Back to results
US 11,899,799 B2Granted
Security risk reduction method and security risk reduction system
AssigneeHitachi, Ltd.
InventorsJens Doenhoff, Nodoka Mimura, Yoshiaki Isobe
Life of this patent
Estimating the term…
Abstract
A system performs an application update process based on security management information that is information including meta information for each of a plurality of security services. The application update process is a process for adding one or more security services including a security service that reduces the security risk of an application having a plurality of distributed microservices having a graph structure relationship to the application.
Claims18
A security risk reduction system, comprising:
- a security analysis unit that estimates a security risk of an application by analyzing an application package based on a service setting database;
- an application flow creation unit providing a GUI (Graphical User Interface) that is configured to be displayed on an information processing terminal used by an operator;
- wherein the operator creates a plurality of nodes of an application flow on the GUI,
- wherein the application has a plurality of distributed microservices having a graph structure corresponding to the plurality of nodes,
- wherein the security analysis unit determines a plurality of security services including a security service that reduces the estimated security risk based on a security management database, and
- wherein the security analysis unit acquires a meta information detail of each of the security services based on the security management database, and outputs an analysis result table including the meta information detail acquired for each of the security services;
- and
- an application update unit that reduces the security risk of the application by performing an application update process for adding the security services to the application based on the security management database and the analysis result table.
5 more elements
A security risk reduction method, comprising:
- estimating, by a security analysis unit, a security risk of an application by analyzing an application package based on a service setting database;
- providing, by an application flow creation unit, a GUI (Graphical User Interface) that is configured to be displayed on an information processing terminal used by an operator;
- wherein the operator creates a plurality of nodes of an application flow on the GUI,
- wherein the application has a plurality of distributed microservices having a graph structure corresponding to the plurality of nodes,
- wherein the security analysis unit determines a plurality of security services including a security service that reduces the estimated security risk based on a security management database, and
- wherein the security analysis unit acquires a meta information detail of each of the security services based on the security management database, and outputs an analysis result table including the meta information detail acquired for each of the security services;
- and
- reducing, by an application update unit, the security risk of the application by performing an application update process for adding the security services to the application based on the security management database and the analysis result table.
5 more elements
Dependencies are inferred from the claim text.