Facility for detecting intruders and suspect callers in a computer installation and a security system including such a facility
US5621889A · kind A · utility
Assignee
Inventors
Key dates
| Filing date | Jun 8, 1994 |
| Grant date | Apr 15, 1997 |
| Priority date | — |
| Expiry date | Jun 8, 2014 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/2101
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A facility for detecting intrusions and suspect users in a computer installation, and a security system incorporating such a facility that makes use of surveillance data relating to the operation of the installation. The facility includes elements for modelling the computer installation, its users, and their respective behavior with the help of a semantic network; elements for comparing the modellized behavior of the system and of its users relative to modellized normal behavior; elements for interpreting observed anomalies in terms of intrusions and of intrusion hypothesis; elements for interpreting observed intrusion hypotheses and intrusions in order to indicate them and enable restraint actions to be prepared. Elements are provided to evaluate the degree of suspicion of users. The elements co-operate with one another for the purpose of providing information.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.