INFORMATION PROCESSING SYSTEM, INFORMATION PROCESSING DEVICE, MONITORING DEVICE, MONITORING METHOD

摘要

An information processing system in which a monitoring device can detect illegal and/or abnormal operations in a system to be monitored, without using detailed information of the system, is provided. In a target device 100, an operation data generation unit 130 generates operation data 140 as data of encoding a set of operations related to a predetermined program executed in an execution environment 120, and transmits the operation data to the monitoring device 200. In the monitoring device 200, an operation pattern storing unit 230 stores an operation pattern 240 as operation data related to a set of operations to be detected. An operation data decision unit 220 decides that the operation to be detected is executed in the execution unit when the operation data received from the target device 100 matches the operation pattern 240, and notifies of execution of the operation to be detected.

主权项

1. An information processing system comprising:
a first device including an operation data generation unit which generates operation data as data of encoding a set of operations related to a predetermined program executed in an execution unit, and transmits the operation data to a second device; and the second device including
an operation pattern storing unit which stores an operation pattern as operation data related to a set of operations to be detected, andan operation data decision unit which decides that the operation to be detected is executed in the execution unit when the operation data received from the first device matches the operation pattern, and notifies of execution of the operation to be detected.