SAFETY DETERMINING APPARATUS AND METHOD

• US 20170228538A1
• Filed: 01/19/2017
• Published: 08/10/2017
• Est. Priority Date: 02/04/2016
• Status: Abandoned Application

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Katayama, Yoshinori, Terada, Takeaki, Torii, Satoru, Tsuda, Hiroshi
• Application Number:
  US15/410,052
• Publication Number:
  US 20170228538A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2221/032 Protect output to user by software means
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: H04L 51/00 User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/145 the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34

Abstract

A safety determining apparatus includes a memory and a processor coupled to the memory. The processor is configured to acquire information on a user operation and an access target of the user operation, acquire information indicating a behavior of refraining from gaining access with respect to the access target by analyzing the user operation, and provide a user with information on the safety of the access target with respect to which the behavior has been executed.

Claims

1. A safety determining apparatus, comprising:

a memory; and

a processor coupled to the memory,

and configured to

acquire information on a user operation and an access target of the user operation;

acquire information indicating a behavior of refraining from gaining access with respect to the access target by analyzing the user operation; and

provide a user with information on safety of the access target with respect to which the behavior has been executed.

2. The safety determining apparatus as claimed in claim 1, wherein the processor is further configured to determine that the behavior of refraining from gaining the access has been executed with respect to a URL link that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over the URL link or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the URL link.

3. The safety determining apparatus as claimed in claim 1, wherein the processor is further configured to determine that the behavior of refraining from gaining the access has been executed with respect to a file attachment that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over an icon of the file attachment or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the icon of the file attachment.

4. The safety determining apparatus as claimed in claim 1, wherein the processor is further configured to provide the user with the information on the safety of the access target in accordance with a condition specified by an alert policy and a content of an alert.

5. A non-transitory computer-readable recording medium storing a program that causes a computer to execute a safety determining process, the safety determining process comprising:

acquiring information on a user operation and an access target of the user operation;

acquiring information indicating a behavior of refraining from gaining access with respect to the access target by analyzing the user operation; and

providing a user with information on safety of the access target with respect to which the behavior has been executed.

6. The non-transitory computer-readable recording medium as claimed in claim 5, wherein the safety determining process further includes determining that the behavior of refraining from gaining the access has been executed with respect to a URL link that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over the URL link or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the URL link.

7. The non-transitory computer-readable recording medium as claimed in claim 5, wherein the safety determining process further includes determining that the behavior of refraining from gaining the access has been executed with respect to a file attachment that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over an icon of the file attachment or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the icon of the file attachment.

8. The non-transitory computer-readable recording medium as claimed in claim 5, wherein the providing provides the user with the information on the safety of the access target in accordance with a condition specified by an alert policy and a content of an alert.

9. A safety determining method, comprising:

acquiring, by a computer processor, information on a user operation and an access target of the user operation;

acquiring, by the computer processor, information indicating a behavior of refraining from gaining access with respect to the access target by analyzing, by the computer processor, the user operation; and

providing, by the computer processor, a user with information on safety of the access target with respect to which the behavior has been executed.

10. The safety determining method as claimed in claim 9, further comprising:

determining, by the computer processor, that the behavior of refraining from gaining the access has been executed with respect to a URL link that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over the URL link or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the URL link.

11. The safety determining method as claimed in claim 9, further comprising:

determining, by the computer processor, process includes determining that the behavior of refraining from gaining the access has been executed with respect to a file attachment that is the access target when a behavior of avoiding the access is executed after a mouse is hovered over an icon of the file attachment or when a behavior of suspending or aborting the access is executed after the mouse is clicked on the icon of the file attachment.

12. The safety determining method as claimed in claim 9, wherein the providing provides the user with the information on the safety of the access target in accordance with a condition specified by an alert policy and a content of an alert.