Security Measure Planning via Feedback-Updated Effectiveness Tables
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measure planning systems, such as those described in Patent Literature 1, often struggle to accurately implement planned security measures due to limitations in evaluating the effectiveness of security measures and adapting to system-specific requirements.
Innovation Solution
An information processing apparatus, method, and medium that acquire risk analysis results, including attack routes, and use a measure information table to plan and update security measures. The apparatus includes analysis result acquisition means, measure calculation means, and table update means to refine the planning of security measures based on their effectiveness and system-specific information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Extent of automation
If security measures are planned based on implementation effect value alone, then the system can automatically select security measures, but the planned measure may not match the desired security measure or system-specific requirements
Solution Approach 1:
The system implements feedback by updating the measure information table with actual implementation results and effectiveness data. After security measures are implemented, their actual effects are fed back to update the index values, allowing the system to learn from real-world outcomes and improve future planning accuracy.
Solution Approach 2:
The system performs preliminary actions by pre-planning security measures using the measure information table before actual implementation. The table is pre-populated with security measures and their expected effects, allowing the system to prepare appropriate countermeasures in advance against identified attacks.
2Measurement precision
If the measure information table is updated frequently with new data, then the planning accuracy improves, but the system complexity and data management burden increase
Solution Approach 1:
The measure information table serves multiple functions: it stores security measure definitions, tracks implementation status, records effectiveness data, and provides planning recommendations. This multi-functionality reduces the need for separate systems for each task, simplifying overall data management while maintaining high planning accuracy.
3Reliability
If comprehensive risk analysis is performed to identify all attack routes, then the system can plan more effective security measures, but the analysis time and computational resources increase
Solution Approach 1:
The system applies partial action by focusing risk analysis on the most critical attack routes and security measures with the highest impact. Rather than exhaustively analyzing every possible attack scenario, the system prioritizes measures that provide the greatest security improvement, reducing analysis time while maintaining effective security planning.
Data Source
AI summary
Analysis result acquisition means acquires a result of a risk analysis for a system to be analyzed. The result of the risk analysis includes attack routes. A measure information table includes an index indicating an effect of a measure introduced against an attack. Measure calculation means plans a measure against an attack used in an attack route by using the measure information table. Table update means updates the index indicating the effect included in the measure information table based on the planned measure and measure related information.