| 摘要 |
PROBLEM TO BE SOLVED: To provide an unauthorized access detection device which is capable of posteriorly and quickly recognizing the execution of unauthorized access to information to be restricted for browsing. SOLUTION: The unauthorized access detection device includes: a log holding part 10 which acquires access logs of a server 2 holding a plurality of pieces of restricted information to be restricted for browsing and holds the access logs as a log file; a browsing permission information holding part 20 which holds browsing permission information associating respective pieces of restricted information and authority users permitted to browse respective pieces of restricted information with each other; an unpermitted browsing detection part 30 which detects an access log where unpermitted browsing has been performed by a user who is not permitted to browse, on the basis of browsing permission information; a policy violation log recording part 40 which generates a policy violation log showing contents of the unpermitted browsing and records the log in the log file; a retrospective approval accepting part 50 which accepts retrospective approval of unpermitted browsing from an authority user; and a writing part 60 which records contents of the accepted retrospective approval in the log file. COPYRIGHT: (C)2011,JPO&INPIT |
