Patent ID: 11921845
Assignee: HITACHI, LTD.
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G

Claim 7:
8. A risk evaluation and countermeasure planning method for planning a countermeasure plan pertaining to an attack on a system, and planning a security test, the method comprising:
analyzing a vulnerability on a basis of design information;
analyzing a threat to the system on a basis of an analysis result and outputting a threat analysis result;
planning, on a basis of the threat analysis result and vulnerability information, the countermeasure plan which reduces an impact of the vulnerability;
planning the security test on a basis of the countermeasure plan;
performing an evaluation on a basis of the security test and outputting an evaluation result;
processing the evaluation result and generating a security countermeasure;
in a case where information regarding new vulnerabilities is input after product shipment, determining, from the information regarding new vulnerabilities and past product information, whether the information regarding new vulnerabilities applies to a product that forms a part of the system;
in a case that a result of the determination is that the information regarding new vulnerabilities applies to the product, evaluating an impact of the new vulnerabilities on the product, and determining whether an additional countermeasure is necessary by comparing the impact of the new vulnerabilities on the system with a requirement with respect to an asset value;
in a case where determination is that the additional countermeasure is necessary, planning the additional countermeasure for reducing the impact of the new vulnerabilities; and
generating the additional countermeasure as the product information, and store the product information in the product information database.