Abstract: Provided is a wing structure comprising a wing body formed from fiber-reinforced plastic (FRP), and an erosion suppression layer provided so as to cover at least a portion of a front edge of the wing structure. The erosion suppression layer contains a thermal spraying layer configured so as to maintain, by having a prescribed surface roughness, a liquid film formed on the erosion suppression layer.

Abstract: An information processing apparatus includes a generation unit configured to generate, from a log obtained from a device, a graph structure indicating one or more associations between one or more processes and one or more objects related to the one or more processes, and an identifying unit configured to, in a case where one of objects of the device is specified, identify at least one process related to the specified one of the objects, based on the generated graph structure, and identify one or more objects related to the identified at least one process.

Abstract: A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with first context information related to the first data, and a determining unit configured to obtain second context information related to second data in a case where the second data is received from the device or any one of the multiple devices, and determine whether an analysis of the received second data is necessary based on the received second data and the obtained second context information and based on the first data and the first context information stored in the storage unit, are provided.

Abstract: A wind turbine blade is provided, which includes a blade body extending from a blade root toward a blade tip along a blade length direction, a first sprayed layer disposed so as to cover at least a leading edge on a side of the blade tip of the blade body, for suppressing erosion of the leading edge of the blade body, a second sprayed layer formed between the blade body and the first sprayed layer, and having a lower electrical resistivity than the first sprayed layer, and a first conductive part for electrically connecting the second sprayed layer to a ground.

Abstract: A mobile body including an apparatus and an information processing device, wherein the information processing device includes an acquisition unit that acquires a first signal and a second signal that are transmitted from the apparatus; and a determination unit that determines a relevance between the first signal and the second signal on the basis of a first spectrum of a frequency component of the first signal and a second spectrum of a frequency component of the second signal.

Abstract: A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with a first feature context related to the first data, and an analyzing unit configured to obtain a second feature context related to second data in a case where the second data is received from the device or any one of the multiple devices, and analyze an anomaly of the received second data based on the received second data and the obtained second feature context and based on the first data and the first feature context stored in the storage unit, are provided.

Abstract: There is provided an abnormal communication detection apparatus capable of reducing over-detection.

Abstract: Provided is a network configuration estimation device for estimating configuration information of an internal network in a target device. The network configuration estimation device includes a processor; and a memory that includes instructions, which when executed, cause the processor to execute the following steps: transmitting a message to an electronic control unit on the internal network by using a diagnostic communication method supported in a standard manner in the electronic control unit on the internal network and receiving a response to the message; and estimating the configuration information of the internal network based on the obtained response.

Abstract: An attack detection apparatus that detects an attack on a network within equipment, improves detection accuracy of an attack on the network within the equipment by including a processor and a memory storing program instructions that cause the processor to extract a set of two messages that have the same payload from a plurality of messages transmitted in a certain period, and determine whether or not the attack is made on the basis of whether or not another message is transmitted between transmissions of the two messages of the set and an interval of transmission of the two messages.

Abstract: An authentication apparatus that performs authentication of a client terminal by challenge-response authentication, the authentication apparatus includes one or more computers each including a memory and a processor configured to: receive a challenge request from the client terminal; generate a challenge as to the challenge request; and transmit the challenge to the client terminal. The memory and the processor are configured to generate the challenge by one generating method out of a fixed generating method in which a challenge of a fixed value is generated, and a random generating method in which a challenge of a random value is generated, in accordance with a state of the authentication apparatus.

Abstract: Provided is a communication apparatus communicating with an external apparatus connected via a network, and the communication apparatus includes a processor and a memory storing program instructions that cause the processor to: calculate a communication interval of data communicated within the communication apparatus; determine whether to perform communication with the external apparatus based on whether the communication interval is within a range set in advance; and transmit, to the external apparatus, communication data including the communication interval determined to perform communication with the external apparatus, latter data in the communication interval, and a transition between former data and the latter data in the communication interval, so that traffic from an apparatus to outside is reduced while suppressing deterioration in detection accuracy of unauthorized communication.

Abstract: An attack communication detection device that is robust against a deviation from the design value of a communication interval is provided.

Abstract: A device includes a memory; and a processor configured to execute first determining, for each data item generated in the device, a priority upon transmitting said each data item to an information processing apparatus, based on one or more rules set in advance; second determining, for said each data item, whether or not it is necessary to transmit said each data item to the information processing apparatus, based on the priority determined for said each data item; and transmitting a data item to the information processing apparatus among data items generated in the device for a predetermined period of time, the data item being determined by the second determining that it is necessary to transmit the data item to the information processing apparatus.

Abstract: A detection device includes: an object data extraction unit that extracts, from one or more pieces of communication data which are transmitted from one or more electronic control units, at least part of a payload contained in communication data that satisfies a predetermined condition, information by which the communication interval between the communication data can be calculated, and a serial number of the communication data as object data; a partial sequence creation unit that creates, using the extracted object data, a partial sequence containing information corresponding to at least part of a payload and information indicating a communication interval from two or more pieces of object data with the same serial number; and a detection unit that detects, using the created partial sequence, predetermined communication data based on the order relation between at least part of a payload and the corresponding part of another payload and a communication interval.

Abstract: A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with first context information related to the first data, and a determining unit configured to obtain second context information related to second data in a case where the second data is received from the device or any one of the multiple devices, and determine whether an analysis of the received second data is necessary based on the received second data and the obtained second context information and based on the first data and the first context information stored in the storage unit, are provided.

Abstract: A storage processing unit configured to store, in a storage unit, first data output by a device or any one of multiple devices in association with a first feature context related to the first data, and an analyzing unit configured to obtain a second feature context related to second data in a case where the second data is received from the device or any one of the multiple devices, and analyze an anomaly of the received second data based on the received second data and the obtained second feature context and based on the first data and the first feature context stored in the storage unit, are provided.

Abstract: An information processing apparatus includes a generation unit configured to generate, from a log obtained from a device, a graph structure indicating one or more associations between one or more processes and one or more objects related to the one or more processes, and an identifying unit configured to, in a case where one of objects of the device is specified, identify at least one process related to the specified one of the objects, based on the generated graph structure, and identify one or more objects related to the identified at least one process.

Abstract: A device includes a memory; and a processor configured to execute first determining, for each data item generated in the device, a priority upon transmitting said each data item to an information processing apparatus, based on one or more rules set in advance; second determining, for said each data item, whether or not it is necessary to transmit said each data item to the information processing apparatus, based on the priority determined for said each data item; and transmitting a data item to the information processing apparatus among data items generated in the device for a predetermined period of time, the data item being determined by the second determining that it is necessary to transmit the data item to the information processing apparatus.

Abstract: A malicious communication log detection device compresses first character strings representing characteristics of a communication log that is known to be malicious or benign, and second character strings obtained by coupling the first character strings with a character string representing a characteristic of a target communication log. The malicious communication log detection device calculates a score for determining whether the target communication log is malicious or benign based on a data size of the compressed first character strings and a data size of the compressed second character strings. The malicious communication log detection device determines whether the target communication log is malicious or benign based on the calculated score and a predetermined parameter.

Abstract: An analysis apparatus includes a memory and a processor configured to execute receiving log data transmitted from each device among a plurality of devices connected to a network, via the network; determining, for said each device, which one of a plurality of types of events corresponds to an event occurring in said each device, based on the log data transmitted from said each device; and detecting an occurrence of events across the plurality of devices, based on a comparison of the log data of the plurality of devices related to a plurality of events of a same type of determination results as determined by the determining.