AUTOMATED LOCAL EXCEPTION RULE GENERATION SYSTEM, METHOD AND COMPUTER PROGRAM PRODUCT

摘要

A system, method and computer readable medium pertaining to evaluation of events from a computer system to assess security risks to that system. Events are evaluated according to the aspects of each event and the aspects are used to make a preliminary determination regarding violation of a security rule. In addition to a preliminary determination of a rule violation, exceptions to the rule may be identified.