Monitoring device, monitoring method, and monitoring program
AssigneeNTT, Inc.
InventorsNobuhiro Chiba, Ryota Sato, Yoshiaki Nakajima, Takaaki Koyama
Life of this patent
Estimating the term…
Abstract
A monitoring device includes processing circuitry configured to a configuration management tool and is used when a configuration of a device to be monitored is updated, analyze the operation instruction information, and extract a part where the configuration of the device to be monitored changes and content of the change; and create a determination criterion that defines a determination method for detecting modification of data of the device to be monitored on the basis of the part where the configuration of the device to be monitored changes and the content of the change.
Claims8
A monitoring device comprising:
- processing circuitry configured to:
- acquire operation instruction information that is input to a configuration management tool and is used when a configuration of a device to be monitored is updated, analyze the operation instruction information, and extract a part where the configuration of the device to be monitored changes and content of the change;
- acquire vulnerability information corresponding to the operation instruction information and the part where the configuration of the device to be monitored changes;
- and
- create a determination criterion that defines a determination method for detecting modification of data of the device to be monitored on the basis of the part where the configuration of the device to be monitored changes, the content of the change, and the vulnerability information,
- wherein the determination criterion includes integrity information to check the configuration of the device and an indication of a frequency with which the configuration of the device is to be checked.
A monitoring method comprising:
- acquiring operation instruction information that is input to a configuration management tool and is used when a configuration of a device to be monitored is updated, analyzing the operation instruction information, and extracting a part where the configuration of the device to be monitored changes and content of the change;
- acquiring vulnerability information corresponding to the operation instruction information and the part where the configuration of the device to be monitored changes;
- and
- creating a determination criterion that defines a determination method for detecting modification of data of the device to be monitored on the basis of the part where the configuration of the device to be monitored changes, the content of the change, and the vulnerability information,
- wherein the determination criterion includes integrity information to check the configuration of the device and an indication of a frequency with which the configuration of the device is to be checked.
A non-transitory computer-readable recording medium storing therein a monitoring program that causes a computer to execute a process comprising:
- acquiring operation instruction information that is input to a configuration management tool and is used when a configuration of a device to be monitored is updated, analyzing the operation instruction information, and extracting a part where the configuration of the device to be monitored changes and content of the change;
- acquiring vulnerability information corresponding to the operation instruction information and the part where the configuration of the device to be monitored changes;
- and
- creating a determination criterion that defines a determination method for detecting modification of data of the device to be monitored on the basis of the part where the configuration of the device to be monitored changes, the content of the change, and the vulnerability information,
- wherein the determination criterion includes integrity information to check the configuration of the device and an indication of a frequency with which the configuration of the device is to be checked.
Dependencies are inferred from the claim text.