INTEGRATED MONITORING SYSTEM FOR PERSONAL INFORMATION SECURITY PRODUCT

摘要

The present invention relates to an integrated control system for personal information security products, comprising a business-based data conversion unit that converts data using personal information as business actions of a user into business action list data, and a business action list obtained from the data conversion unit for each user. Task-based clustering to form a task-based cluster by clustering the task-based data extraction section to be extracted, the task-based vector conversion section to vectorize the task action list extracted for each user, and the vectorized task action list using the K-average algorithm. A processing unit, a task-based threshold calculation unit that calculates a distance value threshold between the center of the task-based cluster and the elements using a t-digest algorithm, and a clustering that stores the task-based cluster and the distance threshold in a column-type data format. A profiling cluster storage module composed of a storage unit; It is characterized by consisting of an abnormal pattern analysis module including an abnormal pattern determination unit that determines whether or not abnormal behavior by comparing the analysis distance value of the cluster obtained from the user's subsequent personal information access behavior and the task-based distance value threshold obtained from the storage module. It is possible to reduce the rate of positive or negative errors by analyzing the user's work behavior on the generated and collected logs without fixing the abnormal pattern in advance.