Information Processing System and Information Processing Method

Abstract

【Problem】To provide an information processing system and an information processing method for more accurately identifying the risk of vulnerabilities possessed by an organization that manages devices. 【Solution】In the information processing system, the information processing apparatus includes a storage unit that stores device information indicating devices managed by the organization, a reference score acquisition unit that acquires a reference score regarding the risk of vulnerabilities possessed by each device for each device managed by the organization, an attack information acquisition unit that acquires attack information regarding attacks based on each vulnerability for each vulnerability, a corrected score calculation unit that calculates a corrected score obtained by correcting the reference score of the device having each vulnerability based on the attack information for each vulnerability, and an output control unit that outputs information indicating the risk of vulnerabilities possessed by the organization based on the corrected score. 【Selected Drawing】Figure 1

Images