Patent ID: 11899799
Assignee: HITACHI, LTD.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 9:
10. A security risk reduction method, comprising:
estimating, by a security analysis unit, a security risk of an application by analyzing an application package based on a service setting database;
providing, by an application flow creation unit, a GUI (Graphical User Interface) that is configured to be displayed on an information processing terminal used by an operator;
wherein the operator creates a plurality of nodes of an application flow on the GUI,
wherein the application has a plurality of distributed microservices having a graph structure corresponding to the plurality of nodes,
wherein the security analysis unit determines a plurality of security services including a security service that reduces the estimated security risk based on a security management database, and
wherein the security analysis unit acquires a meta information detail of each of the security services based on the security management database, and outputs an analysis result table including the meta information detail acquired for each of the security services; and

reducing, by an application update unit, the security risk of the application by performing an application update process for adding the security services to the application based on the security management database and the analysis result table.