摘要 |
<p>Disclosed is a security analysis support system which includes an attack flow model generation means that, with respect to a structure model representing a physical connection state of an apparatus constituting an information system, and a behavior model representing a processing flow performed upon the apparatus, imparts information indicating a function possessed by the apparatus which has been defined separately from the connection state and the processing flow, in order to generate an attack flow model representing a flow of an attack that may occur as a model for analyzing security in the information system.</p> |