Title:
ANALYSIS DEVICE, ANALYSIS SYSTEM, ANALYSIS METHOD, AND NON-TRANSITORY COMPUTER-READABLE MEDIUM HAVING PROGRAM STORED THEREON
Document Type and Number:
WIPO Patent Application WO/2020/250299
Kind Code:
A1
Abstract:
The present invention analyzes the security of an information processing system targeted for analysis, regardless of the scale of the system or the state of the connections between computers that constitute the system. An analysis device (1) that has an analysis target selection unit (2) that selects entities as analysis targets, an attack graph generation unit (3) that generates an attack graph for a set of the selected entities, and a countermeasure execution assumption unit (4) that, relative to the generated attack graph, assumes execution of countermeasures that nullify attack conditions. The attack graph generation unit (3) generates the attack graph on the condition that countermeasures that nullify attack conditions and have been assumed by the countermeasure execution assumption unit (4) are being executed. During each of a plurality of cycles, the analysis target selection unit (2) selects at least a portion of all entities that are to be targeted for analysis and adds said portion to the analysis targets.
More Like This:
Inventors:
INOKUCHI MASAKI (JP)
Application Number:
PCT/JP2019/023084
Publication Date:
December 17, 2020
Filing Date:
June 11, 2019
Export Citation:
Assignee:
NEC CORP (JP)
International Classes:
G06F21/57
Foreign References:
| JP2018077597A | 2018-05-17 | |||
| JP2017224053A | 2017-12-21 | |||
| JP2006235692A | 2006-09-07 | |||
| US20060075503A1 | 2006-04-06 |
Other References:
YAMADA, YOSHIYUKI: "Security assessment for control systems considering air gap.", PROCEEDINGS OF 2018 SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY (SCIS2018), [USB] SUMMARIES OF 2018 SYMPOSIUM ON CRYPTOGRAPHY AND INFORMATION SECURITY, 23 January 2018 (2018-01-23), pages 1 - 7
Attorney, Agent or Firm:
IEIRI Takeshi (JP)
Download PDF: