Patent ID: 6802009
Filing Date: 2004-10-05
Classification: G06F

Abstract:
A method in a data processing system executing an operating system, said method comprising the steps of:establishing a plurality of security requirements for utilizing said operating system; establishing a plurality of system parameters; establishing a plurality of user values of said operating system; determining whether each of said plurality of security requirements is met utilizing said plurality of system parameters and said plurality of user values, wherein said operating system is secure in response to said plurality of security requirements being met; determining a secure value for each of said plurality of user values; determining a current value for each of said plurality of user values; determining that one of said plurality of security requirements is not met in response to said secure value being unequal to said current value for one of said plurality of user values; generating a notice of a security breach for said one of said plurality of security requirements; and providing a suggested correction for said security breach wherein said suggested correction results in said current value for said one of said plurality of user values being set to said secure value for said one of said plurality of user values.