Patent ID: 11956264
Assignee: LINE CORPORATION
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A validity verification server, comprising:
at least one processor configured to execute computer-readable instructions to,
receive an event to be analyzed from a security information & event management (SIEM) server, the event to be analyzed corresponding to a potential attack, the event to be analyzed selected by the SIEM server from a plurality of events detected by different security devices based on a desired correlation rule used to filter the plurality of events received by the different security devices;
register the event to be analyzed;
collect raw data associated with the registered event from a security device corresponding to the registered event among the different security devices in response to the registration of the event;
acquire location information of an intended network location associated with a network attack based on the collected raw data;
simulating a network attack using the acquired location information based on the network attack corresponding to the registered event;
determine a validity status of the registered event based on the simulated network attack;
generate an exceptional processing message of the registered event based on results of the determining the validity status of the registered event; and
transmit the generated exceptional processing message to the SIEM server.