Security Measure Mapping for Rule-Compliant Attack Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to accurately identify and present appropriate security measures in compliance with various security laws and regulations, lacking a mechanism to support the adequacy of automatically identified measures.
Innovation Solution
A security measures presenting system that includes a computer system with an arithmetic device and storage device, capable of associating rule information with measure information, receiving user input, and extracting and transmitting appropriate security measures based on user input operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If automatic identification of security measures is implemented, then productivity is improved, but measurement precision deteriorates
Solution Approach 1:
The system incorporates a feedback mechanism where users can provide feedback on the automatically identified security measures. The arithmetic device processes this feedback information and uses it to refine and improve the accuracy of future automatic identifications, thereby resolving the contradiction between productivity and precision.
Solution Approach 2:
The system performs preliminary actions by pre-processing rule information and measure information before automatic identification. The arithmetic device associates required items from rules with corresponding measures in advance, creating a structured knowledge base that improves the precision of automatic security measure identification while maintaining high productivity.
2Reliability
If comprehensive rule information is stored and processed, then reliability is improved, but device complexity increases
Solution Approach 1:
The system segments the complex rule information into discrete required items and associates them with specific measure information. This segmentation allows the arithmetic device to process and manage comprehensive rule data more effectively, improving reliability while controlling system complexity through organized data structures.
Solution Approach 2:
The arithmetic device acts as an intermediary between the stored rule information and the user interface. It processes and translates comprehensive rule requirements into appropriate security measures, managing the complexity of rule processing while ensuring reliable and adequate security recommendations.
3Measurement precision
If manual verification of security measures is performed, then measurement precision is improved, but productivity deteriorates
Solution Approach 1:
The system enables self-service by allowing users to input their specific requirements and receiving automatically generated security measure recommendations. The arithmetic device processes these inputs and provides tailored security measures without requiring extensive manual verification, thereby maintaining high productivity while ensuring precision through user-specific customization.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed is a security measures presenting system for presenting information indicating security measures by displaying the information on a display device. The security measures presenting system is configured of a computer which includes at least an arithmetic device and a storage device, and is mutually connected to an input device and the display device outside the computer in a manner capable of mutual data communication. The storage device stores rule information with respect to a rule concerning security, the rule information including at least a target system indicating a targeted system to which a security measure is to be applied, and required items for a component included in the target system; and measure information indicating a kill chain phase which represents an execution phase of an attack, an attack technique which represents an attack method to be used in the kill chain phase, and measures for defending and/or alleviating the attack technique. The arithmetic device associates a required item included in the rule information with the measure information which satisfies the required item, receives content of an input operation by a user to the input device from the input device, extracts a measure according to the content of the received input operation by the user from the measure information associated with the required item, and transmits information including the extracted measure, as information indicating the security measure, to the display device.