Back to results
US 7,412,721 B2Granted
Method of and system for managing information, and computer product
AssigneeFujitsu Limited
InventorsSatoru Torii, Masashi Mitomo, Seigo Kotani, Fumie Takizawa
Life of this patent
Estimating the term…
Abstract
The system includes the monitor agent that analyzes log of an entity. When an abnormality is detected, the monitor agent notifies about the abnormality to the control manager. The control manager decides a countermeasure and a countermeasure request party from the database and informs them to the action agent which the countermeasure request party. The action agent implements the countermeasure.
Claims41
A system for managing information comprising:
- a communication request monitor unit which monitors a communication request;
- a management unit which selects a countermeasure based upon information notified from the communication request monitor unit;
- a performing unit which performs a countermeasure in response to an instruction from the management unit,
- wherein said management unit comprises:
- a database which manages a notification content from the communication request monitor unit and the countermeasure that the performing unit performs such that the notification content and the countermeasure correspond to each other, and
- a selection unit which selects the countermeasure from various angles based upon the database and mounting information, operation information, and/or security information to be performed;
- an information collection unit which collects information related to a kind, a content, an order, and a time interval of two or more communications in a progress process of an attack event or a leakage event, such that the information is collected through an attack caused by induction through a vulnerability manifested in a decoy server, so that the collected information is analyzed to be recognized as an attack pattern to be used to predict a future attack which may occur;
- and
- a reflection unit which reflects the information collected and regulated by the information collection unit upon the database, to thereby predict a possible attack event or a leakage event in advance, and to avoid the predicted attack event or leakage event before execution of the predicted attack event or leakage event, wherein the information notified by the communication request monitor unit and/or countermeasure selected by the management unit are weighted.
6 more elements
A method of managing information comprising:
- monitoring a communication request by a communication request monitor unit;
- selecting, via a management unit, a countermeasure from various angles based upon a database and mounting information, operation management information, and/or security information, wherein the database manages a notification content notified by the communication request monitor step and a countermeasure to be performed such that the notification content and the countermeasure correspond to each other;
- and
- performing, via a performing unit, the countermeasure selected in response to an instruction from the management unit;
- collecting information related to a kind, a content, an order, and a time interval of two or more communications in a progress process of an attack event or a leakage event, such that the information is collected through an attack caused by induction through a vulnerability manifested in a decoy server, so that the collected information is analyzed to be recognized as an attack pattern to be used to predict a future attack which may occur;
- and
- reflecting the information collected and regulated by the information collection step upon the database, to thereby predict a possible attack event or a leakage event in advance, and to avoid the predicted attack event or leakage event before execution of the predicted attack event or leakage event, wherein the information notified by the communication request monitor unit and/or countermeasure selected by the management unit are weighted.
4 more elements
A computer readable medium read by a computer and encoded with a program that when executed by the computer causes the computer to perform a method comprising:
- monitoring communication requests:
- outputting a notification in case of an abnormality;
- selecting a countermeasure from various angles based upon a database and mounting information, operation management information, and/or security information, wherein the database manages a content of the notification and a corresponding countermeasure;
- performing a coutermeasure against the abnormality based on the selected countermeasure;
- collecting information related to a kind, a content, an order, and a time interval of two or more communications in a proceeding process of an attack event or a leakage event, such that the information is collected through an attack caused by induction through a vulnerability manifested in a decoy server, so that the collected information is analyzed to be recognized as an attack pattern to be used to predict a future attack which may occur;
- and
- reflecting the information collected and regulated by the information collected upon the database, to thereby predict a possible attack event or a leakage event in advance, and to avoid the predicted attack event or leakage event before execution of the predicted attack event or leakage event.
4 more elements
Dependencies are inferred from the claim text.