Communication information monitoring apparatus

• US 20070011742A1
• Filed: 11/16/2005
• Published: 01/11/2007
• Est. Priority Date: 06/27/2005
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Nakayama, Kojiro, Ishizaki, Takeshi, Sakata, Masayuki, Nishiki, Kenya
• Application Number:
  US11/274,411
• Publication Number:
  US 20070011742A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/554 involving event detection and direct action

Abstract

A check rule for assuring system security is generated. A communication information monitoring apparatus includes a pseudo-client, a monitoring unit, and a unification unit. The pseudo-client transmits a request message containing a trace value as a parameter to a web application and analyzes a response message returned from the web application. The monitoring unit monitors whether the trace value transmitted by the pseudo-client is used in various positions in the system. The unification unit generates a check rule according to the processing result of the pseudo-client and the monitoring unit and a check policy registered in advance. The check policy contains the parameter use purpose and the process for the check processing.

Claims

1. A communication information monitoring apparatus used in a system for providing a service to a client via a network, the apparatus comprising:

a pseudo-client for transmitting a request containing a trace value; and

a monitoring unit for monitoring a trace value in various positions of the system,

wherein the communication information monitoring apparatus has a function to identify a position where a parameter is used by monitoring the trace value in various positions of the system.

2. The communication information monitoring apparatus according to claim 1, wherein identification of the position where the parameter is used is performed by identifying a use position of the parameter of the web application.

3. The communication information monitoring apparatus according to claim 1, further comprising:

a unification unit for unifying a particular result of the parameter use position with a preset security policy,

wherein a check rule in communication information monitoring is generated.

4. The communication information monitoring apparatus according to claim 2, wherein the unification unit performing monitoring of the trace value includes:

an SQL monitoring unit for monitoring an SQL statement for accessing a database, and

a response monitoring unit for monitoring a response message to be returned to the web application.

5. The communication information monitoring apparatus according to claim 2, further comprising:

a unification unit for unifying a particular result of the parameter use position with a preset security policy,

wherein a check rule in the communication information monitoring is generated.

6. The communication information monitoring apparatus according to claim 4, further comprising:

a unification unit for unifying a particular result of the parameter use position with a preset security policy,

wherein a check rule in the communication information monitoring is generated.