Function allocation control device, function allocation control method and program

Abstract

Provided is a function assignment control device which is for controlling a security verification system that executes a security verification function assigned to a subject entity, the apparatus comprising: a trust score calculation unit which calculates a trust score indicating the level of security of each entity, on the basis of verification result information indicating the result of verifying the security of each entity; a security verification function assignment unit which assigns a security verification function to each entity, on the basis of the calculated trust score and resource information indicating resources used to implement the security verification function assigned to each entity; and a security verification function control unit which controls the security verification system to perform the assigned security verification function.

Description

[Technical field]

[0001] The present invention relates to a function allocation control device, a function allocation control method, and a program. [Background technology]

[0002] In recent years, the limitations of the traditional boundary security model have been pointed out due to changes in cyber-attack-related threats and attack methods, the promotion of cloud utilization, and the diversification of work due to the spread of remote work. Therefore, the zero trust network has been proposed as a new security model for networks. The basic principle of this security model is to "trust nothing," and it is a security model that performs continuous security verification of devices connected to the network or users who operate the devices, and grants minimum access rights and dynamically controls access to information assets based on the verification results.

[0003] For example, Non-Patent Document 1 discloses a device that performs behavior detection (botnet detection) as an example of security verification. The device performs threshold checks using multiple criteria according to traffic type based on various logs, and determines that a terminal that has performed communication exceeding the criteria may be infected with a bot.

[0004] Non-Patent Document 2 discloses a technology that sets an access level for each user role in a company and performs security verification based on user authentication, access source IP address, and other behaviors. In this technology, when suspicious behavior is detected, a trust score is calculated by subtracting it from an upper limit of 100, and when the trust score is equal to or lower than the access level, dynamic access control is performed based on the subtraction trust score, in which access is not permitted.

[0005] In addition, Non-Patent Document 3 discloses a method for managing trust information using a hierarchical blockchain to maintain trust information between IoT systems. [Prior art documents] [Non-patent literature]

[0006] [Non-Patent Document 1] "Palo Alto Networks Products Behavioral Detection (Botnet Detection)", Hitachi Solutions, [online], Internet<URL:https: / / www.hitachi-solutions.co.jp / paloalto / sp / products / ngfw / pa / function / botnet.html> [Non-Patent Document 2] Kawai, "Prototype of Zero Trust Network for In-house Systems and Consideration of Security Policy", IEICE NS Study Group: NS2020-111, 2020 [Non-Patent Document 3] S. Mayra, "Zero-trust hierarchical management in IoT." IEEE international congress on Internet of Things (ICIOT), 2018. Summary of the Invention [Problem to be solved by the invention]

[0007] However, in conventional technologies, when the zero trust network technology is applied to a large-scale network environment, there is a problem that there may be a shortage of resources such as computation, communication, etc., for performing security verification for a large number of entities. If there are insufficient resources, security verification cannot be performed sufficiently, the accuracy of the security verification and the accuracy of the trust score based thereon may decrease, and false positives may occur.

[0008] The disclosed technology aims to reduce resources required for performing security verification. [Means for solving the problem]

[0009] The disclosed technology is an apparatus for controlling a security verification system that executes a security verification function assigned to a target entity, comprising: a trust score calculation unit that calculates a trust score indicating the level of security of each entity based on verification result information indicating the result of verifying the security of each entity; a security verification function allocation unit that assigns a security verification function to each entity based on the calculated trust score and resource information indicating the resources used to realize the security verification function assigned to each entity; and a security verification function control unit that controls the security verification system to execute the assigned security verification function; When the entity is a user, the security verification for the user is knowledge authentication, possession authentication, or biometric authentication, and when the entity is a device, the security verification for the device is integrity verification by binary analysis or firmware analysis, communication verification by network scanning, or software behavior verification by vulnerability scanning. This is a function allocation control device. Effect of the Invention

[0010] The resources required to perform security verification can be reduced. [Brief description of the drawings]

[0011] [Figure 1] FIG. 1 illustrates an example of a system configuration of a security verification system. [Diagram 2] FIG. 11 is a diagram illustrating an example of verification result information. [Diagram 3] FIG. 13 is a diagram illustrating an example of reliability score information. [Figure 4] FIG. 2 is a diagram illustrating an example of first resource information. [Diagram 5] FIG. 11 is a diagram illustrating an example of second resource information. [Figure 6] 13 is a flowchart showing an example of the flow of a security verification control process. [Figure 7] FIG. 2 illustrates an example of a hardware configuration of a computer. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0012] Hereinafter, an embodiment of the present invention (the present embodiment) will be described with reference to the drawings. The embodiment described below is merely an example, and the embodiment to which the present invention is applied is not limited to the following embodiment.

[0013] (Outline of this embodiment) The security verification system according to the present embodiment collects verification result information indicating the verification result of each entity and resource information related to each entity, calculates a trust score based on the verification result information, and assigns a security verification function to each entity based on the trust score and the resource information, thereby realizing the assigned security verification function.

[0014] The entity for which security verification is performed is mainly a user and a device. When the entity is a user, the security verification for the user is, for example, knowledge authentication (password authentication, location authentication, etc.), possession authentication, biometric authentication, etc. Multi-factor authentication that combines a number of these authentication methods is widely used for user authentication, and a trust score for the user is calculated from the security verification results of each authentication, and based on the calculated trust score, it is determined and controlled whether or not to allow access to an information asset in response to an access request from a device operated by the user.

[0015] Next, when the entity is a device, security verification of the device is, for example, integrity verification by binary analysis, firmware analysis, etc., which is a static verification method, communication verification by network scanning, etc., and software behavior verification by vulnerability scanning, etc., which is a dynamic verification method. Security verification of the device is realized by combining static and dynamic verification methods.

[0016] (Example of system configuration for security verification system) 1 is a diagram showing an example of the system configuration of a security verification system 1. The security verification system 1 includes a function allocation control device 10 and a security verification system 20.

[0017] The function allocation controller 10 is connected to a security verification system 20 so that they can communicate with each other. The function allocation controller 10 collects verification result information indicating the verification result of each entity and resource information related to each entity from the security verification system 20, and calculates a trust score based on the verification result information. Then, the function allocation controller 10 allocates security verification functions to each entity based on the trust score and the resource information, and controls the security verification system 20 to realize the allocated security verification functions.

[0018] The security verification system 20 includes a plurality of security verification systems (e.g., a first security verification system 20-1, a second security verification system 20-2, a third security verification system 20-3, etc.) The security verification system 20 acquires various information about each entity via a communication network or the like, and realizes a security verification function for each entity.

[0019] Each security verification system includes a verification result DB 21, a resource information DB 22, and a security verification unit 23.

[0020] The verification result DB 21 is a database for storing verification result information indicating the results of each security verification system verifying the security of each entity. Specific examples of the verification result information will be described later.

[0021] The resource information DB 22 is a database for storing resource information including a list of the verification functions provided in each security verification system, the resources consumed by each verification function, the history of resources used by the verification functions assigned to each entity, etc. Specific examples of resource information will be described later.

[0022] The security verification unit 23 executes the security verification assigned to each entity according to a determined verification schedule. For example, the security verification unit 23 included in the first security verification system 20-1 executes security verification of the first entity 31. If the first entity 31 is software on a server, the security verification unit 23 included in the first security verification system 20-1 accesses the server device and executes security verification of the target software.

[0023] Furthermore, the security verification unit 23 included in the second security verification system 20-2 executes security verification of the second entity 32. If the second entity 32 is a network device, the security verification unit 23 included in the second security verification system 20-2 accesses the network device and executes security verification for the target network device.

[0024] Furthermore, the security verification unit 23 included in the third security verification system 20-3 executes security verification of the third entity 33. If the third entity 33 is a user, the security verification unit 23 included in the third security verification system 20-3 accesses a terminal operated by the user and executes security verification for the user via the target terminal.

[0025] Although FIG. 1 shows an example in which each entity and each security verification system have a one-to-one relationship, each security verification system may correspond to a plurality of entities.

[0026] (Example of functional configuration of the function allocation control device) Next, a description will be given of an example of a functional configuration of the function allocation controller 10. The function allocation controller 10 includes a verification result collector 11, a verification result integrated DB 12, a reliability score calculator 13, a reliability score integrated DB 14, a resource information collector 15, a resource information integrated DB 16, a security verification function assigner 17, and a security verification function controller 18.

[0027] Verification result collection unit 11 collects verification result information from security verification system 20. Verification result integrated DB 12 is a database that stores the collected verification result information.

[0028] The trust score calculation unit 13 calculates a trust score for each entity based on the verification result information for each entity stored in the verification result integrated DB 12. The trust score is a value indicating the level of security for each entity, and is expressed by a numerical value or a reliability level based on a numerical value. For example, the trust score may be a numerical value from 0 to 1, or may be a gradual classification such as high reliability, medium reliability, and low reliability.

[0029] The trust score integrated DB 14 is a database for storing information indicating the calculated trust score of each entity.

[0030] Resource information collection unit 15 collects resource information from security verification system 20. Resource information integrated DB 16 is a database that stores the collected resource information.

[0031] The security verification function allocation unit 17 extracts entities that are candidates for changing the number of security verification functions allocated or the verification schedule, based on information indicating the trust score of each entity stored in the trust score integration DB 14. Then, for the extracted entities, the security verification function allocation unit 17 determines whether or not to change the allocation of security verification functions or the verification schedule, based on the resource information stored in the resource information integration DB 16, and if a change is to be made, further determines the specific content of the change.

[0032] For example, the security verification function allocation unit 17 extracts an entity that shows a high reliability as a candidate for reducing the number of security verification functions allocated to the entity or changing the verification schedule so as to reduce the frequency of execution of the verification. For example, a threshold Th TRUST and security verification function allocation unit 17 determines whether reliability S is greater than or equal to Th in a reference period t. TRUST Entities that satisfy the above criteria are extracted as candidates for reducing the number of security verification functions assigned to them or for changing the verification schedule so as to reduce the verification frequency.

[0033] Then, for the extracted entity, the security verification function allocation unit 17 determines whether to deallocate the allocated security verification function or whether to reduce the verification frequency based on the resource information stored in the resource information integrated DB 16, and if the allocation is to be deallocated or the verification frequency is to be reduced, it further determines the security verification function to be deallocated or determines the new verification execution interval. For example, when the security verification function allocation unit 17 determines based on the resource information that there is not enough room in the current resources, it deallocates the allocated security verification function or reduces the verification frequency.

[0034] Here, the security verification function allocation unit 17 may decide whether to deallocate an allocated security verification function or whether to extend the verification execution interval based on not only the amount of resources but also on verification result information or other information so as to prevent a decrease in security level, an increase in risk, etc.

[0035] Furthermore, security verification function allocation unit 17 extracts entities that show low reliability as candidates for increasing the number of security verification functions allocated to them. For example, a threshold Th indicating low reliability may be set in advance. UNTRUST Then, security verification function allocation unit 17 sets the reliability S to S <Th UNTRUST Entities that satisfy the above condition are extracted as candidates for increasing the number of security verification functions allocated to them.

[0036] Then, the security verification function allocation unit 17 determines whether to increase the number of security verification functions allocated to the extracted entity based on the resource information stored in the resource information integrated DB 16, and if the number of allocations is to be increased, determines which security verification functions to add. For example, when the security verification function allocation unit 17 determines based on the resource information that there is sufficient resource even if a verification function is added, it increases the number of security verification functions allocated.

[0037] Security verification function control unit 18 controls security verification system 20 based on the determined change in allocation of security verification functions or change in verification frequency.

[0038] (Specific examples of information handled by the security verification system) Next, a specific example of information handled by security verification system 1 will be described.

[0039] 2 is a diagram showing an example of verification result information. The verification result information 101 is an example of information collected by the verification result collection unit 11 and stored in the verification result integrated DB 12. The verification result information 101 includes the verification result (OK or NG) of each verification item for each entity. Note that the verification result does not have to be a binary value of OK or NG, and may be, for example, a numerical value indicating the level of security.

[0040] 3 is a diagram showing an example of the trust score information. The trust score information 102 is an example of information indicating the trust score calculated by the trust score calculation unit 13 and stored in the trust score integrated DB 14. The trust score information 102 includes the trust score of each entity. For example, the trust score is a numerical value ranging from 0 to 1, and the larger the numerical value, the higher the trust. However, the trust score may take other forms, and may be a value in a tiered format such as high, medium, and low.

[0041] 4 is a diagram showing an example of the first resource information 103. The first resource information 103 is a part of the resource information collected by the resource information collection unit 15 and stored in the resource information integrated DB 16.

[0042] First resource information 103 is information indicating resources used by each verification function of security verification system 20. Types of resources include, for example, calculation resources (CPU usage, memory usage, etc.), communication resources (communication volume, etc.), etc.

[0043] First resource information 103 is information indicating standard resources used by each security verification function, and the resources actually used increase or decrease depending on the communication environment, the execution status of other processes, and the like.

[0044] Based on first resource information 103, security verification function allocation unit 17 can determine the amount of resource increase when, for example, a security verification function is added.

[0045] 5 is a diagram showing an example of the second resource information 104. The second resource information 104 is a part of the resource information collected by the resource information collection unit 15 together with the first resource information 103 and stored in the resource information integrated DB 16.

[0046] The second resource information 104 is information indicating the resources actually used by each entity for the security verification function. The types of resources are the same as those of the first resource information 103.

[0047] Based on second resource information 104, security verification function allocation unit 17 can determine the amount of resource reduction when, for example, reducing security verification functions or reducing the verification frequency.

[0048] (Example of operation of the function allocation control device) Next, with reference to the drawings, a description will be given of an example of the operation of the function allocation controller 10. The function allocation controller 10 periodically starts a security verification control process, for example, in a batch process once a day.

[0049] 6 is a flowchart showing an example of the flow of a security verification control process. Verification result collector 11 acquires verification result information by collecting it from security verification system 20 (step S101). Trust score calculator 13 calculates a trust score based on the verification result information (step S102).

[0050] Next, the resource information collector 15 acquires the resource information by collecting it from the security verification system 20 (step S103). Note that the function allocation controller 10 may execute steps S103 and S101 in the reverse order, or may execute these processes in parallel.

[0051] Next, the security verification function allocation unit 17 allocates security verification functions based on the trust score information and the resource information (step S104). TRUST = 0.7, threshold Th UNTRUST = 0.4, and the reliability S of each entity is the value shown in FIG.

[0052] In this case, security verification function allocation unit 17 determines whether reliability S is greater than or equal to Th TRUST The second entity, which satisfies the above condition, is extracted as a candidate for reducing the number of security verification functions allocated to it or for changing the verification schedule so as to reduce the frequency of verification execution.

[0053] Then, based on the second resource information 104, the security verification function allocation unit 17 decides whether to reduce security verification functions or whether to reduce the frequency of verification execution from information on the resources currently being used for security verification of the second entity, and further decides which security verification functions to release or the changed verification execution interval.

[0054] In addition, security verification function allocation unit 17 determines whether reliability S is S <Th UNTRUST A third entity that satisfies the above condition is extracted as a candidate for increasing the allocation number of security verification functions.

[0055] Then, the security verification function allocation unit 17 determines information about resources currently being used for security verification of the second entity based on the second resource information 104, and determines information about resources when a security verification function is added based on the first resource information 103. Then, the security verification function allocation unit 17 decides whether to increase the number of allocated security verification functions, and if the number of allocated functions is to be increased, determines further security verification functions to add.

[0056] Then, security verification function control unit 18 controls security verification system 20 based on the assigned security verification function (step S105).

[0057] (Example of Hardware Configuration According to the Present Embodiment) The function allocation control device 10 can be realized, for example, by making a computer execute a program describing the processing contents described in this embodiment. Note that this "computer" may be a physical machine or a virtual machine on the cloud. When a virtual machine is used, the "hardware" described here is virtual hardware.

[0058] The above program can be recorded on a computer-readable recording medium (such as a portable memory) and can be stored or distributed. The above program can also be provided via a network such as the Internet or e-mail.

[0059] Fig. 7 is a diagram showing an example of the hardware configuration of the computer. The computer in Fig. 7 has a drive device 1000, an auxiliary storage device 1002, a memory device 1003, a CPU 1004, an interface device 1005, a display device 1006, an input device 1007, an output device 1008, etc., which are all connected to each other via a bus B.

[0060] The program for realizing the processing on the computer is provided by a recording medium 1001 such as a CD-ROM or a memory card. When the recording medium 1001 storing the program is set in the drive device 1000, the program is installed from the recording medium 1001 to the auxiliary storage device 1002 via the drive device 1000. However, the program does not necessarily have to be installed from the recording medium 1001, but may be downloaded from another computer via a network. The auxiliary storage device 1002 stores the installed program as well as necessary files, data, etc.

[0061] When a program start instruction is received, the memory device 1003 reads out and stores the program from the auxiliary storage device 1002. The CPU 1004 realizes the functions related to the device according to the program stored in the memory device 1003. The interface device 1005 is used as an interface for connecting to a network. The display device 1006 displays a GUI (Graphical User Interface) or the like according to a program. The input device 1007 is composed of a keyboard, a mouse, a button, a touch panel, or the like, and is used to input various operation instructions. The output device 1008 outputs the calculation result. Note that the above computer may be equipped with a GPU (Graphics Processing Unit) or a TPU (Tensor processing unit) instead of the CPU 1004, or may be equipped with a GPU or a TPU in addition to the CPU 1004. In that case, the processes may be shared and executed, for example, the GPU or the TPU executes processes that require special calculations, and the CPU 1004 executes other processes.

[0062] (Effects of this embodiment) According to the function allocation control device 10 of this embodiment, verification result information indicating the verification result of each entity and resource information related to each entity are collected, and a trust score is calculated based on the verification result information. Then, the security verification system assigns security verification functions to each entity based on the trust score and the resource information, and realizes the assigned security verification functions. This makes it possible to reduce resources required for performing security verification while minimizing the deterioration of security.

[0063] (Summary of the embodiment) This specification describes at least the function allocation control device, function allocation control method, and program described in the following sections. (Section 1) 1. An apparatus for controlling a security verification system to perform a security verification function assigned to a target entity, comprising: a trust score calculation unit that calculates a trust score indicating a level of security of each entity based on verification result information indicating a result of verifying the security of each entity; a security verification function allocation unit that allocates a security verification function to each entity based on the calculated trust score and resource information indicating resources used to realize the security verification function allocated to each entity; a security verification function control unit that controls the security verification system to execute an assigned security verification function; Function allocation control device. (Section 2) the security verification function allocation unit extracts entities that are candidates for changing the number of security verification functions allocated or the verification schedule based on the calculated trust score, and determines, for the extracted entities, whether or not to change the allocation of the security verification functions or the verification schedule based on the resource information, and if a change is to be made, further determines the specific content of the change. 2. A function allocation control device as set forth in claim 1. (Section 3) the security verification function allocation unit extracts entities that exhibit a high degree of trust as candidates for reducing the number of security verification functions allocated to them or for changing the verification schedule so as to reduce the frequency of verification execution; 3. A function allocation control device as set forth in claim 2. (Section 4) the resource information includes information indicating resources actually used by each entity for a security verification function; the security verification function allocation unit determines, based on the resource information, an amount of reduction in resources when reducing security verification functions or reducing a verification frequency; 4. A function allocation control device according to claim 3. (Section 5) the security verification function allocation unit extracts entities exhibiting low reliability as candidates for increasing the number of security verification functions allocated to the entities; 5. A function allocation control device according to any one of claims 2 to 4. (Section 6) the resource information includes information indicating standard resources used by each security verification function; the security verification function allocation unit determines an increase in resources required when a security verification function is added based on the resource information; 6. A function allocation control device according to claim 5. (Section 7) 1. A function allocation control method implemented by an apparatus for controlling a security verification system for performing security verification functions assigned to target entities, comprising: calculating a trust score indicating a level of security of each entity based on verification result information indicating a result of verifying the security of each entity; assigning a security verification function to each entity based on the calculated trust score and resource information indicative of resources used to realize the security verification function assigned to each entity; controlling the security verification system to perform assigned security verification functions. Function allocation control method. (Section 8) A program for causing a computer to function as each unit in the function allocation control device according to any one of claims 1 to 6.

[0064] Although the present embodiment has been described above, the present invention is not limited to such a specific embodiment, and various modifications and variations are possible within the scope of the gist of the present invention described in the claims. [Explanation of symbols]

[0065] 1. Security Verification System 10 Function allocation control device 11 Verification Results Collection Department 12 Integrated verification results database 13 Trust score calculation section 14 Trust Score Integrated DB 15 Resource Information Collection Department 16 Resource Information Integrated Database 17 Security Verification Function Allocation Unit 18 Security Verification Function Control Unit 20. Security Verification System 21 Verification result DB 22 Resource Information DB 23 Security Verification Department 101 Verification result information 102 Trust Score Information 103 First Resource Information 104 Secondary Resource Information 1000 Drive Device 1001 Recording media 1002 Auxiliary storage 1003 Memory device 1004 CPU 1005 Interface device 1006 Display device 1007 Input Device 1008 Output device

Claims

1. 1. An apparatus for controlling a security verification system to perform a security verification function assigned to a target entity, comprising: a trust score calculation unit that calculates a trust score indicating a level of security of each entity based on verification result information indicating a result of verifying the security of each entity; a security verification function allocation unit that allocates a security verification function to each entity based on the calculated trust score and resource information indicating resources used to realize the security verification function allocated to each entity; a security verification function control unit that controls the security verification system to execute an assigned security verification function; When the entity is a user, the security verification for the user is knowledge authentication, possession authentication, or biometric authentication, and when the entity is a device, the security verification for the device is integrity verification by binary analysis or firmware analysis, communication verification by network scanning, or software behavior verification by vulnerability scanning. Function allocation control device.

2. the security verification function allocation unit extracts entities that are candidates for changing the number of security verification functions allocated or the verification schedule based on the calculated trust score, and determines, for the extracted entities, whether or not to change the allocation of the security verification functions or the verification schedule based on the resource information, and if a change is to be made, further determines the specific content of the change. The function allocation control device according to claim 1 .

3. the security verification function allocation unit extracts entities that exhibit a high degree of trust as candidates for reducing the number of security verification functions allocated to them or for changing the verification schedule so as to reduce the frequency of verification execution; The function allocation control device according to claim 2 .

4. the resource information includes information indicating resources actually used by each entity for a security verification function; the security verification function allocation unit determines, based on the resource information, an amount of reduction in resources when reducing security verification functions or reducing a verification frequency; The function allocation control device according to claim 3 .

5. the security verification function allocation unit extracts entities exhibiting low reliability as candidates for increasing the number of security verification functions allocated to the entities; The function allocation control device according to any one of claims 2 to 4.

6. the resource information includes information indicating standard resources used by each security verification function; the security verification function allocation unit determines an increase in resources required when a security verification function is added based on the resource information; The function allocation control device according to claim 5 .

7. 1. A function allocation control method implemented by an apparatus for controlling a security verification system for performing security verification functions assigned to target entities, comprising: calculating a trust score indicating a level of security of each entity based on verification result information indicating a result of verifying the security of each entity; assigning a security verification function to each entity based on the calculated trust score and resource information indicative of resources used to realize the security verification function assigned to each entity; controlling the security verification system to perform assigned security verification functions; When the entity is a user, the security verification for the user is knowledge authentication, possession authentication, or biometric authentication, and when the entity is a device, the security verification for the device is integrity verification by binary analysis or firmware analysis, communication verification by network scanning, or software behavior verification by vulnerability scanning. Function allocation control method.

8. A program for causing a computer to function as each unit in the function assignment control device according to any one of claims 1 to 6.

Images