发明名称 |
Verfahren und Vorrichtung zur Modellzerlegung und Benutzung davon zur Detektierung der Angriffe gegen die Informatiksysteme |
摘要 |
Procedure for resolving the specifications has a number of steps starting with formulation of the audit conditions that one wishes to detect using the specification formulae. The audit conditions are used to express forms of attack that can be detected by examination of the system log file. The specification formulae are then expanded using an algorithm into sub-formulae, a scanning stage by a software interpreter is used with the sub-formulae to generate Horn Clauses, positive Horn clauses from a stack of completed sub-formulae are then memorized in a table and a resolution stage starting with the positive clauses is used to produce an output file or a system action. The above stages are repeated for all the entries in the system log. |
申请公布号 |
DE60031346(D1) |
申请公布日期 |
2006.11.30 |
申请号 |
DE2000631346 |
申请日期 |
2000.08.24 |
申请人 |
BULL S.A.S. |
发明人 |
ROGER, MURIEL;GOUBAULT-LARRECQ, JEAN |
分类号 |
G06F19/00;G06F1/00;G06F21/00 |
主分类号 |
G06F19/00 |
代理机构 |
|
代理人 |
|
主权项 |
|
地址 |
|