Apparatus and method for extracting restriction condition

• US 9,239,770 B2
• Filed: 08/22/2013
• Issued: 01/19/2016
• Est. Priority Date: 11/29/2012
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Kikuchi, Shinji, Matsumoto, Yasuhide
• Primary Examiner(s): An, Meng
• Assistant Examiner(s): Zhao, Bing
• Application Number:
  US13/973,086
• Publication Number:
  US 20140149989A1
• Time in Patent Office: 880 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/30 Monitoring
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

A restriction condition extraction apparatus specifies operation targets including a first target and another target related thereto that are operated based on first procedure information in a first execution environment, extracts first procedures related to the specified operation targets from the first procedure information, generates first relation information indicating an execution order on related operation targets regarding the extracted first procedures, specifies operation targets including a second target and another target related thereto that are operated based on second procedure information in a second execution environment, extracts second procedures related to the specified operation targets from the second procedure information, generates second relation information indicating an execution order on related operation targets regarding the extracted second procedures, compares the first and the second relation information, and extracts relations of an execution order on related operation targets, which are common in the first and the second relation information.

Claims

1. A non-transitory computer-readable recording medium having stored therein a program for causing a computer to execute a restriction condition extraction process comprising:

first specifying operation targets including a first target and another target device related to the first target device from first procedure information containing a plurality of procedures, the operation target devices operating based on the first procedure information, in a first execution environment;

first extracting first procedures operated by the operation target devices specified at the first specifying from the first procedure information;

first generating first relation information indicating relations of an execution order regarding the extracted first procedures on the operation target devices;

second specifying operation targets including a second target device and another target device related to the second target device from second procedure information containing a plurality of procedures, the operation target devices operating based on the second procedure information, in a second execution environment that is different from the first execution environment;

second extracting second procedures operated the operation target devices specified at the second specifying from the second procedure information;

second generating second relation information indicating relations of an execution order regarding the extracted second procedures on the operation target devices; and

extracting common relations of an execution order on related operation target devices regarding the procedures in the first relation information and the second relation information, the relations being common with a rate exceeding a given rate in a plurality of pieces of relation information, based on comparison between the first relation information and the second relation information.

2. The non-transitory computer-readable recording medium according to claim 1, wherein the extracting common relations includes extracting common relations of the execution order on related operation targets devices, the relations being common with a rate exceeding a given rate in a plurality of pieces of relation information, based on comparison between the pieces of relation information.

3. A restriction condition extraction apparatus, comprising:

a processor; and

a memory, wherein the processor executes;

first specifying operation target devices including a first target device and another target device related to the first target device from first procedure information containing a plurality of procedures, the operation target devices operating based on the first procedure information in a first execution environment;

extracting first procedures operated by the operation target devices specified at the first specifying from the first procedure information;

first generating first relation information indicating relations of an execution order regarding the extracted first procedures on the operation target devices;

second specifying operation target devices including a second target device and another target device related to the second target device from second procedure information containing a plurality of procedures, the operation targets being operated based on the second procedure information, in a second execution environment that is different from the first execution environment;

second extracting second procedures operated by the operation target devices specified at the second specifying from the second procedure information;

second generating second relation information indicating relations of an execution order on related the extracted second procedures on the operation target devices; and

extracting common relations of an execution order on related operation target devices regarding the procedures in the first relation information and the second relation information, the relations being common with a rate exceeding a given rate in a plurality of pieces of relation information, based on comparison between the first relation information and the second relation information.

4. A method for extracting restriction condition executed on a computer, the method comprising:

first specifying operation target devices including a first target and another target device related to the first target device from first procedure information containing a plurality of procedures, the operation target devices operating based on the first procedure information, in a first execution environment using a processor;

first extracting first procedures operation target devices specified at the first specifying from the first procedure information using the processor;

first generating first relation information indicating relations of an execution order regarding the extracted first procedures on the operation target devices using the processor;

second specifying operation target devices including a second target device and another target device related to the second target device from second procedure information containing a plurality of procedures, the operation target devices operating based on the second procedure information, in a second execution environment that is different from the first execution environment using the processor;

second extracting second procedures operated by the operation target device specified at the second specifying from the second procedure information using the processor;

second generating second relation information indicating relations of an execution order on regarding the extracted second procedures on the operation target devices using the processor; and

extracting common relations of the execution order on related operation target devices regarding the procedures in the first relation information and the second relation information, the relations being common with a rate exceeding a given rate in a plurality of pieces of relation information, based on comparison between the first relation information and the second relation information using the processor.