CPC G06F 21/554 (2013.01) [G06F 2221/034 (2013.01)] | 12 Claims |
1. An attack tree generation device comprising:
processing circuitry
to divide a target system that is a target of a security countermeasure, into a plurality of sub-systems based on system configuration data indicating a configuration of the target system,
to select a sub-system in which a threat on security in the target system occurs, as a root system from among the plurality of sub-systems based on threat data indicating a content of the threat,
to execute an attack tree generation process on the root system, to thereby generate an attack tree of the root system as a root tree,
to select one sub-system or more located on an intrusion course to the root system in the target system, as one descendent system or more from among the plurality of sub-systems based on intrusion course data indicating the intrusion course,
to execute the attack tree generation process on each of the one descendent system or more, to thereby generate one attack tree or more corresponding to the one descendent system or more, as one descendent tree or more, and
to integrate the root tree and the one descendent tree or more, to thereby generate an attack tree of the target system.
|