Patent ID: 7380267
Filing Date: 2008-05-27
Classification: G06F

Abstract:
1. A policy setting support tool for creating, in a computer system equipped with an access control unit that controls access to computer-managed resources based on policies, said policy setting support tool comprising: a first information database arranged by the kind of subject containing sample policies prepared as standard or recommended policies, an access log holding a history of the normal behavior of the subject, and installation information including the path to the subject installed in said computer system; a second information database arranged by the kind of object containing association information representing the subjects that are most frequently used to access the object; an access monitoring unit for monitoring the behavior of the subject and recording it in said access log; a differential detection unit for collating said installation information with said sample policy and detecting the differences between them; a policy creation unit for creating a draft policy based on said sample policy, said association information, and said differences detected by said differential detection unit; and a user interface unit for presenting said draft policy to the user, revising said draft policy as directed by the user, and saving the revised policy as the final policy.