Data system forensics system and method

摘要

A system and method for creates, maintains and monitors individuals, organizations and artifacts relating to the same over time with respect to pedigree and reputation, security and reliability. One aspect of the present invention provides for a method and a system for collecting and maintaining historical party reputation data. Another aspect of the present invention provides for a method and a system for assessing an access decision to the historical party reputation data to a person after the person's reputation has changed.

主权项

1. A method for system security forensics in a system for allowing or denying a requester access to a protected asset comprising:
receiving a request to access a protected asset from a requester having a reputation; making a decision whether to allow or to deny the requester access to the protected asset based upon the requester's reputation; creating access decision data related to the access decision; assessing the access decision data to determine why the access decision was made; determining that the requester's reputation has changed, and if the decision is to deny the requester to access the protected asset based on the change in reputation, identifying other protected assets previously accessed by the requester; identifying potential risks associated with the other protected assets previously accessed by the requester; and determining whether there would be a violation of system security for the requester to access the other protected assets after the reputation change.