METHOD AND SYSTEM FOR AUTOMATICALLY DETECTING INTRUSIONS

摘要

The invention concerns a method for detecting intrusions and an information system comprising an intrusion detecting probe (5) including an event sensor (5a) among a set of events to be monitored in the information system, an event being associated with at least one parameter taking on a value among a number of values, the probe (5) further comprises an analyzer (5b) designed to associate a subset of criteria among a set of predetermined criteria with a given parameter during a learning phase and to match during a validating phase the value taken by said given parameter to said subset of criteria, such that depending on whether said value fulfils or not said subset of associated criteria, said value is considered as valid or invalid.