Abstract: A network management system which includes a plurality of network devices operating in a coordinated manner and a management server managing the network devices. The management server includes apparatus for defining policy information and for generating setup information using policy information to generate setup information for each network device. The system generates setup information for each network device, distributes setup information to each network device, installs setup information to each network device, enables settings, collects setup information for each network device, and organizes and checks for consistency in the collected information.

Abstract: A security system design supporting tool and method are disclosed, in which security requirements (PP) and security specifications (ST) used for designing a product or a system (TOE) based on CC requirements can be prepared efficiently and uniformly even by ordinary designers other than specialists. In a security system design supporting method, registered PPs and past PP/ST generation cases are so structured as to reuse and/or reference as templates, a draft is automatically generated, and the draft thus generated is additionally modified or corrected by partial automatic generation utilizing a database of past generation cases and partial case accumulated in the generation process thereof.

Abstract: A security support and evaluation system in accordance with the present invention accepts from an operator via an input unit 16, a first specification of a system to be evaluated and a second specification of each of the components constituting the system, and then retrieves data from a security countermeasure database 131 stored in an external storage unit 13 and reads out security countermeasures to be executed to each of the components of the specified system to be evaluated, and then displays on a display unit 17, the security countermeasures read out in correspondence with each of the components of the specified system to be evaluated, and then accepts from the operator via the input unit 16, information whether or not each of the security countermeasures is executed, and thereafter evaluates the state of security based on the information and displays evaluation results on the display unit 17.

Abstract: A security specification creation support device has a security specification example database in which existing security specifications are registered as examples. A definition information acceptance unit accepts the definition information of respective components constituting the information network system from the user. A security specification selection unit looks up reusable examples from the security specification example database using definition information of the component in question accepted by the definition information acceptance unit in respect of the respective components. A security specification draft creation unit creates a composite security specification draft in respect of an information network system by entering the details of respective examples found by the security specification selection unit in a prescribed form of security specification and accepts revisions of the draft in question from the user.

Abstract: In a network system in which each of multiple networks, each containing computers and relay computers, is connected to another network via multiple relay computers which belong to the network concerned, and the communication between two computers belonging to different networks is performed on a communication path via multiple relay computers, there is provided a management computer for collectively managing logs which are dispersively and separately recorded in the multiple respective relay computers.

Abstract: A method of conducting a connectionless communication in a network communication system including a client, a server, and a plurality of proxy servers which are disposed on a transmission path between the client and server. The communication is accomplished by use of specification of a communication address thereof and a port number dynamically assigned by the computer. (a) The server transmits own communication address and own port number to the client. (b) The client transmits own communication address and own port number as well as the communication address and port number of the server to a first adjacent proxy server computer. (c) The N-th (N≧1) proxy server transmits own communication address and own server side port number as well as the communication address and the port number of the server to an (N+1)-st proxy server. (d) step (e) is repeatedly executed by incrementally increasing N until the (N+1)-th proxy server becomes a terminal proxy server.

Abstract: In a network system in which each of multiple networks, each containing computers and relay computers, is connected to another network via multiple relay computers which belong to the network concerned, and the communication between two computers belonging to different networks is performed on a communication path via multiple relay computers, there is provided a management computer for collectively managing logs which are dispersively and separately recorded in the multiple respective relay computers.