Granted Patent B2

US 12,732,428 · App. 18/716,981 · Granted Sep 8, 2026

Inventor: Yuki Ashino (Tokyo, JP)

Assignee: NEC CORPORATION

H04L41/0866H04L43/08

Abstract

Claims (23)

1 . An analysis device comprising:

a memory configured to store instructions;

a processor configured to execute the instructions to:

compare first communication feature information and second communication feature information to determine a presence or absence of a similarity in the communication feature information, wherein the first communication feature information has been generated based on communication data that has been transmitted a plurality of times over a predetermined time period with another communication device that is connected to a communication network, the first communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof, the second communication feature information has been generated based on new communication data that has been transmitted a plurality of times over the predetermined time period with the other communication device that is connected to the communication network, and the second communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof; and

output a determination result indicating a presence or absence of a change relating to the communication network based on the presence or absence of the similarity,

wherein comparing the first communication feature information and the second communication feature information to determine the presence or absence of the similarity comprises:

determining the presence or absence of the similarity in the communication feature information based on whether or not a sum of differences in a time period corresponding to the cumulative relative frequency indicated by each of the first communication feature information and the second communication feature information is greater than or equal to a threshold.

2 . The analysis device according to claim 1 , wherein the processor is configured to execute the instructions to output a determination result indicating a presence or absence of a change relating to the other communication device that is connected via the communication network based on the presence or absence of the similarity.

3 . The analysis device according to claim 1 , wherein the processor is configured to execute the instructions to output a determination result indicating a presence or absence of a change relating to a network configuration of the communication network based on the presence or absence of the similarity.

4 . An analysis method comprising:

comparing first communication feature information and second communication feature information to determine a presence or absence of a similarity in the communication feature information, wherein the first communication feature information has been generated based on communication data that has been transmitted a plurality of times over a predetermined time period with another communication device that is connected to a communication network, the first communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof, the second communication feature information has been generated based on new communication data that has been transmitted a plurality of times over the predetermined time period with the other communication device that is connected to the communication network, and the second communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof; and

outputting a determination result indicating a presence or absence of a change relating to the communication network based on the presence or absence of the similarity,

wherein comparing the first communication feature information and the second communication feature information to determine the presence or absence of the similarity comprises:

determining the presence or absence of the similarity in the communication feature information based on whether or not a sum of differences in a time period corresponding to the cumulative relative frequency indicated by each of the first communication feature information and the second communication feature information is greater than or equal to a threshold.

5 . A non-transitory storage medium that stores a program that causes a computer of an analysis device to execute:

comparing first communication feature information and second communication feature information to determine a presence or absence of a similarity in the communication feature information, wherein the first communication feature information has been generated based on communication data that has been transmitted a plurality of times over a predetermined time period with another communication device that is connected to a communication network, the first communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof, the second communication feature information has been generated based on new communication data that has been transmitted a plurality of times over the predetermined time period with the other communication device that is connected to the communication network, and the second communication feature information represents a feature of a relationship between a time period from transmitting the communication data to the other communication device until receiving a response to the communication data, and a cumulative relative frequency thereof; and

outputting a determination result indicating a presence or absence of a change relating to the communication network based on the presence or absence of the similarity,

wherein comparing the first communication feature information and the second communication feature information to determine the presence or absence of the similarity comprises:

determining the presence or absence of the similarity in the communication feature information based on whether or not a sum of differences in a time period corresponding to the cumulative relative frequency indicated by each of the first communication feature information and the second communication feature information is greater than or equal to a threshold.

6 . The analysis method according to claim 4 , wherein a determination result is output which indicates a presence or absence of a change relating to the other communication device that is connected via the communication network based on the presence or absence of the similarity.

7 . The analysis method according to claim 4 , wherein a determination result is output which indicates a presence or absence of a change relating to a network configuration of the communication network based on the presence or absence of the similarity.

8 . The non-transitory storage medium according to claim 5 , wherein a determination result is output which indicates a presence or absence of a change relating to the other communication device that is connected via the communication network based on the presence or absence of the similarity.

9 . The non-transitory storage medium according to claim 5 , wherein a determination result is output which indicates a presence or absence of a change relating to a network configuration of the communication network based on the presence or absence of the similarity.

Assignments (1)

Continuity (1)

References Cited (16)