METHOD OF PROTECTING A NETWORK COMPUTER SYSTEM FROM THE MALICIOUS ACTS OF HACKERS AND ITS OWN SYSTEM ADMINISTRATORS

摘要

A method that protects a network computer system from the malicious acts of hackers and its own system administrators includes a behavior analysis of system administrators within the confines of their particular job tasks. A suite of abnormal behavior detection models analyze each display terminal input entered by recognized system administrators. Any alerts that issue are forwarded to a case management system for investigation. A cadre of trained investigators with case management display terminals attached to control the case management system make decisions based on what is displayed to them and issue actions and reports by inputs to their display terminals. These contribute to the building and updating of a database and updating of the abnormal behavior detection models through adaptive learning. The decisions, actions and reports control the accessibility and authority of each system administrator at their respective display terminals.