Method for preventing root level access attacks and measurable SLA security and compliance platform

Abstract

A management system detects a change at a target device. The management system sends a request message to an authorized device of an authorized user of the multi-user authorization pool, the request message requesting an indication from the authorized user whether the detected change is approved. The management system receives, from an authorization device of the multi-user authorization pool, a plurality of response messages indicating whether the detected change is approved by a corresponding authorized user, and determines that the detected change is not approved based on at least three of the plurality of response messages indicating not approved. In response to determining that the change is not approved, an instruction message is sent to the target managed device to instruct the target managed device to roll back to a previous state.

Description

[0001] Cross References to Related Applications [0002] This application claims priority to U.S. Provisional Application No. 62 / 865,083, filed June 21, 2019, and U.S. Provisional Application No. 62 / 865,080, filed June 21, 2019, both of which are incorporated herein in their entirety . Background technique [0003] An administrative or root account has full control over the device, operating system (OS), or applications executing on the system. When an administrator logs into a machine, the administrator's user account is placed into an "Administrative or Administrator" group account, which has permissions to perform such operations and responsibilities as an administrator. When a malicious attacker breaks into an operating system or application, they may try to use an administrative account to gain that administrative privilege so they can clean up their tracks and perform all the necessary changes needed to do whatever they want with the device or network. [0004] Further...

AI Technical Summary

Problems solved by technology

[0005] So what is lacking is a system that can prevent root attacks and measure compliance within the device's system

Images