IMPROPER OPERATION DETECTION METHOD, IMPROPER OPERATION DETECTION SYSTEM, AND COMPUTER-READABLE NON-TEMPORARY STORAGE MEDIUM

摘要

With one embodiment of the present invention, the improper operation of files in a computer that is being monitored is detected in a computer system that includes multiple computers which are connected via a network. The computer being monitored receives a file. The computer receives information about the source of the file, transmitted from another computer. The computer references information about improper operation conditions, and determines whether the transmission of the file satisfies the improper operation conditions on the basis of a combination of the source indicated by the source information for the file and the destination of the file. When these conditions are satisfied, the transmission of the file is determined to be an improper operation.