Patent ID: 8707430

Claim:
A management apparatus for managing an information security apparatus that includes a plurality of monitoring modules that monitor for tampering, the management apparatus comprising: a non-transitory memory device that stores a program; and a processing device that executes the program and causes the management apparatus to operate as: a reception circuit configured to receive, from the information security apparatus, a plurality of monitoring results generated by the monitoring modules, the monitoring modules each being a source monitoring module that monitors and generates a monitoring result for at least one other of the monitoring modules, and each being a target monitoring module that is monitored by at least one other of the monitoring modules; a detection circuit configured to detect an abnormality relating to tampering of one of the monitoring modules, by referring to fewer than all of the monitoring results received by the reception unit; and an identification circuit configured to identify, when the abnormality related to the tampering is detected, a monitoring module that has been tampered with from among (i) a monitoring module that generates a monitoring result related to the abnormality, and (ii) one or more monitoring modules identified by tracing back through a chain of monitoring modules consecutively from a target monitoring module to a source monitoring module that is a monitoring module that generates a monitoring result for the target monitoring module, starting from the monitoring module that generates the monitoring result related to the abnormality, the chain including one or more links each associating a source monitoring module that generates a monitoring result for a target monitoring module with the target monitoring module monitored by the source monitoring module.