STRATEGIES TO STUDY VULNERABILITIES AND TO SUPPRESS VULNERABILITIES CAUSED BY CAPTURING ACCOUNT DATA Russian patent published in 2012 - IPC G06F21/00 

FIELD: information technologies.

SUBSTANCE: when realising the method of scalable study of data processing environment security condition, at first access data is received, which reflects prehistory of access to a component in the data processing environment at the side of a subject that carries out access. Also data of the rights is received, which reflects the rights available to the subject authorised for access, at the same time the rights grant the right to the subject to access multiple components and present a subset of the rights to subjects that carry out access. Then the condition of data processing environment security is studied on the basis of access data and rights data. A degree is identified, to which the received rights for components of the first part of data processing environment may be used to compromise components of the second part of the data processing environment. A conclusion is provided, which reflects the result of the specified identification.

EFFECT: higher security of company data processing environment.

20 cl, 6 dwg