摘要 |
PROBLEM TO BE SOLVED: To provide a vulnerability validation device and program for validating vulnerability of a target device having plugins installed thereon.SOLUTION: In a vulnerability validation device 200, an attack list 291 associates plugin group identifiers with attack identifiers. An attack selection unit 210 selects an attack identifier from the attack list 291. A plugin selection unit 220 selects a plugin group identifier associated with the attack identifier from the attack list 291. A plugin embedding unit 230 installs a group of plugins identified by the plugin group identifier on a target device. A plugin operation unit 240 operates plugins 281 installed on the target device. An attack execution unit 250 executes an attack against the target device. A vulnerability determination unit 260 validates vulnerability of the target device based on a result of executing the attack.SELECTED DRAWING: Figure 2 |