Overlay Underlay Log Correlation for Unauthorized Access Blocking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing incident management systems face challenges in quickly handling incidents while controlling costs due to the need for labor-intensive analysis of dispersed log information across different network devices, often leading to costly and delayed responses.
Innovation Solution
An information processing apparatus that integrates security, authentication, and communication logs from overlay and underlay networks to identify unauthorized communications by comparing IP addresses, allowing for rapid identification and blocking of such activities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a large number of applications are managed in the background, then service functionality is enhanced, but power consumption increases and battery life is reduced
Solution Approach 1:
The system automatically manages application states by detecting user presence and activity patterns. The processor autonomously determines which applications to suspend or terminate based on predefined policies and user behavior analysis, eliminating the need for manual user intervention while optimizing power consumption.
Solution Approach 2:
The system dynamically adjusts power management parameters such as CPU frequency, memory allocation, and application suspension thresholds based on detected user presence and system state. This allows the system to optimize the balance between service functionality and power consumption in real-time.
2Use of energy by moving object
If applications are automatically suspended to save power, then power consumption is reduced, but user convenience deteriorates due to manual suspension requirements
Solution Approach 1:
The system implements automatic application suspension and resumption based on user presence detection and activity patterns. The processor autonomously manages application states without requiring user input, thereby reducing power consumption while maintaining user convenience through intelligent automation.
Solution Approach 2:
The system continuously monitors user presence and application usage patterns, using this feedback to dynamically adjust suspension policies. This ensures that applications are suspended only when appropriate, maintaining user convenience while optimizing power consumption based on real-time system state.
3Use of energy by moving object
If user presence is continuously detected to optimize power management, then power consumption is optimized, but processing load and system complexity increase
Solution Approach 1:
The system replaces complex manual power management mechanisms with automated sensor-based detection and algorithmic decision-making. By using sensors to detect user presence and implementing predefined suspension policies, the system simplifies the overall control logic while achieving optimized power consumption.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The information processing apparatus (100) includes: an acquirer (121) configured to acquire a security log including information regarding unauthorized communication stored in the upper NW device being a device constituting an overlay network, an authentication log stored in the cloud server, and a communication log stored in the lower NW device being a device constituting an underlay network; a specifier (123) configured to specify information such that, when the authentication log includes a connection source IP address that does not exist in the communication log acquired by the acquirer (121) and the security log includes information regarding an access not permitted to be used from the connection source IP address, the specifier (123) specifies the information regarding the access as unauthorized communication; and a blocking instructor (124) configured to give an instruction for blocking of the unauthorized communication specified by the specifier (123).