| CPC G06F 11/0772 (2013.01) [G06F 11/0769 (2013.01); G06F 11/0793 (2013.01)] | 8 Claims |
|
8. A non-transitory computer-readable recording medium storing therein a verification information modification program that causes a computer to execute a process comprising:
acquiring, from each verification device of a plurality of verification devices that uses verification information of a software program to verify a file constituting the software program, a set of error logs, wherein the first set of error logs indicates anomaly in integrity of the software program as erroneously detected by said each verification device because of the verification information being erroneous;
determining indication that the first set of error logs comprises a plurality of error logs indicating the erroneous detection of anomaly occurring in same file names of files or same directory names of directories in said each verification device and one or more verification devices that are other than said each verification device in the plurality of verification devices, and a number of said each verification device and the one or more verification devices is more than a predetermined threshold;
extracting, when, based on the acquired first set of error logs and the determined indication of the first set of error logs, the plurality of error logs as a second set of error logs from the acquired first set of error logs, wherein the second set of error logs describes the erroneous detection of anomaly occurring in files with the same file names or directories with the same directory names in said each verification device;
generating, based on analyzing the second set of error logs, output information, wherein the output information indicates the verification information representing as a cause of the erroneous detection of anomaly and candidate information for modifying the verification information representing as a cause of the erroneous detection of anomaly; and
outputting the output information.
|