Patent ID: 8539588

Claim:
A non-transitory computer readable storage medium having stored therein a measure selecting program, the measure selecting program causing a computer to execute a process comprising: (a) determining whether a vulnerability of a resource employed in a predetermined task has been addressed based on (i) a first set of information defining a correspondence between a resource, a vulnerability of the resource, and a recovery time of the resource from a failure caused by the vulnerability, (ii) a second set of information defining a correspondence between the vulnerability defined in the first set of information and one or more measures for eliminating the vulnerability, (iii) a third set of information defining if each measure defined in the second set of information has been performed, and (iv) a fourth set of information defining the resource employed in a predetermined task, (b) evaluating based on a predetermined criteria, when the vulnerability of the resource is determined not to have been addressed, and when a recovery time defined in the first set of information corresponding to the resource is longer than a predetermined time, the one or more measures defined in the second set of information corresponding to the vulnerability determined not to have been addressed, to calculate an evaluation value of each of the measures, the evaluating calculates a sum of recovery times for each resource path which is obtained by linking the resources employed for the predetermined task from a highest level to a lowest level according to a dependency relation, extracts a resource (A) which is included in the resource path for which the sum of recovery times is highest and exceeds a predetermined value, and (B) for which (a) the determining determines that the vulnerability has not been addressed, and evaluates, based on the predetermined criteria, the one or more measures for eliminating the vulnerability; and (c) selecting a measure with a highest evaluation value.