COMPUTER SECURITY APPARATUS
First Claim
1. A computer-implemented method for an automated computer security apparatus, comprising executing on a computer processor the steps of:
- categorizing a first sequential action data set that comprises a plurality of different actions performed sequentially in engaging a computer system to execute a data operation on the computer system as a normal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute an allowable data operation on the computer system;
categorizing the first sequential action data set as an abnormal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute a forbidden data operation on the computer system;
randomly selecting at least one of the actions of the first sequential action data set and at least one other action of a second sequential action data set that has the category of the first sequential action data set, wherein the second sequential action data set comprises a plurality of different actions that includes the randomly selected at least one other action and that are performed sequentially in engaging the computer system to execute a second data operation on the computer system; and
generating a random sequential action data set for the category of the first sequential action data set and the second sequential data set by combining the actions selected from the first sequential action data set and the second sequential action data set into an order that is performed sequentially in engaging the computer system to execute a random data set operation on the computer system.
2 Assignments
0 Petitions
Accused Products
Abstract
Aspects provide for an automated computer security apparatus. A first sequential action data set of different actions performed sequentially in engaging a computer system to execute a data operation on the computer system is categorized as a normal or abnormal operation. Actions of the first sequential action data set and of another (second) sequential action data set of different actions having the same normal or abnormal category of the first set are randomly selected and combined to generate a random sequential action data set for the common category of the first and second sequential action data sets, to define a sequential order of actions performed sequentially in engaging the computer system to execute a random set data operation on the computer system.
16 Citations
20 Claims
-
1. A computer-implemented method for an automated computer security apparatus, comprising executing on a computer processor the steps of:
-
categorizing a first sequential action data set that comprises a plurality of different actions performed sequentially in engaging a computer system to execute a data operation on the computer system as a normal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute an allowable data operation on the computer system; categorizing the first sequential action data set as an abnormal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute a forbidden data operation on the computer system; randomly selecting at least one of the actions of the first sequential action data set and at least one other action of a second sequential action data set that has the category of the first sequential action data set, wherein the second sequential action data set comprises a plurality of different actions that includes the randomly selected at least one other action and that are performed sequentially in engaging the computer system to execute a second data operation on the computer system; and generating a random sequential action data set for the category of the first sequential action data set and the second sequential data set by combining the actions selected from the first sequential action data set and the second sequential action data set into an order that is performed sequentially in engaging the computer system to execute a random data set operation on the computer system. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A system, comprising:
-
a processor; a computer readable memory in circuit communication with the processor; and a computer readable storage medium in circuit communication with the processor; wherein the processor executes program instructions stored on the computer-readable storage medium via the computer readable memory and thereby; categorizes a first sequential action data set that comprises a plurality of different actions performed sequentially in engaging a computer system to execute a data operation on the computer system as a normal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute an allowable data operation on the computer system; categorizes the first sequential action data set as an abnormal operation in response to determining that the first sequential action data set plurality of different actions engages the computer system to execute a forbidden data operation on the computer system; randomly selects at least one of the actions of the first sequential action data set and at least one other action of a second sequential action data set that has the category of the first sequential action data set, wherein the second sequential action data set comprises a plurality of different actions that includes the randomly selected at least one other action and that are performed sequentially in engaging the computer system to execute a second data operation on the computer system; and generates a random sequential action data set for the category of the first sequential action data set and the second sequential data set by combining the actions selected from the first sequential action data set and the second sequential action data set into an order that is performed sequentially in engaging the computer system to execute a random data set operation on the computer system. - View Dependent Claims (10, 11, 12, 13, 14)
-
-
15. A computer program product for an automated computer security apparatus, the computer program product comprising:
-
a computer readable storage medium having computer readable program code embodied therewith, wherein the computer readable storage medium is not a transitory signal per se, the computer readable program code comprising instructions for execution by a processor that cause the processor to; categorize a first sequential action data set that comprises a plurality of different actions performed sequentially in engaging a computer system to execute a data operation on the computer system as a normal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute an allowable data operation on the computer system; categorize the first sequential action data set as an abnormal operation in response to determining that the first sequential action data set plurality of different actions engage the computer system to execute a forbidden data operation on the computer system; randomly select at least one of the actions of the first sequential action data set and at least one other action of a second sequential action data set that has the category of the first sequential action data set, wherein the second sequential action data set comprises a plurality of different actions that includes the randomly selected at least one other action and that are performed sequentially in engaging the computer system to execute a second data operation on the computer system; and generate a random sequential action data set for the category of the first sequential action data set and the second sequential data set by combining the actions selected from the first sequential action data set and the second sequential action data set into an order that is performed sequentially in engaging the computer system to execute a random set data operation on the computer system. - View Dependent Claims (16, 17, 18, 19, 20)
-
Specification