US 12,218,960 B2
Information collection system, information collection method, medium, and information collection program
Yoshiyuki Yamada, Tokyo (JP); Masaki Inokuchi, Tokyo (JP); Yoshinobu Ohta, Tokyo (JP); Yuval Elovici, Arugot (IL); Asaf Shabtai, Hulda (IL); and Ron Bitton, Yehud (IL)
Assigned to NEC CORPORATION, Tokyo (JP); and B.G. NEGEV TECHNOLOGIES AND APPLICATIONS LTD., Beer Sheva (IL)
Appl. No. 16/973,596
Filed by NEC CORPORATION, Tokyo (JP); and B.G. Negev Technologies and Applications Ltd., at Ben-Gurion University, Beer Sheva (IL)
PCT Filed Jun. 12, 2018, PCT No. PCT/JP2018/023049
§ 371(c)(1), (2) Date Dec. 9, 2020,
PCT Pub. No. WO2019/239608, PCT Pub. Date Dec. 19, 2019.
Prior Publication US 2021/0243213 A1, Aug. 5, 2021
Int. Cl. H04L 9/40 (2022.01); H04L 101/695 (2022.01)
CPC H04L 63/1425 (2013.01) [H04L 63/0236 (2013.01); H04L 63/101 (2013.01); H04L 63/108 (2013.01); H04L 63/1433 (2013.01); H04L 2101/695 (2022.05)] 9 Claims
OG exemplary drawing
 
1. An information collection system comprising:
at least one processor configured to execute instructions to:
derive load information to estimate an impact on the availability of a target machine for active scanning by using side-channel data;
generate, based on the load information, an allow list including a scan timing and a scan range in which the availability is not affected; and
memory that stores the allow list,
wherein an active scan of the target machine is executed by referencing the allow list stored in the memory to collect asset information of the target machine,
wherein the load information comprises energy load information,
wherein the side-channel data is power consumption data,
wherein deriving load information comprises deriving the energy load information by processing the power consumption data,
wherein generating the allow list comprises generating the allow list including the scan timing and the scan range by referencing the energy load information, and
wherein the at least one processor is configured to execute the instructions to determine that the active scan is executable on the target machine when the energy load information is lower than a threshold.