US 11,914,493 B2
Information processing device, information processing system, monitoring method, and recording medium
Shuichi Karino, Tokyo (JP); Kazuhiko Isoyama, Tokyo (JP); Yuji Kobayashi, Tokyo (JP); Yoshiaki Sakae, Tokyo (JP); Hiroki Tagato, Tokyo (JP); and Masato Yasuda, Tokyo (JP)
Assigned to NEC CORPORATION, Tokyo (JP)
Filed by NEC CORPORATION, Tokyo (JP)
Filed on Jan. 11, 2021, as Appl. No. 17/145,949.
Application 17/145,949 is a continuation of application No. 16/487,169, granted, now 10,909,014, previously published as PCT/JP2018/005699, filed on Feb. 19, 2018.
Claims priority of application No. 2017-031166 (JP), filed on Feb. 22, 2017.
Prior Publication US 2021/0133068 A1, May 6, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 11/30 (2006.01); G06F 11/07 (2006.01); G06F 11/34 (2006.01)
CPC G06F 11/3006 (2013.01) [G06F 11/079 (2013.01); G06F 11/0751 (2013.01); G06F 11/3055 (2013.01); G06F 11/3409 (2013.01); G06F 2201/86 (2013.01)] 16 Claims
OG exemplary drawing
 
1. A method comprising:
performing a first mode monitoring, the first mode monitoring being monitoring a first event and acquiring a first result;
determining whether an index value related to the first event meets a first condition;
when the index value meets the first condition, performing a second mode monitoring, the second mode monitoring being monitoring a second event to obtain a second result;
determining whether the index value meets a third condition; and
when the index value does not meet the third condition, performing the first mode monitoring, wherein
the second event is defined as an additional monitoring event relating to the first event and is, in the second mode monitoring, additionally monitored as compared to monitoring of the first mode monitoring,
wherein the first condition comprises determining the index value to be both above a first value and below a second value,
wherein the first value and the second value are each defined by respective ones of standard deviations from a pre-set value range,
wherein the first event comprises data transmissions between processes,
wherein when performing the first mode monitoring, the index value is an occurrence frequency of the data transmissions between processes,
wherein the additional monitoring event indicates an access to a particular data,
wherein the particular data is indicated by one or more of the data transmissions, and
wherein when performing the second mode monitoring, the index value is an access frequency of the access to the particular data.