Security management apparatus, security management system, security management method, and security management program

A security management system comprising:

• a security information providing apparatus for providing security information concerning security in a network;
• a machine-related information database containing predetermined information about network machines that are connected to said network or may be connected to said network;
• a preventive system for judging whether or not there is damage to at least one network machine connected to a network or damage to a predetermined network including said network machine or whether or not preventive measures need to be executed for said network machine or said predetermined network on a basis of security information obtained from said security information providing apparatus and machine-related information obtained from said machine-related information database and further machine information obtained from said network machine;
• and
• a recovery system for executing recovery processing when there is predetermined damage, or taking preventive measures on a basis of judgment made by said preventive system.

A security management method comprising the steps of:

• obtaining security information concerning security in a network;
• obtaining machine information from at least one network machine connected to a network;
• making a security diagnosis on a basis of said security information and said machine information to judge a type of security-related processing to be executed for said network machine or a predetermined network including said network machine and also judge whether or not the security-related processing needs to be executed;
• and
• executing predetermined security measure processing for said network machine or the predetermined network including said network machine on a basis of a result of diagnosis made by said security diagnostic step.

A security management method comprising the steps of:

• obtaining machine information from at least one network machine connected to a network;
• obtaining machine-related information from a machine-related information storage unit containing predetermined information about network machines that are connected to said network or may be connected to said network;
• making a security diagnosis on a basis of said machine information and said machine-related information to judge a type of security-related processing to be executed for said network machine or a predetermined network including said network machine and also judge whether or not the security-related processing needs to be executed;
• and
• executing predetermined security measure processing for said network machine or the predetermined network including said network machine on a basis of a result of diagnosis made by said security diagnostic step.

A security management program for instructing a computer to execute security management, said program comprising the steps of:

• obtaining security information concerning security in a network;
• obtaining machine information from at least one network machine connected to a network;
• making a security diagnosis on a basis of said security information and said machine information to judge a type of security-related processing to be executed for said network machine or a predetermined network including said network machine and also judge whether or not the security-related processing needs to be executed;
• and
• executing predetermined security measure processing for said network machine or the predetermined network including said network machine on a basis of a result of diagnosis made by said security diagnostic step.

A security management program for instructing a computer to execute security management, said program comprising the steps of:

• obtaining machine information from at least one network machine connected to a network;
• obtaining machine-related information from a machine-related information storage unit containing predetermined information about network machines that are connected to said network or may be connected to said network;
• making a security diagnosis on a basis of said machine information and said machine-related information to judge a type of security-related processing to be executed for said network machine or a predetermined network including said network machine and also judge whether or not the security-related processing needs to be executed;
• and
• executing predetermined security measure processing for said network machine or the predetermined network including said network machine on a basis of a result of diagnosis made by said security diagnostic step.