| 摘要 |
A method, system and program product for alerting an information technology support organization of a security event is provided. The method includes storing in a trouble ticket alerting system trouble tickets corresponding to security events logged for a system. Further, the method includes analyzing, at a pre-determined time interval, recently logged security events among the security events logged, the recently logged security events being logged within the pre-determined time interval, comparing a recent security event of the recently logged security events to each of the trouble tickets, automatically creating a new trouble ticket when no match is found to an existing trouble ticket and if the recent security event matches an existing trouble ticket, escalating the existing trouble ticket, such that an information technology support organization is alerted of the recent security event so that appropriate action can be taken to alleviate the recent security event.
|
