摘要 |
PURPOSE: A method for estimating the degree of security risk, a system for estimating the degree of the security risk, and a recording medium for the same are provided to improve the discrimination of security risk. CONSTITUTION: A security policy setting part(302) includes a unit scenario setting function, an impact index setting function for each security risk, and a user threaten index setting function based on user information. A unit scenario risk estimating part(304) obtains the minimum risk index based on the minimum grade and the maximum risk index based on the maximum grade. The unit scenario risk estimating part converts the final risk index into a unit scenario risk grade. |