Patent ID: 9350749
Filing Date: 2016-05-24
CPC Classification: H04L

Claim Text:
1. A computer-implemented method for providing application attack monitoring, the method being executed using one or more processors and comprising: obtaining, by the one or more processors, a security graph model associated with an attack vulnerability of a distributed application, the security graph model comprising a plurality of rule parts; screening, by the one or more processors, log data obtained by a plurality of connectors to selectively obtain relevant log data corresponding to one or more of the rule parts, each connector being in communication with a respective component of the distributed application; evaluating, by the one or more processors, the relevant log data based on the security graph model to provide an evaluation score that reflects a likelihood that an attack corresponding to the attack vulnerability modeled by the security graph model has taken place; and in response to determining that the evaluation score is greater than a predetermined threshold, providing, by the one or more processors, output indicating an attack on the distributed application.