Method and device for detecting compromise of a target by a side attack
AssigneeWallix
InventorsMeng Tan, Serge Adda
Life of this patent
Estimating the term…
Abstract
A method for detecting a side attack of a target by a user comprising a step of recording data relating to a so-called sensitive file, the sensitive file being a configuration file of the target; a step of primary connection of the user on a proxy gateway to establish a secondary connection of the proxy gateway on the target; a step of verification of the integrity of the sensitive file, subsequently to the step of secondary connection of the proxy gateway on the target and when the integrity of the sensitive tile is determined as compromised by the step of verification of the integrity of the sensitive file, and a step of detection of a side attack of the target by the user.
Claims19
A method for detecting a side attack on a target by a user, the method comprising:
- a step of recording data relating to a sensitive file, the sensitive file being a target configuration file;
- a step of primary connection of the user on a proxy gateway to establish a secondary connection of the proxy gateway on the target;
- a step of verifying the integrity of the sensitive file, subsequently to the step of secondary connection of the proxy gateway to the target;
- and
- when the integrity of the sensitive file is determined as compromised by the step of verifying the integrity of the sensitive file, a step of detecting a side attack of the target by the user.
A proxy gateway for detecting a side attack of a target by a user, comprising data processing means configured to:
- record data relating to a sensitive file, the sensitive file being a target configuration file;
- establish a primary connection of the user on the proxy gateway to establish a secondary connection of the proxy gateway on the target;
- verify the integrity of the sensitive file subsequently to the step of secondary connection of the proxy gateway on the target;
- and
- when the integrity of the sensitive file is determined as compromised by the step of verification of the integrity of the sensitive file, detect a side attack of the target by the user.
Dependencies are inferred from the claim text.