| 摘要 |
<p><P>PROBLEM TO BE SOLVED: To evaluate the safety of an application without depending on conditions under which a threat is actualized. <P>SOLUTION: A communication partner list storage part 4 is configured to store first communication partner information showing an already known communication partner. An authority list storage part 7 is configured to store first authority information showing known authority. An application storage part 1 is configured to store an application file including the execution code of an application to be evaluated and second authority information showing authority to be used by the application to be evaluated. A decompile part 2 is configured to decompile the execution code, and to obtain a source code. A communication partner extraction part 3 is configured to extract second communication partner information showing the communication partner from the source code. A list comparison part 5 is configured to compare the first communication partner information with the second communication partner information. An authority comparison part 8 is configured to compare the first authority information with the second authority information. A safety evaluation part 9 is configured to evaluate the safety of the application to be evaluated on the basis of the result of comparison. <P>COPYRIGHT: (C)2013,JPO&INPIT</p> |
