摘要 |
<p><P>PROBLEM TO BE SOLVED: To allow a nonspecialist of information security to easily and comprehensively analyze a cause of an information security accident. <P>SOLUTION: A human error analysis support device 110 inputs basic information about the accident by a basic information input part 111, organizes phenomena related to the accident by a phenomenon organization part 112, analyzes a causal factor of the accident by a reason analysis part 113, prepares a countermeasure plan to a root cause of the accident by a countermeasure preparing part 114, and supports human error analysis by an analyst who is nonspecialist of the information security. In organizing the phenomena, a deviation node determination part 112c determines whether the phenomenon specified in the accident has been a deviation phenomenon or not, to refine the phenomenon to be subjected to why-why analysis. In the why-why analysis, a sample display part 113a presents an accident case similar to analysis progress of accident cases analyzed in the past as a sample, according to input of the causal factor. <P>COPYRIGHT: (C)2011,JPO&INPIT</p> |