Patent ID: 8677501

Claim:
A non-transitory computer-readable storage medium storing a privilege violation detecting program, which when executed by a computer, causes the computer to detect a privilege violation of an test target program, wherein the privilege violation detecting program causes the computer to execute: storing, in an authority request API trace log storing unit, data of each of a plurality of authority request APIs output from the test target program; storing, in an object rule storing unit, rules providing a relationship between the authority request APIs and assumed access APIs, the assumed access APIs being APIs assumed to be called in response to receipt of a related authority request API; storing, in an actual access API trace log storing unit, data relating to actual access APIs, the actual access APIs being access APIs called in response to the authority request APIs; receiving an authority request API from the authority request API trace log storing unit; reading out, from the object access rule storing unit, an assumed access API assumed to be output in response to the received authority request API; determining an actual access API returned in response to the received authority request API from the actual access API trace log storing unit; and storing, into a minimum authority violation data storing unit, data of the received authority request API when the actual access API returned in response received authority request API does not match the read out assumed access API.