Abstract: A measuring apparatus including: a transmission part transmitting a probe packet wherein a communication apparatus to be measured is arranged in a communication path destined for a destination-communication apparatus, a reception part receiving a response packet from destination-communication apparatus in response to the probe packet, a time-measuring part measuring time, an analyzing part analyzing the response packet, an output part outputting an analysis result, the analyzing part calculating analysis result based on measuring result of the time-measuring part.

Abstract: An information processing device acquires a first position indicating a physical position of a first communication device, a second position indicating a physical position of a second communication device, and a plurality of third positions indicating physical positions set in a path connecting the first position and the second position; and searches for a physical path corresponding to a communication path of the first communication device and the second communication device based on the first position, the second position, and the plurality of third positions.

Abstract: In order to record communication data via a communication network, in a storage apparatus in accordance with an appropriate data recording method, a data processing apparatus includes: an obtaining unit configured to obtain communication data including one or more packets continuously communicated via a communication network; a recording unit configured to record the communication data in a storage; and a reading processing unit configured to read the communication data from the storage, wherein the recording unit selects a first data compression method from among a plurality of data compression methods based on compression rate for each data compression method, reading speed of the communication data from the storage, and decompression speed of the communication data required from reading of the communication data to decompression of the communication data in accordance with each compression method, and records the communication data in accordance with the first data compression method.

Abstract: A concealment method includes: acquiring image data showing a background of an object; detecting a change in a component in a predetermined direction included in the image data; determining a pseudo direction of the image data on the basis of the result of the detection; and arranging, between the object and an observation position of the object, a first concealment body including a plurality of optical elements having a property of refracting light rays in a predetermined direction and continuously arranged in an arrangement direction in a state of the arrangement direction being oriented in a direction along the pseudo direction.

Abstract: Provided is an analysis device with which it is possible to find information relating to the intention and purpose of an attacker. The analysis device is provided with a purpose estimating means that estimates the purpose of behavior, based on predetermined behavior in the computer and knowledge information that includes the relation between the behavior and the purpose of executing the behavior.

Abstract: An information processing device acquires a measured value of a response time for each of combinations of two target devices of at least three target devices that are communicatively connected to each other, with one of the two devices operating as a first communication device and the other one of the two devices operating as a second communication device. The measured value of the response time is a measured value of a time from start of transmission process of a first communication packet to reception of a second communication packet. The first communication packet is a packet sent from the first communication device to the second communication device. The second communication packet is a packet sent from the second communication device to the first communication device in response to reception of the first communication packet by the second communication device.

Abstract: In order to appropriately accumulate communication data to be used for communication analysis, a communication processing apparatus 200 is configured to accumulate communication data to be used for communication analysis, and includes a data processing unit 235 configured to remove at least a part of the communication data to be accumulated, based on a communication property related to the communication data.

Abstract: Provided is an analysis device with which it is possible to find information relating to the intention and purpose of an attacker. The analysis device is provided with a purpose estimating means that estimates the purpose of behavior, based on predetermined behavior in the computer and knowledge information that includes the relation between the behavior and the purpose of executing the behavior.

Abstract: In order to perform data aggregation using an appropriate data aggregation method among a plurality of data aggregation methods used to narrow down candidate data for in-packet analysis from communication data, a data aggregation apparatus 100 includes: an obtaining unit 101 configured to obtain communication data via a communication network; a selecting unit 103 configured to select one or more first data aggregation methods based on user operation, from a plurality of data aggregation methods used to narrow down candidate data for in-packet analysis from the communication data; an aggregating unit 107 configured to perform data aggregation of the communication data, based on the one or more first data aggregation methods; and a display processing unit 109 configured to display, on a screen, an aggregated value related to the data aggregation.

Abstract: Provided is an analysis device with which it is possible to find information relating to the intention and purpose of an attacker. The analysis device is provided with a purpose estimating means that estimates the purpose of behavior, based on predetermined behavior in the computer and knowledge information that includes the relation between the behavior and the purpose of executing the behavior.

Abstract: Provided is an analysis apparatus including a first storage device configured to store data, and a processing circuitry that is configured to control the own apparatus to function as: a dispatcher that is communicably connected to an analysis target device that performs operational processing by use of a processor and a memory unit, and generates collection target data for reproducing at least part of a state of the operational processing in the analysis target device, in accordance with data being transmitted and received between the processor and the memory unit; a data mapper that assigns, to one or more areas included in the collection target data, tag information for identifying the area; and a data writer that saves the one or more areas into the first storage device in accordance with a first policy defining a procedure of saving the collection target data into the first storage device.

Abstract: Provided is a log information generation apparatus and the like that generates log information where log of communication via a communication network are arranged in communication occurrence order. A log information generation apparatus provides time information including a second time in an information processing apparatus to a difference calculation apparatus in accordance with communication start information transmitted to a plurality of information processing apparatuses communicably connecting to a communication network at a start of communication processing via the communication network, the difference calculation apparatus calculating a difference between a input first time and a reference time; and generates log information associating arranged time with a content of communication processing, the arranged time obtained by arranging a time of the communication processing based on the difference calculated for the second time by the difference calculation apparatus.

Abstract: An information collection system for efficiently collecting target information from an enormous amount of contents in a variety of formats is provided. The information collection system 100 includes a learning unit 110 and an extraction unit 130. The learning unit 110 generates, by using learning data, a parser rule for extracting a target character string from data, the target character string being a character string including specific information. The extraction unit 130 extracts the target character string from data by using the parser rule.

Abstract: A communication analysis apparatus (10) includes a communication control unit (110) that causes each of a plurality of first nodes to transmit a same communication request to a second node to be analyzed, a response result acquisition unit (120) that acquires a response result by the first node being, which is transmitted from the second node to each of the plurality of first nodes in response to the communication request from each of the first nodes, a response result analysis unit (130) that analyzes a response result by the first node, and an output unit (140) that outputs a result of the analysis to an output apparatus.

Abstract: Provided is a process control device, etc. capable of more reliably maintaining the soundness of an information processing system with regard to cybersecurity. A processing control device calculates a sum of a value indicating a risk included in processing information that includes one or more processing executed on an information processing apparatus during a certain period; and restricts processing to the information processing apparatus when the calculated sum value for the processing information satisfies a predetermined restriction condition.

Abstract: The present invention includes an acquisition unit (110) that acquires, for communication observed by a sensor apparatus on a network, communication information including behavior information indicating behavior of the communication and transmission source information indicating a transmission source of the communication, a classification unit (120) that classifies the acquired communication information, based on the behavior information, and an output unit (130) that outputs a classification result of the communication information based on the behavior information, together with the transmission source information.

Abstract: Provided is an analysis system configured to obtain an encryption key for encryption communication between an information communication apparatus and a communication network, from memory space provided in the information communication apparatus.

Abstract: A category information generating apparatus generates a measurement identifier of a measured value with respect to measurement information where the measured value for communication and a resource identifier of an apparatus generating the measured value are associated; extracts, when the resource identifier in the measurement information satisfies a condition regarding the resource identifier in extracted information where a condition for the resource identifier, an extraction item representing an item extracted from the measurement information when the condition is satisfied, and an extracted information identifier of the extraction item are associated, a particular measured value associated with the resource identifier; reads a value representing an extraction item in the extracted information from the particular measured value; and generates category information where a measurement identifier representing the particular measured value, the extracted information identifier in the extracted information, and

Abstract: Provided is a communication network determination apparatus, etc. capable of correctly specifying a communication network which can be monitored by a monitoring device even when necessary and sufficient configuration information about the configuration of the communication network cannot be obtained.

Abstract: A software analysis device which efficiently analyzes a computer environment in which software is capable of running are provided. The software analysis device sets at least two configurations to a virtual machine, executes processing at a timing on individual configuration, determines whether or not results of the processing satisfy a predetermined criterion, and determines that the software is executed when the results satisfies the predetermined condition.