ENTERPRISE POLICY TRACKING WITH SECURITY INCIDENT INTEGRATION

摘要

The present invention relates to methods, processes, and systems for monitoring security policy violations in a computer network. Details of such monitoring include creating a rule according to a security policy, determining if the rule is violated by a value of a variable, and recording security events and comparing the number of events to a threshold.