Patent ID: 9721092
Date: 2017-08-01
CPC Classifications: G06F

Claim:
1. A computer-implemented method, comprising: receiving an identification of a target class of an application that runs in a process virtual machine on a computer system by a monitoring agent; configuring the target class for monitoring by injecting listening code into the target class to generate a first mirror class and integrating the first mirror class into the application, the first mirror class including at least a sequence of computer executable code, including the listening code, not present in computer executable code of the target class; running the monitoring agent, the process virtual machine, and the application on the computer system; collecting data by executing the listening code within the first mirror class integrated into the application to collect data; sending the collected data directly to the monitoring agent by the listening code; and sending the collected data to a collector by the monitoring agent, wherein the collector is operable to analyze the collected data to identify an unauthorized access to the application.