Back to results
US 12,732,525 B2Granted
Security determination device, secure system design device, security determination method, and non-transitory storage medium
AssigneeNEC Corporation
InventorRyosuke Hotchi
Life of this patent
Estimating the term…
Abstract
A security determination device comprehensively generates an attack path, which is a chained route of a threat showing execution steps of an attack to be prevented from being established; determines the validity of the attack path; and determines whether a system configuration is secure or insecure, depending on the validity of the attack path.
Claims7
A security determination device comprising:
- at least one memory configured to store instructions;
- and
- at least one processor configured to execute the instructions to:
- comprehensively generate an attack path, which is a chained route of a threat showing execution steps of an attack to be prevented from being established;
- determine the validity of the attack path;
- and
- determine whether a system configuration is secure or insecure, depending on the validity of the attack path, wherein
- a validity of the threat and the validity of the attack path are expressed as continuous values, and
- a product of the validities of threats making up the attack path is regarded as the validity of the attack path.
6 more elements
A security determination method comprising:
- comprehensively generating an attack path, which is a chained route of a threat showing execution steps of an attack to be prevented from being established;
- determining the validity of the attack path;
- and
- determining whether a system configuration is secure or insecure, depending on the validity of the attack path, wherein
- a validity of the threat and the validity of the attack path are expressed as continuous values, and
- a product of the validities of threats making up the attack path is regarded as the validity of the attack path.
3 more elements
A non-transitory storage medium that stores a program that causes a computer to execute processes, the processes comprising:
- comprehensively generating an attack path, which is a chained route of a threat showing execution steps of an attack to be prevented from being established;
- determining the validity of the attack path;
- and
- determining whether a system configuration is secure or insecure, depending on the validity of the attack path, wherein
- a validity of the threat and the validity of the attack path are expressed as continuous values, and
- a product of the validities of threats making up the attack path is regarded as the validity of the attack path.
3 more elements
Dependencies are inferred from the claim text.