Patent ID: 7739722

Claim:
A system for supporting security administration in a network system, including: a node-information memory storing node information indicative of security functions provided by hardware and software of said network system, for each of said hardware and each of said software; an input device which receives a set of rules as guidance relating to security of said network system, and topology information indicative of hardware of said network system and software installed in each of said hardware; and a correspondence maker which, based on said node information, makes correspondence between each of said rules and each of said hardware or software indicated by said topology information, wherein when said correspondence maker judges there is a vacant rule in the set of rules which does not have correspondence to any hardware or software, among said set of rules, the correspondence maker makes correspondence between one of the hardware and software and the vacant rule, or, if impossible to make the correspondence, the correspondence maker outputs a message to a user that urges the user to conduct one of deleting the vacant rule, and adding hardware or software corresponding to the vacant rule, and when said correspondence maker judges there is a hardware or software which does not have correspondence to any rule in the set of rules, the correspondence maker outputs a message to a user that urges the user to add a rule to make correspondence between the hardware or software and the added rule, or delete the hardware or software.