System and method for real time detection and prevention of segregation of duties violations in business-critical applications

A system configured for real-time detection and prevention of segregation of duties (SoD) violations in a software application, comprising:

• a software application monitor configured to monitor an action executed by a user of the software application in real-time;
• and
• an SoD conflict detection engine comprising a processor configured to execute instructions stored in a memory, which when executed, perform the steps of:
• receiving by the SoD conflict detection engine a first action notification from the software application monitor comprising a first action and an associated user;
• storing the first action notification;
• receiving by the SoD conflict detection engine a second action notification from the software application monitor comprising a second action and the associated user;
• and
• determining whether the second action is a conflicting action with the first action according to a conflict rule in a conflict rule database,
• wherein the SoD is configured to monitor a software application to determine whether the second action of the associated user creates a conflict with the first action that would otherwise he authorized for the associated user,
• wherein the packet inspector is further configured to perform the steps of:
• receiving an application protocol packet from a communication network in communication with the software application or receiving application logs from the software application;
• forming the first or second action notification comprising the first or second action;
• and
• forwarding the first or second action notification to the SoD conflict detection engine.