Abstract: In order to provide an evaluation apparatus that appropriately evaluates a risk from continuous execution of an application without stopping execution of the application, an evaluation apparatus includes a first obtaining section, an evaluating section, and an output section. The first obtaining section is configured to obtain application information related to an application being executed on a server. The evaluating section is configured to evaluate a risk degree from continuous execution of the application on the server, based on the application information. The output section is configured to output an evaluation result of the risk degree.

Abstract: A communication route setting device 100 of the present invention includes an optical signal acquisition unit 121 that acquires an optical signal on a transmission path in a network in which optical communication devices are connected to each other via an optical transmission path, a condition determination unit 122 that determines a physical condition of at least one object of the optical transmission path and the optical communication devices on the basis of the optical signal, and a route setting unit 123 that sets a communication route for transmitting the optical signal on the network on the basis of the determined physical condition.

Abstract: In order to provide an evaluation apparatus that appropriately evaluates risk of a source code changing over time, an evaluation apparatus includes a generating unit and an output unit. The generating unit generates an evaluation related to risk of a first library described in a source code. The output unit calculates the degree of risk of the fist library, based on at least the generated evaluation, calculates a risk value indicating risk inherent in the source code, based on the calculated degree of risk, and also outputs time-series data of the calculated risk value.

Abstract: In order to attain an object of providing a technique to, upon detection of an abnormality in a welded part, provide notification of a factor of the detected abnormality, an abnormality diagnosis apparatus includes: an acquisition means (21) for acquiring time series data containing at least one of an electric current value and a voltage value at first welding; an abnormality determination means (22) for determining, with use of an abnormality determination model and based on the time series data acquired by the acquisition means, whether or not there is an abnormality in a welded part at the first welding; and an output means (23) for, if the abnormality determination means has determined that there is an abnormality, outputting the determination result and at least one of a factor of the abnormality and a remedial method for solving the abnormality.

Abstract: A network configuration device according to the present disclosure is provided with: a device-information acquisition means for acquiring visualized device information about a configuration and a risk regarding a network device connected to a physical network; an authenticity determination means for determining authenticity of the network device on the basis of the acquired device information; and a network configuration means for configuring a virtual network on the physical network on the basis of a result of determination made as to the authenticity of the network device.

Abstract: A risk information output device according to the present disclosure comprises: a risk information acquisition means for acquiring risk information extracted from log information on a network apparatus to be monitored; an apparatus information acquisition means for acquiring apparatus information for the network apparatus; an authenticity determining means for determining the authenticity of the network apparatus on the basis of the acquired apparatus information; a priority determining means for determining, on the basis of the determined authenticity determination result, the priority of outputting the risk information; and an output means for outputting the risk information on the basis of the determined priority.

Abstract: A network configuration device according to the present disclosure comprises: an authenticity requirement information acquiring means that acquires authenticity requirement information related to the requirement of authenticity with respect to a communication service; an equipment information acquiring means that acquires equipment information in which the configuration and risk related to network equipment to be connected to a physical network are visualized; an authenticity determination means that determines the authenticity of the network equipment on the basis of the acquired equipment information; and a network configuration means that configures a virtual network on the physical network on the basis of the authenticity requirement information and the determination result of the authenticity of the network equipment.

Abstract: A model analysis device according to the present disclosure is provided with: a target information acquisition means that acquires equipment configuration information including hardware configuration information and software configuration information, which consists of firmware configuration information and protocol processing software configuration information, about a verification target; a model information acquisition means that acquires configuration information from which a trained model used to verify the verification target has been generated; a suitability evaluation means that evaluates the suitability of the verification target for the trained model on the basis of the acquired configuration information about the verification target and the trained model; and an output means that outputs the evaluation result.

Abstract: In an information processing device, a provision means provides multiple terminals with a common search model. A filter acquisition means acquires, from each terminal, a filter configured by a feature value obtained using the search model. A data acquisition means acquires, from each terminal, a target time series data subjected to state estimation. A estimation means estimates a state of the terminal which outputted the target time series data, based on the target time series data and the filter.

Abstract: Based on a normal model, it is detected whether or not an event signal of a computer system is anomalous. In parallel with the normal-model-based anomaly detection, it is detected based on a rule whether or not the event signal is anomalous. Then, a final anomaly detection result is generated by performing comprehensive determination based on detection results of the normal-model-based anomaly detection and the rule-based anomaly detection.

Abstract: A policy evaluation apparatus (2000) acquires, with respect to each of a plurality of control groups (10) including an evaluation target group, control policies (20). Each of the control policy (20) indicates execution permission/non-permission of an application. Further, the policy evaluation apparatus (2000) compares an evaluation target policy being the control policy (20) of the evaluation target group with other plurality of control policies (20), and generates evaluation information (30) based on the comparison result.

Abstract: In order to attain the object of providing a technique that allows a process of constructing a model to be presented in an easily understandable manner, a model generation assistance apparatus includes: an acquisition section that acquires trial information including a parameter used in a trial in a process of constructing an AI model; an inference section that infers association between a plurality of trials on the basis of a difference between respective pieces of trial information of the plurality of trials; and an output section that outputs display data including (i) a plurality of nodes respectively representing the plurality of trials and (ii) a link representing the association.

Abstract: A learning device 100 according to this invention includes: a classification unit 121 configured to classify measurement value data measuring performance of an object on the basis of situation data each representing a situation of the object when the measurement value data are measured; a selection unit 122 configured to select the measurement value data from each of the classifications according to the number of the measurement value data for each of the classifications; and a learning unit 123 configured to perform machine learning on the basis of the selected measurement value data.

Abstract: An information processing apparatus (10) includes acquisition means (11) for acquiring information indicating a defect of a first relay apparatus (20), and control means (12) for changing at least one of a setting of the first relay apparatus regarding communication and a setting of a second relay apparatus (20) regarding communication based on the information acquired by the acquisition means, the second relay apparatus being configured to communicate with the first relay apparatus.

Abstract: In a model optimization device for a parameter estimation concerning optical communications, A model acquisition acquires a trained model. A data acquisition means acquires data from a terminal device. A model update means performs a model update of the trained model step by step to generate an updated model based on the data. A model output means outputs to an output destination device corresponding to the terminal device.

Abstract: An estimation apparatus includes: an acquiring unit that acquires performance information corresponding to the performance of light from nodes configuring an optical network; and an estimating unit that compares the performance information to be an estimation target acquired by the acquiring unit with performance information at normal time at which no anomaly occurs, and performs at least one of estimation of anomaly occurrence and identification of an anomaly occurring node.

Abstract: A warning apparatus (2000) acquires first detected event information (10) representing, at a first abstraction level, an event set being a set of events having occurred in a target system. The warning apparatus (2000) generates second detected event information (20) from the first detected event information (10). The second detected event information (20) represents, at a second abstraction level, the event set represented by the first detected event information (10). The warning apparatus (2000) determines, from among a plurality of pieces of threat information (30) each representing a threat activity, the threat information (30) having a high degree of relevance to at least either of the first detected event information (10) and the second detected event information (20).

Abstract: The present invention reduces the load on a user when performing remote machine diagnosis. An acquisition unit (11) acquires time-series data obtained from equipment of the machine, a prediction unit (12) predicts the state of the machine on the basis of the time-series data, a search unit (13) uses the time-series data as a query to search a knowledge database, storing records of past diagnoses, for knowledge information related to the state of the machine, and a provision unit (14) provides the prediction result and the knowledge information.

Abstract: An analysis condition for security risk for a data flow in a system to be analyzed is automatically generated. An analysis condition generating apparatus lA generates from a natural sentence, using ontology in which a relationship is described between one or more nodes on a data flow graph that indicates a data flow in a system to be analyzed and one or more edges that indicate an event related to the nodes, graph structural data indicating the relationship between the nodes and the edges, and generates an analysis condition for analyzing security risk for the system to be analyzed based on the graph structural data.

Abstract: It is determined whether to involve the security risk based on the data flow in the system to be analyzed. An analysis apparatus 1A a historical information collecting unit 220A configured to collect historical information on an operational history for a program executed in a system to be analyzed, an information adding unit 230 configured to add to the historical information, external information obtained from an information resource other than an information processing apparatus that executes the program, and a risk determining unit 180A configured to perform a risk determining processing for determining based on preset determining condition, whether to involve security risk in the historical information to which the external information is added.