SYSTEM AND METHOD OF AUTOMATIC INVESTIGATION OF SAFETY INCIDENTS IN AUTOMATED SYSTEM Russian patent published in 2018 - IPC G06F21/55 

FIELD: information technology.

SUBSTANCE: invention relates to information security systems. Automatic security incidents investigation system of an automated system contains means of loading data about system events from computer devices connected to the administration server; administration server that includes an event management tool for capturing, logging, analyzing at least one system event from the downloaded data that caused the security incident, and a solution search engine stored in memory and executed on the server of the administration server, the system including an analytical precedent description module for formalizing use cases, search for precedents in the database of precedents, updating of precedents, providing knowledge about the precedents, and precedents database that implements data representation and storage technology in ontology format.

EFFECT: technical result is to increase the effectiveness of automatic investigation of security incidents and, as a result, to reduce the response time to security incidents in an automated system.

2 cl, 2 dwg, 1 tbl