| 摘要 |
PROBLEM TO BE SOLVED: To provide a security measure selection support system configured to verify cost-benefit of a combination of security measures.SOLUTION: A security measure selection support system 1 includes an input/output unit 10, a calculation unit 30, and a database 40 which stores measure information, vulnerability information, attack information, and risk event information. The input/output unit 10 transmits instruction information to execute calculation, to the calculation unit 30, when the calculation-execution instruction information is input. On receipt of the calculation-execution instruction information, the calculation unit 30 calculates the total amount of security measures relating to an arbitrary combination of security measures stored in the database 40, and an expected value of the amount of damage for a predetermined period when the security measures of the combination is applied, on the basis of information stored in the database 40, and transmits the results of calculation to the input/output unit 10. The input/output unit 10 outputs the received calculation results.SELECTED DRAWING: Figure 1 |
