专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060085857A1 Network virus activity detecting system, method, and program, and storage medium storing said program 有权
标题翻译：网络病毒活动检测系统，方法和程序以及存储所述程序的存储介质
公开(公告)号：US20060085857A1
公开(公告)日：2006-04-20
申请号：US11041434
申请日：2005-01-25
申请人： Kazumasa Omote , Masahiko Takenaka , Satoru Torii
发明人： Kazumasa Omote , Masahiko Takenaka , Satoru Torii
IPC分类号： G06F12/14 , H04L9/32 , G06F11/00 , G06F11/30 , G06F11/22 , G06F11/32 , G06F11/34 , G06F11/36 , G06F12/16 , G06F15/18 , G08B23/00
CPC分类号： H04L63/145 , G06F11/3006 , G06F11/3041 , G06F11/3055 , G06F21/566 , G06F21/85
摘要： In this system, a monitor unit monitors outbound communications through a network interface. A process designation unit designates a process 2X which has generated communications. A process tree obtaining unit obtains and outputs process tree information for designation of an upper process to the process 2X. A discrimination unit refers to an illegal rule file for definition of an illegal process by a combination of a process and an upper process which have generated communications, and determines whether or not a process 2X is illegal according to communications information, process information, and process tree information. A process stop unit stops a process 2X determined to be illegal. A notification unit notifies a user of the stop of the process 2X.
摘要翻译：在该系统中，监视器单元通过网络接口监视出站通信。处理指定单元指定已经生成通信的处理2 X。处理树获取单元获得并输出用于指定过程2 X的上位处理的处理树信息。鉴别单元通过过程和上级过程的组合来引用用于定义非法处理的非法规则文件，其具有并根据通信信息，处理信息和处理树信息确定进程2 X是否是非法的。过程停止单元停止被确定为非法的进程2 X。通知单元向用户通知进程2 X的停止。

2. 发明授权

US07752668B2 Network virus activity detecting system, method, and program, and storage medium storing said program 有权
标题翻译：网络病毒活动检测系统，方法和程序以及存储所述程序的存储介质
公开(公告)号：US07752668B2
公开(公告)日：2010-07-06
申请号：US11041434
申请日：2005-01-25
申请人： Kazumasa Omote , Masahiko Takenaka , Satoru Torii
发明人： Kazumasa Omote , Masahiko Takenaka , Satoru Torii
IPC分类号： G08B23/00
CPC分类号： H04L63/145 , G06F11/3006 , G06F11/3041 , G06F11/3055 , G06F21/566 , G06F21/85
摘要： In this system, a monitor unit monitors outbound communications through a network interface. A process designation unit designates a process 2X which has generated communications. A process tree obtaining unit obtains and outputs process tree information for designation of an upper process to the process 2X. A discrimination unit refers to an illegal rule file for definition of an illegal process by a combination of a process and an upper process which have generated communications, and determines whether or not a process 2X is illegal according to communications information, process information, and process tree information. A process stop unit stops a process 2X determined to be illegal. A notification unit notifies a user of the stop of the process 2X.
摘要翻译：在该系统中，监视器单元通过网络接口监视出站通信。处理指定单元指定已经生成通信的处理2X。处理树获取单元获取并输出用于指定处理2X的上位处理的处理树信息。歧视单元是指通过进行通信的处理和上位处理的组合来定义非法处理的非法规则文件，根据通信信息，处理信息和处理来判断处理2X是否为非法树信息。过程停止单元停止被确定为非法的过程2X。通知单元向用户通知处理2X的停止。

3. 发明申请

US20090106817A1 SECURITY MANAGEMENT APPARATUS, SECURITY MANAGEMENT SYSTEM, SECURITY MANAGEMENT METHOD, AND SECURITY MANAGEMENT PROGRAM 审中-公开
标题翻译：安全管理装置，安全管理制度，安全管理方法和安全管理方案
公开(公告)号：US20090106817A1
公开(公告)日：2009-04-23
申请号：US12338197
申请日：2008-12-18
申请人： Kazumasa Omote , Satoru Torii
发明人： Kazumasa Omote , Satoru Torii
IPC分类号： G06F21/00
CPC分类号： H04L63/14 , H04L29/06 , H04L63/145 , H04L67/34
摘要： A security management apparatus is capable of taking various security measures while referencing machine information and hence excellent in flexibility and widely applicable. The apparatus includes a security diagnostic unit for making a security diagnosis on the basis of security information obtained from a security information providing apparatus for providing information concerning security in a network and further on the basis of machine information obtained from at least one network machine connected to a network to judge a type of security-related processing to be executed for the network machine and also judge whether or not the security-related processing needs to be executed. A security execution unit executes predetermined security measure processing for the network machine on the basis of a result of diagnosis made by the security diagnostic unit.
摘要翻译：安全管理装置能够在引用机器信息的同时采取各种安全措施，因此具有优异的灵活性并且广泛适用。该装置包括：安全诊断单元，用于根据从安全信息提供装置得到的安全信息进行安全诊断，所述安全信息用于提供关于网络中的安全性的信息，并且还根据从至少一个连接到网络，用于判断为网络机器执行的安全相关处理的类型，并判断是否需要执行安全相关处理。安全执行单元根据由安全诊断部进行的诊断结果对网络机进行预定的安全措施处理。

4. 发明申请

US20070101404A1 Network relay method, network relay device, communication controller, and computer product 审中-公开
标题翻译：网络中继方式，网络中继设备，通信控制器和计算机产品
公开(公告)号：US20070101404A1
公开(公告)日：2007-05-03
申请号：US11368429
申请日：2006-03-07
申请人： Yoshiki Higashikado , Masashi Mitomo , Masahiro Komura , Bintatsu Noda , Kazumasa Omote , Satoru Torii
发明人： Yoshiki Higashikado , Masashi Mitomo , Masahiro Komura , Bintatsu Noda , Kazumasa Omote , Satoru Torii
IPC分类号： H04L9/32
CPC分类号： H04L29/12924 , H04L29/12584 , H04L61/2596 , H04L61/6063 , H04L63/0236
摘要： In a network relay device, unauthorized access from an internal computer to an external network is detected, an unauthorized destination service port used for the unauthorized access is specified, and a substitute port is allocated. A service relay unit and the internal computer are instructed to use the substitute port instead of the unauthorized destination service port, and an unauthorized access notification is sent. Mutual conversion of the unauthorized destination service port and a substitute service port is carried out, to relay a packet between an internal network and the external network.
摘要翻译：在网络中继装置中，检测到从内部计算机到外部网络的未经授权的访问，指定用于未经授权的访问的未经授权的目的地服务端口，并且分配替代端口。指示服务中继单元和内部计算机使用替代端口而不是未经授权的目的地服务端口，并发送未经授权的访问通知。执行未经授权的目的地业务端口和替代业务端口的相互转换，以在内部网络与外部网络之间转发数据包。

5. 发明申请

US20060291469A1 Computer-readable recording medium storing worm detection program, worm detection method and worm detection device 审中-公开
标题翻译：计算机可读记录介质存储蠕虫检测程序，蠕虫检测方法和蠕虫检测装置
公开(公告)号：US20060291469A1
公开(公告)日：2006-12-28
申请号：US11348335
申请日：2006-02-07
申请人： Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Bintatsu Noda , Masashi Mitomo , Satoru Torii
发明人： Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Bintatsu Noda , Masashi Mitomo , Satoru Torii
IPC分类号： H04L12/56
CPC分类号： H04L63/1408 , H04L63/145
摘要： A computer-readable recording medium recording a worm detection program which is preferably usable for a large-scale network and is capable of detecting worm communication with little information. A worm detection device which runs this program has a switching hub function, and comprises five physical ports that are network interfaces, a communication acquisition section, and a worm detector, for example. The communication acquisition section acquires ICMP type3 (destination unreachable message) packets going out of the physical ports. The worm detector determines whether the packet communication is worm communication, based on information on the ICMP type3 packets obtained for each source MAC address by the communication acquisition section and worm criteria set for determining whether communication is worm communication.
摘要翻译：记录蠕虫检测程序的计算机可读记录介质，其优选地可用于大规模网络，并且能够检测到具有很少信息的蠕虫通信。运行该程序的蠕虫检测装置具有交换集线器功能，例如包括作为网络接口的五个物理端口，通信采集部分和蠕虫检测器。通信获取部分获取离开物理端口的ICMP类型3（目的地不可达消息）。蠕虫检测器基于通过通信获取部分针对每个源MAC地址获得的ICMP类型3分组的信息和用于确定通信是否是蠕虫通信的蠕虫标准来确定分组通信是否是蠕虫通信。

6. 发明申请

US20050091533A1 Device and method for worm detection, and computer product 审中-公开
标题翻译：蠕虫检测装置及方法，电脑产品
公开(公告)号：US20050091533A1
公开(公告)日：2005-04-28
申请号：US10812622
申请日：2004-03-30
申请人： Kazumasa Omote , Satoru Torii
发明人： Kazumasa Omote , Satoru Torii
IPC分类号： G06F21/22 , G06F11/00 , G06F21/00 , H04L9/00 , H04L29/06
CPC分类号： H04L63/145 , G06F21/554 , G06F21/567
摘要： A communication-information acquisition section 240a acquires information related to a traffic and communication address of a communication packet based on setting information related to acquisition of information that is stored in setting-data. Worm detection section makes a judgment of whether a communication is executed by a worm based on information acquired by the communication-information acquisition section and information related to judgment criteria that is stored in the setting-data and which regulates whether the communication is executed by a worm.
摘要翻译：通信信息获取部240a基于与存储在设定数据中的信息的获取相关的设定信息，取得与通信包的通信地址和通信地址有关的信息。蠕虫检测部判断通过由通信信息获取部获取的信息是否由蠕虫执行通信，以及与存储在设定数据中的判断基准相关的信息，并且调节通过由虫。

7. 发明授权

US08307445B2 Anti-worm program, anti-worm apparatus, and anti-worm method 有权
标题翻译：防虫程序，防虫装置和防虫方法
公开(公告)号：US08307445B2
公开(公告)日：2012-11-06
申请号：US12168281
申请日：2008-07-07
申请人： Bintatsu Noda , Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Masashi Mitomo , Satoru Torii
发明人： Bintatsu Noda , Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Masashi Mitomo , Satoru Torii
IPC分类号： H04L29/06
CPC分类号： H04L63/1408 , G06F21/50
摘要： An anti-worm program allows a computer to execute control of communication suspected as worm communication, the program allowing the computer to execute: a communication information acquisition step that acquires communication information which is information concerning communication from a target source; and a communication control step that has a control amount calculation formula for calculating the control amount of the communication from the target source using the communication information and performs control of the communication from the target source based on the communication control amount obtained using the control amount calculation formula.
摘要翻译：防蠕虫程序允许计算机执行怀疑为蠕虫通信的通信的控制，所述程序允许计算机执行：通信信息获取步骤，获取作为来自目标源的通信的信息的通信信息; 以及通信控制步骤，具有控制量计算公式，用于使用所述通信信息从目标源计算通信的控制量，并且基于使用所述控制量计算获得的通信控制量来执行来自所述目标源的通信的控制式。

8. 发明授权

US07490149B2 Security management apparatus, security management system, security management method, and security management program 有权
标题翻译：安全管理装置，安全管理系统，安全管理方法和安全管理程序
公开(公告)号：US07490149B2
公开(公告)日：2009-02-10
申请号：US10729992
申请日：2003-12-09
申请人： Kazumasa Omote , Satoru Torii
发明人： Kazumasa Omote , Satoru Torii
IPC分类号： G06F15/173 , G06F15/16 , H04L9/32
CPC分类号： H04L63/14 , H04L29/06 , H04L63/145 , H04L67/34
摘要： A security management apparatus is capable of taking various security measures while referencing machine information and hence excellent in flexibility and widely applicable. The apparatus includes a security diagnostic unit for making a security diagnosis on the basis of security information obtained from a security information providing apparatus for providing information concerning security in a network and further on the basis of machine information obtained from at least one network machine connected to a network to judge a type of security-related processing to be executed for the network machine and also judge whether or not the security-related processing needs to be executed. A security execution unit executes predetermined security measure processing for the network machine on the basis of a result of diagnosis made by the security diagnostic unit.
摘要翻译：安全管理装置能够在引用机器信息的同时采取各种安全措施，因此具有优异的灵活性并且广泛适用。该装置包括安全诊断单元，用于根据从安全信息提供装置得到的安全信息进行安全诊断，所述安全信息用于提供关于网络中的安全性的信息，并且还根据从至少一个连接到网络，用于判断为网络机器执行的安全相关处理的类型，并判断是否需要执行安全相关处理。安全执行单元根据由安全诊断部进行的诊断结果对网络机进行预定的安全措施处理。

9. 发明申请

US20080271148A1 ANTI-WORM PROGRAM, ANTI-WORM APPARATUS, AND ANTI-WORM METHOD 有权
标题翻译：反恶意程序，防伪设备和反恶意方法
公开(公告)号：US20080271148A1
公开(公告)日：2008-10-30
申请号：US12168281
申请日：2008-07-07
申请人： Bintatsu NODA , Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Masashi Mitomo , Satoru Torii
发明人： Bintatsu NODA , Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Masashi Mitomo , Satoru Torii
IPC分类号： G06F21/00
CPC分类号： H04L63/1408 , G06F21/50
摘要： An anti-worm program allows a computer to execute control of communication suspected as worm communication, the program allowing the computer to execute: a communication information acquisition step that acquires communication information which is information concerning communication from a target source; and a communication control step that has a control amount calculation formula for calculating the control amount of the communication from the target source using the communication information and performs control of the communication from the target source based on the communication control amount obtained using the control amount calculation formula.
摘要翻译：防蠕虫程序允许计算机执行怀疑为蠕虫通信的通信的控制，所述程序允许计算机执行：通信信息获取步骤，获取作为来自目标源的通信的信息的通信信息; 以及通信控制步骤，具有控制量计算公式，用于使用所述通信信息从目标源计算通信的控制量，并且基于使用所述控制量计算获得的通信控制量来执行来自所述目标源的通信的控制式。

10. 发明申请

US20060291490A1 Computer-readable recording medium having recorded worm determination program, worm determination method, and worm determination apparatus 审中-公开
标题翻译：具有记录蠕虫确定程序，蠕虫确定方法和蠕虫确定装置的计算机可读记录介质
公开(公告)号：US20060291490A1
公开(公告)日：2006-12-28
申请号：US11346243
申请日：2006-02-03
申请人： Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Bintatsu Noda , Masashi Mitomo , Satoru Torii
发明人： Kazumasa Omote , Yoshiki Higashikado , Masahiro Komura , Bintatsu Noda , Masashi Mitomo , Satoru Torii
IPC分类号： H04L12/56
CPC分类号： H04L63/145
摘要： A computer-readable recording medium having recorded a worm determination program capable of reliably determining a worm-infected communication. A worm determination apparatus for executing the program includes a plurality of physical ports functioning as network connection ports, a communication-information-acquisition unit, and a worm determination unit. The communication-information-acquisition unit acquires information about a packet type, classified according to a transmission-source address. The worm determination unit determines whether a communication is performed by a worm, based on the information about the packet type, classified according to the transmission-source address, acquired by the communication-information-acquisition unit and a determination criterion used for determining whether a communication is performed by a worm.
摘要翻译：一种记录了能够可靠地确定蠕虫感染通信的蠕虫确定程序的计算机可读记录介质。用于执行程序的蠕虫确定装置包括用作网络连接端口的多个物理端口，通信信息获取单元和蠕虫确定单元。通信信息获取单元获取关于根据发送源地址分类的分组类型的信息。蠕虫确定单元基于由通信信息获取单元获取的根据发送源地址分类的关于分组类型的信息，以及用于确定是否由通信由蠕虫执行。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式