ONTOLOGY-BASED DATA ACCESS MONITORING

摘要

Technologies are generally described for methods and systems effective to monitor a data access activity. In some examples, a method may include receiving, by a processor, a destination concept. The processor may identify a set of concepts, which may include the destination concept and at least one related concept associated with the destination concept, in an ontology. The processor may generate a planned path, which may define a first data access order associated with access of at least one of the related concepts and the destination concept, using the set of concepts. The processor may generate a browsing path which may define a second data access order associated with the data access activity. The processor may compare the planned path with the browsing path. The processor may determine a deviation based on the comparison of the planned path and the browsing path. The processor may monitor the data access activity using the deviation.

主权项

1. A method to monitor a data access activity, the method comprising, by a processor:
receiving an indication of a destination concept; identifying a first node in an ontology, wherein the first node corresponds to the destination concept; identifying a link connected to the first node; identifying a second node connected to the link, wherein the second node corresponds to a related concept associated with the destination concept, and the link is effective to indicate a relationship between the destination concept and the related concept; identifying a set of nodes, wherein the set of nodes includes at least the first node and the second node, and the set of nodes corresponds to the destination concept and at least one related concept associated with the destination concept; generating a planned path using the set of nodes, wherein the planned path is effective to define a first data access order associated with access of at least one of the related concepts and with the destination concept; generating a browsing path effective to define a second data access order associated with the data access activity; comparing the planned path with the browsing path; and determining whether to issue an alert based on a result of the comparison of the planned path with the browsing path.