SYSTEM AND METHOD FOR DETECTING ANOMALIES WHEN CONNECTING DEVICES Russian patent published in 2016 - IPC G06F11/30 G06F21/50 

FIELD: information technology.

SUBSTANCE: invention relates to means of computer security. System comprises a computer system, which is connected to at least one device; collecting device for collecting data on a connected device and transmitting collected data to an analysis means; analysis means for analyzing collected data on the connected device and data on devices previously connected to the computer system from a database of devices, where data on the device comprise: device connecting frequency, an operation period of the connected device, operation period of the computer system, to which the device is connected, and transmitting the analysis result to an abnormalities detection device; database of devices for storing data on devices previously connected to the computer system; the abnormalities detection device for detecting at least one abnormality, which indicates that the device is modified by an intruder, when connecting devices to the computer system using rules of determining abnormalities from a database of rules on the basis of the analysis result; database of rules for storing rules of determining abnormalities.

EFFECT: technical result is detecting abnormalities when connecting devices to the computer system.

2 cl, 4 dwg