UNAUTHORIZED ACCESS DETECTION DEVICE AND UNAUTHORIZED ACCESS DETECTION METHOD

    公开(公告)号:US20240289476A1

    公开(公告)日:2024-08-29

    申请号:US18464515

    申请日:2023-09-11

    IPC分类号: G06F21/62 G06F21/55

    摘要: An unauthorized access detection device that includes a control device for executing: abnormal access request detection processing in which a plurality of pieces of input/output request data for accessing a file is acquired and it is determined whether or not an access mode to the file is abnormal on the basis of patterns of the acquired plurality of pieces of input/output request data; abnormal data detection processing in which, where it is determined that the access mode to the file is abnormal, it is determined, by specifying data to be written into the file on the basis of the acquired input/output request data and specifying a trend of the specified data, whether or not the specified data is abnormal data; and suspicious process resolution processing in which, where it is determined that the specified data is abnormal data, predetermined processing related to access to the file is executed.