US Patent:
20070143842, Jun 21, 2007
Inventors:
Alan Turner - West Tawakoni TX, US
Chris Bullok - Campbell TX, US
Kent Irvin - Nevada TX, US
John Hayre - Greenville TX, US
Kevin Markham - Greenville TX, US
International Classification:
G06F 12/14
Abstract:
A method and system are disclosed for acquisition and centralized storage of event logs from multiple systems. The present invention greatly improves the efficiency of event log review and analysis and is particularly useful for secure facilities performing periodic (e.g., weekly) event log audits for detection of security breaches. The present invention reduces human error by creating a centralized event log that automatically correlates event logs from disparate systems. The invention uses processing algorithms to analyze the centralized event log in order to identify events that meet selected criteria. A common format is utilized for the centralized event log to provide a uniform centralized event log that is easy to interpret by manual or automated analysis of the event data thereby greatly simplifying the audit process. In addition, the centralized event log can also be monitored on real time basis to detect sets of events triggering security alerts.