The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 23, 2015

Filed:

Feb. 12, 2013
Applicant:

International Business Machines Corporation, Armonk, NY (US);

Inventors:

Kazuhito Akiyama, Yamato, JP;

Akira Ohkado, Yamato, JP;

Yukihiko Sohda, Yamato, JP;

Masami Tada, Yamato, JP;

Tadashi Tsumura, Yamato, JP;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 21/50 (2013.01); G06F 11/07 (2006.01); G06F 21/55 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/50 (2013.01); G06F 11/07 (2013.01); G06F 21/554 (2013.01); H04L 63/1425 (2013.01);
Abstract

An anomaly detection mechanism is provided that detects an anomaly in a control network, and includes an identifying unit to receive event information on an event that occurs, and to identify a group including a resource related to the event information by referring to a configuration management database for retaining dependence relationships between processes and resources including a control system; a policy storing unit to store one or more policies each of which associates one or more actions with a condition defining a situation suspected to have an anomaly; an adding unit to acquire group-related information needed for application to the one or more policies, and to add the acquired information to the event information; and a determining unit to apply the event information to the one or more policies and to determine the one or more actions associated with the matched condition as one or more actions to be taken.


Find Patent Forward Citations

Loading…