Security measures planning system and security measures planning method

The security countermeasure planning system addresses the challenge of ensuring system availability in OT environments by utilizing a database and analysis units to select and formulate measures, enhancing operational continuity and reducing the need for specialized knowledge.

JP7869127B2Active Publication Date: 2026-06-02HITACHI LTD

Patent Information

Authority / Receiving Office
JP · JP
Patent Type
Patents
Current Assignee / Owner
HITACHI LTD
Filing Date
2022-12-16
Publication Date
2026-06-02

AI Technical Summary

Technical Problem

Existing security countermeasure planning systems struggle to account for system availability and operational continuity, particularly in OT systems, and often require specialized knowledge, making it difficult for organizations to implement effective measures without compromising system operation.

Method used

A security countermeasure planning system that includes an input unit, reference database, database search unit, similarity rate determination unit, and countermeasure proposal analysis unit to select and formulate security measures considering system availability, using a database of past measures and their impacts.

Benefits of technology

Enables the selection of security measures that prioritize system availability, reducing the need for specialized knowledge and facilitating efficient planning even for users with limited expertise.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure 0007869127000001
    Figure 0007869127000001
  • Figure 0007869127000002
    Figure 0007869127000002
  • Figure 0007869127000003
    Figure 0007869127000003
Patent Text Reader

Abstract

To provide a system that supports security measures including workaround considering availability for a system under operation.SOLUTION: There is provided a security measures planning system for an information processing system including hardware and software, and the security measures planning system comprises: an input unit that receives information on a target information processing system that executes security measures; a reference DB that stores reference information such as vulnerability information; a DB searching unit that searches for the vulnerability information in the reference DB on the basis of the information on the target information processing system received by the input unit; a similarity ratio determination unit that determines a similarity ratio of the vulnerability information searched for by the DB searching unit to the target information processing system; a countermeasures analysis planning unit that selects security measures corresponding to the vulnerability information searched for by the DB searching unit, and determines reliability to which the selected similarity ratio is added; and an output unit that outputs the vulnerability information and the security measures corresponding to the vulnerability information on the basis of the reliability.SELECTED DRAWING: Figure 1
Need to check novelty before this filing date? Find Prior Art