Network system, control apparatus, communication apparatus, communication control method, and communication control program

A control apparatus, comprising:

• processing circuitry configured to implement
• an analysis unit that performs analysis by using partial information that is received from a communication apparatus, with which the control apparatus performs communication via an external network, the partial information being a part of information related to the communication, and determines whether or not the communication is abnormal, wherein the communication apparatus is located in a user's local network and the control apparatus is located outside the user's local network;
• a control determination unit that controls a communication route for the communication apparatus such that the communication is transmitted from the communication apparatus to the control apparatus when the communication is determined to be abnormal by the analysis unit;
• and
• an analyzing unit that determines whether or not the communication transmitted by the control of the communication route is malicious communication, wherein the control determination unit further controls, when the communication is determined to be malicious communication by the analyzing unit, the communication apparatus to restrict the malicious communication, and the control apparatus further comprises a memory that stores therein model information that is information representing a feature space generated based on the partial information and that is applied to the analysis performed by the analysis unit.

A communication apparatus, comprising:

• processing circuitry configured to implement
• a communication control unit that controls communication going through the communication apparatus, and
• a collection unit that forms partial information that is a part of information related to the communication and transmits the partial information to a control apparatus that communicates with the communication apparatus,
• wherein the communication control unit further receives an instruction to control a communication route and performs setting to control the communication route such that the communication is transmitted to the control apparatus, when the communication is determined to be abnormal by the control apparatus, and further, when the communication is determined to be malicious communication by the control apparatus, receives an instruction to restrict the malicious communication and performs setting to restrict the malicious communication, and
• the communication apparatus is located in the user's local network and the control apparatus is located outside the user's local network, and the communication apparatus and
• the control apparatus communicate via an external network, and the control apparatus stores therein model information that is information representing a feature space generated based on the partial information, and that is applied to the determination made by the control apparatus.

A communication control method in a network system comprising a communication apparatus and a control apparatus that communicates with the communication apparatus via an external network, wherein the communication apparatus executes:

• a communication control process of controlling communication going through the communication apparatus;
• and
• a collection process of forming partial information that is a part of information related to the communication and transmitting the partial information to the control apparatus, and the control apparatus executes:
• an analysis process of performing analysis by using the partial information received from the communication apparatus and determining whether or not the communication is abnormal;
• a control determination process of controlling a communication route for the communication apparatus such that the communication is transmitted from the communication apparatus to the control apparatus when the communication is determined to be abnormal by the analysis process;
• an analyzing process of determining whether or not the communication transmitted by the control of the communication route is malicious communication;
• and
• a restriction process of controlling, when the communication is determined to be malicious communication by the analyzing process, the communication apparatus to restrict the malicious communication,
• wherein the communication apparatus is located in the user's local network and the control apparatus is located outside the user's local network, and the communication apparatus and the control apparatus communicate via an external network, and the control apparatus further stores therein model information that is information representing a feature space generated based on the partial information and that is applied to the analysis performed in the analysis process.

A non-transitory computer-readable recording medium having stored a communication control program causing a computer to realize a control apparatus comprising:

• an analysis unit that performs analysis by using partial information that is received from a communication apparatus, with which the control apparatus performs communication via an external network, the partial information being a part of information related to the communication, and determines whether or not the communication is abnormal, wherein the communication apparatus is located in a user's local network and the control apparatus is located outside the user's local network;
• a control determination unit that controls a communication route for the communication apparatus such that the communication is transmitted from the communication apparatus to the control apparatus when the communication is determined to be abnormal by the analysis unit;
• and
• an analyzing unit that determines whether or not the communication transmitted by the control of the communication route is malicious communication,
• wherein the control determination unit further controls, when the communication is determined to be malicious communication by the analyzing unit, the communication apparatus to restrict the malicious communication, and
• wherein the control apparatus stores therein model information that is information representing a feature space generated based on the partial information and that is applied to the analysis performed by the analysis unit.

A non-transitory computer-readable recording medium having stored a communication control program causing a computer to realize a communication apparatus, comprising:

• a communication control unit that controls communication going through the communication apparatus;
• and
• a collection unit that forms partial information that is a part of information related to the communication and transmits the partial information to a control apparatus that communicates with the communication apparatus, wherein
• the communication control unit further receives an instruction to control a communication route and performs setting to control the communication route such that the communication is transmitted to the control apparatus, when the communication is determined to be abnormal by the control apparatus, and further, when the communication is determined to be malicious communication by the control apparatus, receives an instruction to restrict the malicious communication and performs setting to restrict the malicious communication, and
• wherein the communication apparatus is located in a user's local network and the control apparatus is located outside the user's local network, the communication apparatus and the control apparatus communicate via an external network and the control apparatus stores therein model information that is information representing a feature space generated based on the partial information, and that is applied to the determination made by the control apparatus.