Terminal Security Risk Prediction via Dynamic Countermeasure Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security risk countermeasures for terminals on networks are costly and inefficient due to varying communication restrictions and settings, making it difficult to apply uniform solutions across multiple terminals.
Innovation Solution
An information processing device that predicts the number of terminals with security risks remaining by selecting applicable countermeasures, specifying operation information, acquiring and analyzing terminal-specific data, and presenting expected delay impacts on countermeasure application timelines.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If uniform countermeasures are applied to all terminals, then security risk reduction is improved, but communication restrictions and setting changes make it difficult to apply to all terminals
Solution Approach 1:
The patent segments the terminal group into multiple categories based on communication restrictions and settings. Each category receives tailored countermeasures rather than a uniform approach, allowing security measures to be adapted to specific terminal characteristics while maintaining overall security improvement across the entire terminal population.
2Adaptability or versatility
If custom countermeasures are formulated for each terminal, then adaptability to terminal restrictions is improved, but the cost of formulating countermeasures increases
Solution Approach 1:
The patent performs preliminary classification of terminals into categories based on their communication restrictions and settings before formulating countermeasures. This preliminary action allows the system to prepare standardized countermeasure templates for each category in advance, reducing the cost and complexity of customizing countermeasures for individual terminals while maintaining adaptability.
3Ease of operation
If countermeasures are delayed, then operational flexibility is improved, but the number of terminals with remaining security risks increases
Solution Approach 1:
The patent implements a dynamic countermeasure formulation system that adapts to operational requirements. The system can adjust the timing and priority of countermeasure implementation based on current operational status, allowing flexible scheduling while tracking and managing the number of terminals with remaining risks over time.
Data Source
AI summary
An operation information specification unit 82, with use of terminal-specific countermeasure information indicating an applicable countermeasure for each terminal against a security risk and definition information defining a correspondence relationship between a type of operation information of the terminal and a countermeasure against the security risk, specifies a type of operation information corresponding to the countermeasure applicable to the terminal. An operation information acquisition unit 83 acquires operation information of the type specified by the operation information specification unit 82, from among operation information of the terminal. A prediction unit 85, based on the operation information acquired by the operation information acquisition unit 83, predicts the number of remaining terminals at a future time, and predicting the number of remaining terminals at the future time in expectation of the number of countermeasure suspension days that is the number of delay days from a scheduled date of countermeasure application in the past to an actual date of countermeasure application in the past.