Unauthorized access detection system, unauthorized access detection method and unauthorized access detection program

摘要

PROBLEM TO BE SOLVED: To provide an unauthorized access detection system configured to automatically detect an unintended operation on an information system, without updating an existing system.SOLUTION: An unauthorized access detection system includes: access log prediction means which acquires an application for using an information system output from a user terminal connected to the information system through a single connection path, and generates a predicted access log, which is a log message expected from the contents of the acquired application; access log acquisition means which acquires an actual access log, which is a log message of an actual operation performed by a user terminal which uses the information system, by use of an access right set based on the application; and collation means which outputs a result of collating the predicted access log generated by the access log prediction means with the actual access log acquired by the access log acquisition means, to a management terminal managing a connection to the information system.SELECTED DRAWING: Figure 1