NETWORK SYSTEM COPING WITH UNAUTHORIZED ACCESS

摘要

PROBLEM TO BE SOLVED: To execute a handling method coping with unauthorized access to be generated in configuration equipment in a computer system connected to a wide area network. SOLUTION: A detection controller MG1 is configured of an incident log stylizing means 101 for converting an incident log into incident information (event) in an event form; a stylized event database 102 for storing an event; an event candidate extraction means 103 for extracting an event whose handling is necessary; a handling method definition database 104 for defining handling method coping with an event whose handling is necessary; an event filter definition database 105 for storing the instance of an event whose handling is necessary; an object equipment management database 106 for storing the information of object equipment; an occurrence event management database 107 for storing definitions relating to object equipment extracted from event filter definition; and a handling method execution means 211. COPYRIGHT: (C)2008,JPO&INPIT