SECURITY RISK EVALUATION METHOD FOR THREAT MANAGEMENT

摘要

A security risk evaluation method for a risk administration based on a checked result is provided to collect vulnerability or risk about security network and check risk environment of management about the assets. A new threat about network or the weak point is collected in the database(S10). The assets relating to the new threat or the weak point exists in network(S20). It checks whether to apply attack attempt detection rule(S30). It inspects whether the application of the weak point checked out regulation is applied(S40). The security risk drawing is calculated based on the check result(S60).