, the write data being written in accordance with a request, the write flag indicating that the write data has been written into a target block BRj. In accordance with a write request, the control portion performs an erasure process, a first write process, and a second write process. The erasure process erases the data including the write data and the write flag. The first write process writes the new write data into the block BRl. The second write process writes the write flag into a block BRm.

Abstract: A discharge port is located at a lower portion of the case of a gas-liquid separator. A discharge valve is located at the discharge port. A water retaining portion is located at the bottom of the case. The water retaining portion is located at a position lower than the discharge valve. An upward inclination surface is formed on the bottom of the water retaining portion. The upward inclination surface is inclined upward toward the discharge valve. A downward inclination surface is formed on the bottom of the water retaining portion. The downward inclination surface is inclined downward toward the upward inclination surface. A cover portion is located in an upper portion of the water retaining portion. The cover portion defines a gas passage in an upper portion of the water retaining portion. The gas passage is open at a portion closer to the inlet and connected to the discharge valve.

Abstract: A ball includes a ball body having a spherical surface, and at least one projection extending from the surface of the ball body. The projection extends in such a manner that the projection forcibly separates a laminar boundary layer generated on the surface of the ball body, and transitions the laminar boundary layer to a turbulent boundary layer.

Abstract: A terminal for supporting allocation, to a customer, of reward points redeemable for an article or a service is provided. The terminal includes a soon-to-be-lost-point calculation portion that calculates, for each of reward programs in which the customer participates, an amount of soon-to-be-lost-reward points that is an amount of reward points to be lost during a predetermined period among the reward points, and a reward points information display process portion that displays, based on the result of calculation performed by the soon-to-be-lost-point calculation portion, a screen for indicating, among the reward programs, a reward program having the soon-to-be-lost-reward points whose amount is equal to or more than a predetermined value.

Abstract: A ball includes a ball body having a spherical surface, and at least one projection extending from the surface of the ball body. The projection extends in such a manner that the projection forcibly separates a laminar boundary layer generated on the surface of the ball body, and transitions the laminar boundary layer to a turbulent boundary layer.

Abstract: A method for supporting a member in selecting one of reward programs includes providing a database storing item information that indicates, for each item, a name, and a reward program awarding a reward point, presenting the item information to the member, storing, in a multiple-service card, for each member, selected item information indicating items selected by the member by giving priorities thereto, obtaining, when a member is awarded a reward point in a shop, the selected item information of the member from the multiple-service card, determining that, among reward programs that award a reward point redeemable for any of the items indicated in the selected item information and are available in the shop, one of the reward programs awarding a reward point necessary to obtain an item placed in a highest priority is suitable for the member, and presenting the reward program thus determined to the member.

Abstract: A discharge port is located at a lower portion of the case of a gas-liquid separator. A discharge valve is located at the discharge port. A water retaining portion is located at the bottom of the case. The water retaining portion is located at a position lower than the discharge valve. An upward inclination surface is formed on the bottom of the water retaining portion. The upward inclination surface is inclined upward toward the discharge valve. A downward inclination surface is formed on the bottom of the water retaining portion. The downward inclination surface is inclined downward toward the upward inclination surface. A cover portion is located in an upper portion of the water retaining portion. The cover portion defines a gas passage in an upper portion of the water retaining portion. The gas passage is open at a portion closer to the inlet and connected to the discharge valve.

Abstract: A sheet guide apparatus includes a transfer cylinder, delivery chains, and sheet guide structure. The transfer cylinder holds a sheet. The delivery chains hold the sheet received from the transfer cylinder and conveys the sheet along a first convey path which is at least substantially arcuate. The sheet guide structure guides the sheet conveyed by the delivery chains. The sheet guide structure includes a movable guide member and stationary guide member. The movable guide member is movable between positions close to and spaced apart from the first convey path. The stationary guide member is stationarily arranged at a position spaced apart from the first convey path. When the movable guide member is close to the first convey path, a thin-sheet guide surface having a continuous substantially arcuate section is formed by only the movable guide member.