Storage system, unauthorized access detection method, and non-transitory computer-readable medium storing unauthorized access detection program

An unauthorized access detection method using a storage system that manages an access from a terminal via a network to a storage apparatus, the method comprising:

• sending an access instruction to the storage apparatus in response to the storage system being accessed by the terminal;
• sending, in response to receiving the access instruction, a confirmation notification including sender information relating to a sender of the received access instruction;
• determining, on the basis of the confirmation notification, whether or not the sender of the access instruction related to that confirmation notification is a processor of the storage system;
• and determining, on the basis of determination result, the access instruction received from a sender other than the processor as an unauthorized access instruction, wherein the determining whether or not the sender of the access instruction related to that confirmation notification is the processor comprises determining that the sender of the access instruction related to a confirmation notification is the processor when the sender information included in the confirmation notification coincides with an identification provided by the processor for its own access instruction.

A non-transitory computer-readable medium storing an unauthorized access detection program, when executed on a storage system that manages an access from a terminal via a network to a storage apparatus, makes the storage system to execute:

• sending an access instruction to the storage apparatus in response to the storage system being accessed by the terminal;
• sending, in response to receiving the access instruction, a confirmation notification including sender information relating to a sender of the received access instruction;
• determining, on the basis of the confirmation notification, whether or not the sender of the access instruction related to that confirmation notification is a processor of the storage system;
• and
• determining, on the basis of determination result, the access instruction received from a sender other than the processor as an unauthorized access instruction, wherein the determining whether or not the sender of the access instruction related to that confirmation notification is the processor comprises determining that the sender of the access instruction related to a confirmation notification is the processor when the sender information included in the confirmation notification coincides with an identification provided by the processor for its own access instruction.

A storage system that manages an access from a terminal via a network to a storage apparatus, the storage system comprising:

• a memory;
• and a processor to:
• send an access instruction to the storage apparatus in response to the storage system being accessed by the terminal;
• send, in response to receiving the access instruction, a confirmation notification including sender information relating to a sender of the received access instruction;
• determine, on the basis of the confirmation notification, whether or not the sender of the access instruction related to that confirmation notification is the processor;
• and
• determine, on the basis of determination result, the access instruction received from a sender other than the processor as an unauthorized access instruction, wherein the determining whether or not the sender of the access instruction related to that confirmation notification is the processor comprises determining that the sender of the access instruction related to a confirmation notification is the processor when the sender information included in the confirmation notification coincides with an identification provided by the processor for its own access instruction.