An application system change monitoring device based on multi-dimensional information association
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- COMP APPL RES INST CHINA ACAD OF ENG PHYSICS
- Publication Date
- 2019-04-26
- Estimated Expiration
- Not applicable · inactive patent
Smart Images

Figure 1 
Figure 2 
Figure 3
Abstract
Description
technical field
[0001] The invention belongs to the technical field of network security monitoring, and in particular relates to an application system change monitoring device based on multidimensional information association. Background technique
[0002] With the continuous development of information technology, enterprises use application systems to complete information collection, management, and disposal in more and more aspects. However, while the application system continues to be popularized, the security threats it faces are also increasing day by day, especially for APT attacks by some military and government units or illegal operations by privileged personnel. It is difficult to effectively find anomalies and trace the source of evidence with current technical means.
[0003] The traditional monitoring method only judges the change of the file by collecting a single piece of information, and the focus is on capturing the action of the change operation and outputti...