Patent ID: 8407801
Filing Date: 2013-03-26
Classification: G06F,H04L

Abstract:
1. A security countermeasure function evaluation program stored in a non-transitory computer readable storage medium, wherein the security countermeasure function evaluation program is used on and for a security countermeasure function evaluation apparatus for evaluating a security countermeasure function implemented on an information processing apparatus capable of reading and writing a database unit serving as a storage device, the security countermeasure function evaluation program comprising: a first program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, security protection target asset information individually representing a physical body of the information processing apparatus, a function of the information processing apparatus, and data stored in the information processing apparatus and a plurality of pieces of security state information including security condition ID and state information which are individually related to each piece of the security protection target asset information; a second program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, document data including threat information including information about an executioner of a threat and an execution condition, which are a cause of transition of a security condition from a safe state to a dangerous state or a damage occurrence state; a third program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, a sufficient condition evaluation parameter including an option and a point for each of items including presence/non-presence of a function, a time, an effect, a notification range, an operation timing, and a degree of dependence on booting regarding a sufficient condition for executing any countermeasure policy and a countermeasure function evaluation parameter including an option and a point for each of items including presence/non-presence of a function, a time, an effect, a notification range, an operation timing, and a degree of dependence on booting regarding any security countermeasure function; a fourth program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, sufficient condition table model-form information including a countermeasure policy region including countermeasure policy information for reducing an execution condition described in the information about the executioner of the threat and the execution condition, a selection region enumerating options for each of items including presence/non-presence of a function, a time, an effect, a notification range, and the degree of dependence on booting in association with the sufficient condition evaluation parameter regarding execution of countermeasure policy information and a function name for execution, and a point region in which a point according to an option selected by the selection region is written on the basis of the sufficient condition evaluation parameter; a fifth program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, countermeasure model-form information including a countermeasure name region receiving a countermeasure name for identifying a product of a security countermeasure function, a selection region enumerating options for each of items including presence/non-presence of a function, a time, an effect, a notification range, and a degree of dependence on booting in association with the countermeasure function evaluation parameter, regarding a function name for execution and execution for a security countermeasure function of the product identified by the countermeasure name, and a point region in which a point according to an option selected by the selection region, is written on the basis of the countermeasure function evaluation parameter; a sixth program code for causing the security countermeasure function evaluation apparatus to execute processing for selecting security protection target asset information in the database unit based on a selection command when receiving input of the selection command of a security protection target asset including a specification of the security protection target asset; a seventh program code for causing the security countermeasure function evaluation apparatus to perform processing for displaying the selected security protection target asset information; an eighth program code for causing the security countermeasure function evaluation apparatus to execute processing for extracting from the database unit security state information related to the displayed security protection target asset information based on a security condition ID when receiving input of the security condition ID while the security protection target asset information is displayed; a ninth program code for causing the security countermeasure function evaluation apparatus to execute processing for displaying the extracted security condition ID of the security state information; a tenth program code for causing the security countermeasure function evaluation apparatus to execute processing for classifying each security condition ID into one of a safe, danger, or damage occurrence group based on a specification when receiving input of the specification about one of the safe, danger, or damage occurrence group for each displayed security condition ID; an eleventh program code for causing the security countermeasure function evaluation apparatus to execute processing for displaying outer frame information in a format according to the classified group by adding it to the displayed security condition ID; a twelfth program code for causing the security countermeasure function evaluation apparatus to execute processing for using a form of an arrow extending from the outer frame information according to the safe group to the outer frame information according to the danger or damage occurrence group based on a specification to draw first transition path information between the outer frame information when receiving input of a specification of displayed outer frame information; a thirteenth program code for causing the security countermeasure function evaluation apparatus to execute processing for using a form of an arrow extending from the outer frame information according to the dangerous group to the outer frame information according to the damage occurrence group based on a specification to draw second transition path information between the outer frame information when receiving input of a specification of displayed outer frame information; a fourteenth program code for causing the security countermeasure function evaluation apparatus to execute processing for associating the first or second transition path information with the threat information on the basis of a specification when receiving input of a specification of the displayed first or second transition path information and the threat information; a fifteenth program code for causing the security countermeasure function evaluation apparatus to execute processing for deleting first or second transition path information that is not associated with the threat information, and generating threat occurrence model information including a plurality of pieces of security state information, outer frame information, the first transition path information, the second transition path information, and threat information, which are associated with each other; a sixteenth program code for causing the security countermeasure function evaluation apparatus to execute processing for generating threat analysis intermediate data by associating transition source security state information, transition destination security state information, and threat information with each other based on the threat occurrence model information and displaying the threat analysis intermediate data; a seventeenth program code for causing the security countermeasure function evaluation apparatus to execute processing for extracting information about an executioner of a threat and an execution condition from the threat information based on a specification when receiving input of the specification of the executioner of the threat and the execution condition in the threat information in the threat analysis intermediate data while the threat analysis intermediate data are displayed; an eighteenth program code for causing the security countermeasure function evaluation apparatus to execute processing for generating threat analysis result data in which the transition source security state information, the transition destination security state information, and the extracted information about the executioner of the threat and the execution condition are associated with each other in the threat analysis intermediate data; a nineteenth program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing countermeasure policy information to a countermeasure policy region of the sufficient condition table model-form information when receiving input of the countermeasure policy information for reducing an execution condition described in the information about the executioner of the threat and the execution condition in the threat analysis result data; a twentieth program code for causing the security countermeasure function evaluation apparatus to execute processing for selecting a specified option in a selection region when any one of the options in the selection region is specified regarding execution of countermeasure policy information written to the countermeasure policy region and a function name for execution; a twenty-first program code for causing the security countermeasure function evaluation apparatus to execute processing for describing, in the point region, a point corresponding to an option selected in a selection region, based on the sufficient condition evaluation parameter; a twenty-second program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, sufficient condition table information including a countermeasure policy region into which countermeasure policy information is input, a selection region in which an option is selected, and a point region describing a point; a twenty-third program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing the countermeasure name to the countermeasure name region in the countermeasure model-form information when receiving input of the countermeasure name; a twenty-fourth program code for causing the security countermeasure function evaluation apparatus to execute processing for selecting a specified option in a selection region when any one of the options in the selection region of the countermeasure model-form information is specified regarding execution of a countermeasure name written to the countermeasure name region and a function name for execution; a twenty-fifth program code for causing the security countermeasure function evaluation apparatus to execute processing for describing, in a point region of the countermeasure model-form information, a point corresponding to an option selected in the selection region of the countermeasure model-form information, based on the countermeasure function evaluation parameter; a twenty-sixth program code for causing the security countermeasure function evaluation apparatus to execute writing processing for writing, to the database unit, countermeasure information including a countermeasure name region into which a countermeasure name is input, a selection region in which an option is selected, a point region describing a point, which are generated on the basis of the countermeasure model-form information; a twenty-seventh program code for causing the security countermeasure function evaluation apparatus to execute processing for calculating a difference obtained by subtracting a point in a point region of sufficient condition table information from a point in a point region of countermeasure information regarding the point region of the same item in the sufficient condition table information and the countermeasure information; a twenty-eighth program code for causing the security countermeasure function evaluation apparatus to execute processing for performing evaluation result point writing processing for writing a point of an evaluation result for each of the same items in the sufficient condition table information and the countermeasure information, wherein when the difference is equal to or more than 0, the evaluation result is adopted as a point of a positive value, and when the difference is less than 0, the evaluation result is adopted as a point of a value zero; a twenty-ninth program code for causing the security countermeasure function evaluation apparatus to execute processing for calculating a mean value of points in the evaluation results for respective functions of each piece of countermeasure policy information; a thirtieth program code for causing the security countermeasure function evaluation apparatus to execute processing for calculating an evaluation point by obtaining a summation of all the mean values for each piece of countermeasure policy information; a thirty-first program code for causing the security countermeasure function evaluation apparatus to execute processing for calculating a transition probability prior to countermeasure, wherein before a security countermeasure function is implemented on the information processing apparatus, based on the threat analysis result data, a number of the same pieces of transition source security state information is adopted as a denominator value, and a number of the same pieces of transition destination security state information having a common transition source is adopted as a numerator value, and the numerator value is divided by the denominator value, whereby the transition probability prior to countermeasure is calculated; a thirty-second program code for causing the security countermeasure function evaluation apparatus to execute processing for calculating a transition probability after countermeasure, wherein after a security countermeasure function is implemented on the information processing apparatus, the evaluation point is subtracted from the value of the numerator used for calculating the transition probability prior to countermeasure, and the value of the numerator is thus corrected, and the value of this corrected numerator is divided by the value of the denominator, whereby the transition probability after countermeasure is calculated; and a thirty-third program code for causing the security countermeasure function evaluation apparatus to execute processing for displaying the transition probability prior to countermeasure and the transition probability after countermeasure.