Abstract: An activity trace extraction device includes: an acquisition unit that acquires information regarding behavior of malware; a detection unit that detects an activity trace of the malware on the basis of the information regarding behavior of malware acquired by the acquisition unit; an addition unit that executes taint analysis on the malware and adds a taint tag based on the taint analysis to an output value of a predetermined application programming interface (API) in a case where the malware calls the API; a determination unit that determines presence or absence of dependency of the activity trace on the basis of the taint tag added by the addition unit; and an extraction unit that extracts the activity trace as an activity trace effective for detecting the malware in a case where the determination unit determines that there is no dependency of the activity trace.

Abstract: An analysis function imparting device according to the present invention includes processing circuitry configured to execute a script engine while monitoring the script engine to acquire an execution trace including an application programming interface (API) trace and a branch trace, analyze the execution trace, and detect a hook point that is a location to which a hook is applied and a code for analysis is inserted, detect, based on monitoring at the hook point, a tap point that is a memory monitoring location at which the code for analysis outputs a log, and apply a hook to the script engine to impart an analysis function to the script engine based on the hook point and the tap point.

Abstract: A trace information determination device includes an extraction unit that extracts a feature of malware, a classification unit that performs clustering on the basis of the feature of malware extracted by the extraction unit and classifies the malware into a predetermined cluster, an attack tendency determination unit that determines a tendency of an attack of the malware on the basis of the cluster classified by the classification unit, and a validity determination unit that determines validity of trace information generated from an activity trace of the malware on the basis of a result of determination by the attack tendency determination unit.

Abstract: An activity trace extraction device executes malware to collect an analysis log including a plurality of activity traces of the malware, and executes the malware again to collect an environment change analysis log including the plurality of activity traces of the malware assumed in a case where an execution environment of a system and a device used at execution of the malware and information unique to application software are changed. The activity trace extraction device updates, based on the analysis log and the environment change analysis log, the analysis log by removing, from the analysis log, an activity trace different from an activity trace of the environment change analysis log among the plurality of activity traces included in the analysis log. The activity trace extraction device generates trace information of the malware independent of the execution environment based on the analysis log updated.

Abstract: An activity trace extraction device executes malware to collect an analysis log including a plurality of activity traces of the malware, and executes the malware again in an environment indicating time information different from time information at the time of executing the malware to collect a time change analysis log including a plurality of activity traces of the malware. The activity trace extraction device updates the analysis log by removing, from the analysis log, the activity trace different from the activity trace of the time change analysis log among the plurality of activity traces included in the analysis log based on the analysis log and the time change analysis log. The activity trace extraction device generates trace information of the malware independent of time lapse based on the updated analysis log.

Abstract: The power converter includes a semiconductor module including a first semiconductor element and a second semiconductor element connected in series, a multilayer substrate including a first wire connected to a first signal terminal of the first semiconductor element, a second wire connected to a second signal terminal of the first semiconductor element, a third wire connected to a third signal terminal of the second semiconductor element, and a fourth wire connected to a fourth signal terminal of the second semiconductor element, a first external connection terminal to which the first wire and the second wire are connected, and a second external connection terminal to which the third wire and the fourth wire are connected, the first and third wires being formed on a first layer with an insulating region interposed therebetween, the second and fourth wires being formed on a second layer with an insulating region interposed therebetween.

Abstract: The power converter includes a semiconductor module including a first semiconductor element and a second semiconductor element connected in series, a multilayer substrate including a first wire connected to a first signal terminal of the first semiconductor element, a second wire connected to a second signal terminal of the first semiconductor element, a third wire connected to a third signal terminal of the second semiconductor element, and a fourth wire connected to a fourth signal terminal of the second semiconductor element, a first external connection terminal to which the first wire and the second wire are connected, and a second external connection terminal to which the third wire and the fourth wire are connected, the first and third wires being formed on a first layer with an insulating region interposed therebetween, the second and fourth wires being formed on a second layer with an insulating region interposed therebetween.

Abstract: A busbar includes an opening, a first terminal, and a second terminal. The first terminal includes a first terminal piece with a step-like bent shape, in which the first terminal piece is bent from a conductor along a bending line, and a plurality of hole portions formed on the first terminal piece and arrayed in a direction parallel to the bending line. The second terminal includes a second terminal piece with a step-like bent shape, in which the second terminal piece is bent from a conductor along a bending line, and a plurality of hole portions formed on the second terminal piece and arrayed in a direction parallel to the bending line. The busbar balances the current sharing in a current that flows through a plurality of fastening points.

Abstract: A busbar includes an opening, a first terminal, and a second terminal. The first terminal includes a first terminal piece with a step-like bent shape, in which the first terminal piece is bent from a conductor along a bending line, and a plurality of hole portions formed on the first terminal piece and arrayed in a direction parallel to the bending line. The second terminal includes a second terminal piece with a step-like bent shape, in which the second terminal piece is bent from a conductor along a bending line, and a plurality of hole portions formed on the second terminal piece and arrayed in a direction parallel to the bending line. The busbar balances the current sharing in a current that flows through a plurality of fastening points.