Abstract: The server device includes a communication unit and a control unit that performs communication using the communication unit, and the control unit is configured to provide power when power is supplied to the power-supplied vehicle from a terminal device within a predetermined range including the power-supplied vehicle. When information requesting a possible service is received, a power supply vehicle that can provide the service and can supply power to the power supplied vehicle is instructed to move for power supply.

Abstract: The server device includes a communication unit and a control unit that performs communication using the communication unit, and the control unit determines the remaining battery level based on information about the user's travel schedule and the remaining battery capacity of the user's vehicle. A point and time at which a predetermined state will occur is predicted, and information proposing dispatch of a power supply vehicle to the point is sent to the user's terminal device at the time, prompting the user to decide on the dispatch.

Abstract: The server device includes a communication unit and a control unit that performs communication using the communication unit. The control unit sends a movement instruction to the first power supply vehicle to the position of the power supply vehicle when the traffic situation around the power supply vehicle that requires power supply is a first situation. When the traffic situation is a second situation where the degree of congestion is higher than the first situation, the control unit causes a second power supply vehicle having a higher power generation capacity than the first power supply vehicle to move to the position of the power supplied vehicle. Send movement instructions.

Abstract: A server device includes a communication unit and a control unit. The control unit is configured to acquire information on a first power purchase price from a charging point and a second power purchase price from a facility, and when the second power purchase price is lower than the first power purchase price, send to a power supply vehicle configured to supply power to another vehicle an instruction to move along a travel route that passes through the facility.

Abstract: A server apparatus includes a communication interface, and a controller configured to communicate with vehicles using the communication interface, acquire information on a required charge amount and a position of a vehicle that needs to be charged, and provide instructions that a power supply vehicle that does not have the required charge amount is to travel a route where road surface power supply is available to the position.

Abstract: The server device communicates with a plurality of power supply vehicles that dispatch from a power supply base to the power supply destination and return to the power supply base through the communication unit through the communication unit, and performs a first power supply during returning. a control unit that instructs the vehicle and a second power supply vehicle on the move to merge at a junction and provide the remaining power of the first power supply vehicle to the second power supply vehicle.

Abstract: A calculation device receives input of a plurality of pieces of training data including a communication destination known to be malignant as data. The calculation device generates a model that calculates a malignant degree of an input communication destination from each piece of the training data. The calculation device gives weight to each of the models, and generates a mixed model using the model and the weight. The calculation device calculates a malignant degree of a communication destination unknown whether the communication destination is malignant using the mixed model.

Abstract: A phishing site detection device extracts, from a phishing kit, a condition of access sources with which the access to a phishing site is blocked. Then, the phishing site detection device accesses a phishing site constructed by the phishing kit using one or more extracted conditions of access sources, and stores an access result for each condition of access sources in an access result storage module. Thereafter, the phishing site detection device sets a condition of access sources with which the access to the phishing site constructed by the phishing kit is blocked, accesses a website to be detected, and determines whether the website is a phishing site on the basis of the access result.

Abstract: A feature extraction unit extracts, from an advertising request to view an online advertisement, client information on a client as a transmission source of the advertising request and publisher information on a website of a publisher who displays advertising, and calculates a predetermined feature amount using the client information and the publisher information with respect to a plurality of advertising requests including at least a benign advertising request, and a determiner generation unit generates a determiner that determines whether an advertising request is malignant or not by using the calculated feature amount.

Abstract: A classification apparatus includes: a crawler unit that acquires access result data for a website, the access result data including website application information, web server information, and the like that are updated by an administrator of the website; an update history generation unit that generates an update history of the website by making comparison in chronological order between pieces of information included in the access result data for the website; a classifier generation unit that generates a classifier that classifies a website having a possibility of being abused in the future, by using, as a feature value, the update history of the website; and a classification unit that classifies, through the classifier generated, the website having the possibility of being abused in the future.

Abstract: An extracting unit randomly extracts a block from among the blocks of instruction strings constituting the byte code of a first program and, at the time of execution of the first program, extracts the blocks which are invariably executed before the randomly-extracted block. A dividing unit randomly divides, into a plurality of blocks, the instruction strings constituting the byte code of a second program which enables detection of tampering of the first program. An inserting unit inserts the plurality of blocks, which are obtained by division by the dividing unit, at different positions in the block extracted by the extracting unit, while maintaining the execution sequence written in the second program.

Abstract: A classification apparatus that classifies sequential data, in which input communication destinations in a plurality of communications are recorded in order of occurrence of the communications, into a class that has a similar feature. There is a numerical vector calculation unit-configured to calculate numerical vectors that represent characteristics of communication destinations for each of the communication destinations, on the basis of sequential data in which the communication destinations in a plurality of communications are recorded in order of occurrence of the communications, and a classification unit-configured to classify the sequential data into a class that has a similar feature, on the basis of order relation of the communication destinations of the numerical vectors.

Abstract: A feature extraction unit extracts, from an advertising request to view an online advertisement, client information on a client as a transmission source of the advertising request and publisher information on a website of a publisher who displays advertising, and calculates a predetermined feature amount using the client information and the publisher information with respect to a plurality of advertising requests including at least a benign advertising request, and a determiner generation unit generates a determiner that determines whether an advertising request is malignant or not by using the calculated feature amount.

Abstract: A phishing site detection device extracts, from a phishing kit, a condition of access sources with which the access to a phishing site is blocked. Then, the phishing site detection device accesses a phishing site constructed by the phishing kit using one or more extracted conditions of access sources, and stores an access result for each condition of access sources in an access result storage module. Thereafter, the phishing site detection device sets a condition of access sources with which the access to the phishing site constructed by the phishing kit is blocked, accesses a website to be detected, and determines whether the website is a phishing site on the basis of the access result.

Abstract: An access classification device includes: a processor configured to: construct a plurality of trees in each of which at least a first destination and a second destination are set as nodes, content information corresponding to the nodes is added to the nodes, and an instruction to transfer an access from the first destination to the second destination is set as an edge; associate nodes of the plurality of trees with each other for the plurality of trees constructed, based on similarity between local structures of the trees; calculate similarity between the nodes associated with each other in the plurality of trees, based on the content information added to the nodes, and calculate similarity between the plurality of trees using the calculated similarity between the nodes associated with each other; and classify the access into a set with similar features, based on the similarity calculated.

Abstract: A calculation device receives input of a plurality of pieces of training data including a communication destination known to be malignant as data. The calculation device generates a model that calculates a malignant degree of an input communication destination from each piece of the training data. The calculation device gives weight to each of the models, and generates a mixed model using the model and the weight. The calculation device calculates a malignant degree of a communication destination unknown whether the communication destination is malignant using the mixed model.

Abstract: An analysis apparatus has a transfer path matching unit that is provided with a real browser log La and a browser emulator log Lb as input and identifies, as a specific transfer path, a transfer path that is not transferred to a malicious URL on a pseudo-browser where the transfer path is transferred to the malicious URL on a real browser, based on the malicious URL information in a malicious URL database, and an analysis avoidance code identification unit that identifies an analysis avoidance code that avoids analysis by utilizing a browser-specific function or an implementation difference between the real-browser and the pseudo-browser, among script codes that are executed on a website, based on the specific transfer path.

Abstract: A combining apparatus has an acquiring unit that acquires script codes included in a website and having been divided and written at plural locations in the website; and a code combining unit that combines a plurality of the divided script codes written therein, based on a dependency between data in the divided script codes written therein acquired by the acquiring unit, or a dynamic generation relation arising from execution of the divided script codes written therein.

Abstract: A classification apparatus includes: a crawler unit that acquires access result data for a website, the access result data including website application information, web server information, and the like that are updated by an administrator of the website; an update history generation unit that generates an update history of the website by making comparison in chronological order between pieces of information included in the access result data for the website; a classifier generation unit that generates a classifier that classifies a website having a possibility of being abused in the future, by using, as a feature value, the update history of the website; and a classification unit that classifies, through the classifier generated, the website having the possibility of being abused in the future.

Abstract: A browser emulator manager causes a browser emulator(s) to access a website. The browser emulator traces content interpretation and script execution on a browser that have occurred by access to the website. When detecting transfer, the browser emulator records, in transfer information, a transfer method, a transfer source URL, and a transfer destination URL thereof. When detecting the script execution, the browser emulator records, in the transfer information, an execution method and an execution source script thereof. A graph construction unit constructs a directed graph on the basis of the transfer information. Thereafter, a graph analysis unit specifies places of content and a script causing the transfer by tracing the directed graph.