National Ict Australia Limited

Ingo Weber

Nick Van Beest

Hiroshi Wada

This disclosure relates to analyzing log data of a system. This comprises evaluating a first graph model with multiple log events in the log data. The first graph model comprises a first set of nodes connected by a first set of edges representing a first behaviour. A processor determines a first correspondence value based on the first graph model and indicative of a correspondence between the multiple log events and the first behaviour. The processor repeats the steps of evaluating the first graph model for one or more further graph models representing one or more further behaviors and determining the first correspondence value to determine one or more further correspondence values. The processor finally determines a classification of the multiple log events as representing one of the behaviors based on the correspondence values. The use of multiple graph models allows a more granular classification than binary intrusion detection.

Classification of log data

The present invention generally relates to an application program interface (API)-controlled computing system (). A computer-implemented method is proposed for determining undoability of an action to be conducted in the API-controlled computing system () represented by a formal domain model. A set of pre-states of the API-controlled computing system () for the action are obtained. A set of post-states of the API-controlled computing system () corresponding to each pre-state in the set of pre-states for the action are obtained. The method automatically determines if each post-state in each set of post-states of the API-controlled computing system can be undone to its pre-state in the set of pre-states by using a reachability task for the post-state and its pre-state. The action to be conducted in the API-controlled computing system () is undoable if each post-state in each set of post-states of the API-controlled computing system () can be undone to its pre-state in the set of pre-states.

Growing community of inventors

Eveleigh, Australia

Ingo Weber