Patent ID: 7555645

Claim:
A method for proactively enforcing security in a computer system, the method comprising the computer-implemented steps of: storing a plurality of security modification rules for a system, wherein each security modification rule of the plurality of security modification rules is associated with a set of conditions; receiving a command at the computer system; analyzing the command to determine whether one or more audit rules are satisfied; when the one or more audit rules are satisfied, determining whether one or more audit records need to be generated; in response to determining that the one or more audit records need to be generated, generating the one or more audit records; based on the one or more audit records, determining whether the set of conditions associated with any security modification rule has been satisfied; and in response to determining that the set of conditions associated with a security modification rule of the plurality of security modification rules has been satisfied, performing an action, associated with the security modification rule, that modifies one or more security parameters associated with the system.