METHOD AND SYSTEM FOR PREVENTING UNAUTHORIZED ACCESS TO CORPORATE NETWORK OBJECTS Russian patent published in 2023 - IPC G06F21/50 

FIELD: corporate network security.

SUBSTANCE: method for preventing compromise of directory service (MS AD) objects in a corporate network, in which: data is obtained from the corporate network's MS AD storage that characterizes network objects and their attributes; defining highly privileged objects (HVO) of MS AD and MS AD objects associated with the HVO, allowing access to them; forming a graph, where nodes are MS AD objects, and edges are access parameters between them; modelling attack paths against the HVO based on the resulting graph, determining a subgraph containing nodes that allow control over the HVO or its associated MS AD objects; monitoring MS AD objects to determine changes in access privilege parameters on subgraph nodes; transfer data on the objects identified on the subgraph to the control system when changing their access privileges; performing access privilege management on identified MS AD objects.

EFFECT: increased efficiency of protecting the corporate network from compromising objects and gaining access to highly privileged objects.

4 cl, 4 dwg, 2 tbl