Security Countermeasure Planning with Future Risk Estimation

Solution Overview

Problem

Existing security countermeasure planning systems fail to account for the time-dependent changes in security risks due to the introduction of countermeasures, changes in system configuration, and emergence of new threats, leading to ineffective countermeasures.

Innovation Solution

A security countermeasure planning system that calculates risk values, estimates future risk changes, and determines countermeasure plans based on these future risk estimations, incorporating factors like vulnerability levels, threat levels, and business damage levels.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If countermeasures are formulated based only on current risk analysis, then the planning process is simple and quick, but the countermeasures become ineffective over time due to changing risk conditions

Engineering Contradiction:

Improveeffectiveness of countermeasureVSAvoidcomplexity of risk assessment system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The system performs preliminary risk change estimation by predicting future risk values before countermeasures are implemented. The risk change estimation part calculates how risk values will evolve over time based on various factors, allowing the system to select countermeasures that will remain effective in the future, not just at the current moment.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system transitions from static risk assessment to dynamic risk assessment by continuously estimating how risk values change over time. The risk change estimation part models temporal variations in risk based on factors like countermeasure implementation timing, countermeasure lifespan, and emerging threats, making the countermeasure selection process adaptive to changing conditions.

Inventive Principle:

Principle #15Dynamics

2Reliability

If the system accounts for time-dependent changes in risk, then countermeasure effectiveness improves, but the calculation and estimation processes become more complex

Engineering Contradiction:

Improveaccuracy of countermeasure selectionVSAvoidspeed of countermeasure planning

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The system replaces manual, iterative risk assessment processes with automated computational models. The risk change estimation part uses algorithms to automatically calculate future risk values based on input parameters, eliminating the need for repeated manual analysis and significantly speeding up the countermeasure planning process while maintaining accuracy.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The system changes the approach from assessing single-point-in-time risk values to modeling risk as dynamic parameters that evolve over time. By introducing time as a variable and estimating risk trajectories, the system captures temporal changes in threat landscapes, countermeasure effectiveness, and system vulnerability without requiring continuous re-analysis.

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If countermeasures are selected without considering future risk changes, then the decision-making process is fast, but the countermeasures may not address emerging threats

Engineering Contradiction:

Improveresponsiveness to changing threatsVSAvoidtime for risk analysis

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The system performs preliminary risk change estimation by predicting future risk values before countermeasures are implemented. The risk change estimation part calculates how risk values will evolve over time based on various factors, allowing the system to select countermeasures that will remain effective in the future, not just at the current moment.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system transitions from static risk assessment to dynamic risk assessment by continuously estimating how risk values change over time. The risk change estimation part models temporal variations in risk based on factors like countermeasure implementation timing, countermeasure lifespan, and emerging threats, making the countermeasure selection process adaptive to changing conditions.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS12632566B2Security countermeasure planning system, security countermeasure planning method, and program

Publication Date: 2026.05.19 NEC CORP

AI summary

A security countermeasure planning system includes a functional part which calculates one or more risk values of one or more resources included in a system to be diagnosed, a risk change estimation part which estimates one or more future risk estimation values of the one or more risk values of the one or more resources which the functional part calculates, and a countermeasure determination part which selects a countermeasure plan based on the one or more future risk estimation values estimated by the risk change estimation part.