FIELD: information technologies.
SUBSTANCE: system of automatic investigation of safety incidents made in the form of an administration server, which comprises: a data collection facility designed for download of data from computer devices connected to the administration server about system events fixed in the specified computer devices; a facility of incidents registration, intended to separate at least one system event from downloaded data that caused a safety incident; an analyser of incidents designed for: searching for events preceding the registered safety incident; determination of at least one system event, which is the reason for incident occurrence; a facility for solution finding, which is designed to search for a solution to eliminate consequences and to prevent recurrence of the safety incident corresponding to the event determined by the analyser as the reason for the incident occurrence.
EFFECT: reduction of a number of safety incidents due to exclusion of recurrence of system events determined as reasons for occurrence of these safety incidents.
16 cl, 9 dwg
| Title | Year | Author | Number |
|---|---|---|---|
| SYSTEM AND METHOD FOR PREVENTION SAFETY INCIDENTS BASED ON USER DANGER RATING | 2011 |
|
RU2477929C2 |
| METHOD OF COMPUTER SECURITY DISTRIBUTED EVENTS INVESTIGATION | 2015 |
|
RU2610395C1 |
| METHOD AND SYSTEM OF CYBER TRAINING | 2022 |
|
RU2808388C1 |
| METHOD FOR ADJUSTING THE PARAMETERS OF A MACHINE LEARNING MODEL IN ORDER TO IDENTIFY FALSE TRIGGERING AND INFORMATION SECURITY INCIDENTS | 2020 |
|
RU2763115C1 |
| METHOD FOR PROCESSING INFORMATION SECURITY EVENTS PRIOR TO TRANSMISSION FOR ANALYSIS | 2020 |
|
RU2762528C1 |
| SYSTEM AND METHOD OF AUTOMATIC INVESTIGATION OF SAFETY INCIDENTS IN AUTOMATED SYSTEM | 2017 |
|
RU2664018C1 |
| METHOD AND SYSTEM FOR MAKING DECISION ON NEED FOR AUTOMATED RESPONSE TO INCIDENT | 2020 |
|
RU2738334C1 |
| SYSTEM AND METHOD FOR DETERMINING THE LEVEL OF DANGER OF INFORMATION SECURITY EVENTS | 2022 |
|
RU2800739C1 |
| SYSTEM AND METHOD OF DETECTING THE SIGNS OF COMPUTER ATTACKS | 2017 |
|
RU2661533C1 |
| SYSTEM AND METHOD OF CORRELATING EVENTS FOR DETECTING INFORMATION SECURITY INCIDENT | 2019 |
|
RU2739864C1 |
