Abstract: A specification unit (15b) specifies a path of traffic on the basis of past flow information. A determination unit (15c) determines a network device on the specified path for traffic related to a designated event.

Abstract: Provided are a network information visualization device, a network information visualization method, a network information visualization program, and a network information visualization system that visualizes useful information in network monitoring and improve reliability of a network. An information acquisition unit (11) acquires network information regarding a VPN network (2) including at least flow information having statistical information regarding communication in the VPN network (2). An association unit (12) associates the flow information with another network information included in the network information and generates associated flow information. A visualization unit (14) generates visualization information in which the flow information is associated with the other network information based on the associated flow information.

Abstract: The disclosed test system includes: a lighting apparatus which emits light from multiple light-emitting elements to illuminate a product to be inspected; a lighting controller which divides the light-emitting elements into N number of areas, and sequentially supplies current to emit light in each lighting period; a camera which sequentially captures images of the product in an image-capturing period synchronizing with the lighting period; a test system control device; a first wiring cable which supplies DC power from the camera to the light controller; and a second wiring cable which supplies DC power from the test system control device to the camera. N number of images captured by the camera are reconstructed to one inspection image through inter-image calculation or inter-pixel calculation. The disclosed system simplifies wiring.

Abstract: The disclosed test system includes: a lighting apparatus which emits light from multiple light-emitting elements to illuminate a product to be inspected; a lighting controller which divides the light-emitting elements into N number of areas, and sequentially supplies current to emit light in each lighting period; a camera which sequentially captures images of the product in an image-capturing period synchronizing with the lighting period; a test system control device; a first wiring cable which supplies DC power from the camera to the light controller; and a second wiring cable which supplies DC power from the test system control device to the camera. N number of images captured by the camera are reconstructed to one inspection image through inter-image calculation or inter-pixel calculation. The disclosed system simplifies wiring.

Abstract: An analysis device (40) receives an xFlow packet that is generated based on a sampled encapsulation packet and includes information regarding an outer header of the encapsulation packet and statistical information of a flow including the encapsulation packet. The analysis device (40) collates information regarding the outer header associated with information for identifying a user of VPN with information regarding the outer header included in the xFlow packet received by a reception unit (431), and specifies the user of the VPN from which the xFlow packet is transferred.

Abstract: A division unit divides communication traffic in a communication network into a plurality of streams. A calculation unit calculates a first abnormality degree based on a result of autoregressive analysis of a first stream among the plurality of streams, and a second abnormality degree based on a comparison result between the first stream and a second stream similar to the first stream. A determination unit determines whether the cause of the abnormality is the first stream, a stream different from the first stream, or a communication network based on the first abnormality degree and the second abnormality degree.

Abstract: A first collection unit (15a) stores an association between an IP address of the user terminal, a domain name, and an IP address of a communication destination server corresponding to the domain name in a name resolution information collection DB (14a) of a storage unit (14) using a name resolution packet between a user terminal and a DNS server. A second collection unit (15b) stores a correspondence among an IP address outside a capsule of a user terminal, an IP address inside the capsule, and an IP address of a communication destination server 3 in an inner-outer association DB (14b) of the storage unit (14) using header information outside the capsule of an encapsulated packet between the user terminal and the communication destination server and header information inside the capsule.

Abstract: Provided is a non-contact blood flow observation apparatus that enables speedy and clear observation of states of blood flow in a contactless manner. This non-contact blood flow observation apparatus 1 includes an image acquirer 2 that acquires a first image 2im that is a moving image or a series of still images of a region including a blood vessel, and an image processor 3 that correlates a different color with each gradation of brightness in advance, creates a second image 3im by assigning the color corresponding to the brightness for each singular or plurality of pixels in the first image 2im, and displays the second image 3im that is a moving image or a series of still images on a display device 5.

Abstract: Provided is a non-contact blood vessel analyzing method that enables speedy and detailed contactless analysis of states of blood vessels. This non-contact blood vessel analyzing method uses a non-contact blood vessel analyzing device 1 that includes a light irradiator 2 that casts light on a skin surface site including a blood vessel region, an image acquirer 3 that acquires an image 3im that is a moving image or a series of still images of the skin surface site, and an image processor 4 that derives at least a first waveform that indicates temporal change of a brightness value in a first wavelength domain and a second waveform that indicates temporal change of a brightness value in a second wavelength domain, in a certain region in the image 3im. A frequency, a phase, or an amplitude, of the first waveform and the second waveform, is derived.

Abstract: A conversion device analyzes an input packet and acquires header information included in the packet. Furthermore, the conversion device classifies packets into one of a plurality of groups on the basis of the acquired header information and set grouping conditions. Subsequently, the conversion device generates packets for analysis on the basis of the processing corresponding to the classified groups.

Abstract: A conversion device (10) analyzes an input packet and acquires header information included in the packet. Furthermore, the conversion device (10) classifies packets into one of a plurality of groups on the basis of the acquired header information and set grouping conditions. Subsequently, the conversion device (10) generates packets for analysis on the basis of the processing corresponding to the classified groups.

Abstract: A conversion device analyzes information of an input packet using hardware and determines whether to perform predetermined previous stage processing using the hardware. Furthermore, when it is determined to perform the previous stage processing, the conversion device uses the hardware to provide metadata including identification information indicating a group of packets to the packets on the basis of the fixed-length header information of the packets. In addition, the conversion device uses software to generate analysis packets corresponding to the group of packets using the provided metadata.

Abstract: An extraction unit extracts predetermined information from an outer header and an inner header of a tunneled packet passing through a network device in which congestion has occurred. An evaluation unit evaluates an order in which fine grain flows in a tunnel subdivided with reference to the extracted predetermined information are subject to TE, based on attribute information of the fine grain flows.

Abstract: A design apparatus optimizes, with a first granularity (for example, a real number solution), a traffic volume allocated to each of links between adjacent nodes included in a network. In addition, the design apparatus calculates an approximation solution obtained by approximating, with a second granularity (for example, an integer solution), the traffic volume having been optimized with the first granularity. Furthermore, the design apparatus maps logical paths to each of routes constituted by the links in accordance with the approximated traffic volume.

Abstract: A feature calculation unit calculates a feature of header information of a packet. A classification unit classifies the packet as a normal packet or an abnormal packet by using the calculated feature. An adding unit adds a label indicating a tool name of a known attack tool to header information of a packet attacked using the attack tool. A learning unit learns the addition of the label by using the label and the feature calculated for the packet to which the label has been added as teacher data.

Abstract: An emulation processor may be configured to support emulating unknown binary logic based on non-arbitrariness of the unknown binary logic. For example, an unknown binary logic signal may take the finite binary values of 0 and 1. The circuitry in the emulation processor is configured to generate and propagate outputs based on the interactions of known input binary signals with the unknown input binary signals having non-arbitrary states. The emulation processor may support the both combinational and sequential operations associated with the unknown binary logic.

Abstract: When the deletion unit deletes the outer header of the encapsulated packet, the outer header and a field containing information of the outer header are provided in the packet. In addition, when re-encapsulating a received packet, the addition unit adds an outer header to the packet by using information of the outer header extracted from the field.

Abstract: A detection device includes: a statistic unit that acquires statistical value data on 5-tuple flows in a certain time period; a degree centrality calculation unit that calculates a degree centrality of a node including an indegree, which is a total sum of a weight of each edge flowing into the node, and an outdegree, which is a total sum of a weight of each edge flowing out of the node, based on the statistical value data on the 5-tuple flows in the certain time period; and a degree centrality impartation unit that imparts the degree centrality, as a feature, to the statistical value data on the 5-tuple flows in the certain time period.

Abstract: A continuity checking apparatus generates a continuity checking packet to which a predetermined flag and user attributes are assigned and transmits the generated continuity checking packet to an edge router connected to a service that is an entrance of a service chain. Each service transmits an arrival message with respect to the continuity checking packet to the continuity checking apparatus upon reception of the continuity checking packet to which the predetermined flag is assigned. In addition, each service transfers the continuity checking packet to a next service device of the service chain on the basis of the user attributes assigned to the received continuity checking packet. The continuity checking apparatus identifies a path representing service devices through which the continuity checking packet passes on the basis of the arrival message transmitted from each service, and determines whether the identified path is the same as a path of the service chain that is a continuity checking target.

Abstract: The controller (10) acquires information about the band of the flow within the tunnel and the band of each flow after policing or shaping, calculates the ratio of the traffic volume after policing or shaping to the traffic volume before policing or shaping by using the acquired information about the band, and estimates the traffic volume of the flow to be monitored within the tunnel by using the calculated ratio and the band of each flow after policing or shaping.