Threat analysis method and threat analysis system

A threat analysis system comprising:

• an acquirer that acquires system configuration information, function allocation information, asset information, and asset input/output information, the system configuration information indicating hardware components of a system for which threat analysis is performed, the function allocation information indicating functions allocated to the hardware components, the asset information indicating an asset used in each of the functions, the asset input/output information indicating hardware components of input/output sources and input/output destinations of the asset among the hardware components of the system;
• an analyzer that derives a physical data flow and a logical data flow in accordance with the system configuration information, the function allocation information, the asset information, and the asset input/output information and analyzes a likelihood of an attack on the asset and an impact of the attack on the asset for each of the hardware components and each of the functions in accordance with the physical data flow and the logical data flow, the physical data flow indicating a flow of the asset relevant to each of the hardware components, the logical data flow indicating a flow of the asset relevant to each of the functions;
• and
• an output unit that outputs a result of the analyzing.