System and method for analyzing and correcting an anomaly in split computer networks

A system for correcting an anomaly in a split computer network, the system comprising a first intermediary node, communicatively connected via a first subnet to one or more requestor nodes and communicatively connected via a second subnet to one or more approver nodes, the first intermediary node comprises a non-transitory memory device, where modules of instruction code are stored, and a processor associated with the memory device, and configured to execute the modules of instruction code, whereupon execution of said modules of instruction code, the processor is configured to:

• monitor transactions between the one or more requestor nodes and the one or more approver nodes, via the first intermediary node;
• analyze the monitored transactions, to obtain a transaction pattern;
• probe communication between an examined requestor node and at least one approver node;
• analyze the probed communication, in view of the transaction pattern, to identify a suspected transaction anomaly, in which the number or frequency of transactions falls short of the number or frequency expected by the transaction pattern;
• and
• produce a suggestion of at least one corrective action, based on the suspected transaction anomaly
• wherein the transaction pattern comprises:
• an identification of the examined requestor node and one or more approver nodes, a number or frequency of expected transactions between these nodes, and a payload of these transactions, and
• wherein the split computer network further comprises one or more second intermediary nodes adapted to (a) route one or more transactions between the one or more requestor nodes and the one or more approver nodes, and (b) not communicate, to the first intermediary node, information that pertains to transactions communicated via the split network.