| 摘要 |
<P>PROBLEM TO BE SOLVED: To reduce efforts and cost of threat analysis to a countermeasure already existing in a system to be analyzed. <P>SOLUTION: An input section substitutes a countermeasure subject variable element with a value of a name associated with a value of a category in which a selection is accepted or with a value of protecting asset information in which a selection is accepted, substitutes a countermeasure target variable element with a value of a participant in which a selection is accepted or with a value of the protecting asset information, substitutes a countermeasure operation variable element with a value of the protecting asset information in which the selection is accepted, and writes a countermeasure information definition table indicating countermeasure content information including countermeasure category information, a countermeasure subject indicating a substituted value, a countermeasure target, and a countermeasure operation. A threat extraction section substitutes a threat subject variable element with a value of a participant indicated by the countermeasure target for every piece of countermeasure category information included in the countermeasure information definition table, substitutes the threat target variable element with a value of a name indicated by a countermeasure subject, countermeasure target, or countermeasure operation or with a value of the protecting asset information, and writes, as a first threat table, threat content information including a threat subject indicating a substituted value, a threat target indicating a substituted value, and a threat operation. <P>COPYRIGHT: (C)2012,JPO&INPIT |
