Attack scenario generation apparatus, attack scenario generation method, and computer readable medium

An attack scenario generation method used for an attack scenario generation apparatus that generates an attack scenario indicating a process up to occurrence of a security threat in a subject system, wherein

• the attack scenario generation apparatus includes an analysis memorandum database to store a plurality of attack scenarios which is a plurality of attack scenarios calculated in advance, and each of which consists of attack activities listed in chronological order and each of which is corresponded to a threat, and
• the attack scenario generation method comprising:
• specifying a configurational element of a system threat which is a threat that occurs in the subject system and which is a threat for which a new attack scenario is to be generated, and a subject element that includes a system element string which is an element string indicating an order of system configurational elements in the subject system up to the system threat, and obtaining one attack scenario among the plurality of attack scenarios stored in the analysis memorandum database, as an analysis scenario, obtaining the system element string and a scenario element string of a calculated element that includes the scenario element string which is an element string corresponding to attack activities that consist of the analysis scenario and configurational elements of a scenario threat which is a threat corresponded to the analysis scenario, and when all configurational elements are equal, and the system element string and the scenario element string are different, between the system threat and the scenario threat, determining whether or not elements of each of the different element strings are substantially equal, and when it is determined that all elements of the different element strings are substantially equal, determining that the analysis scenario can be diverted, and
• when it is determined that the analysis scenario can be diverted, generating the new attack scenario corresponding to the system threat, by replacing the element name of the scenario element string, with the element name of the system element string.

A non-transitory computer readable medium storing an attack scenario generation program used for an attack scenario generation apparatus that generates an attack scenario indicating a process up to occurrence of a security threat in a subject system, wherein

• the attack scenario generation apparatus includes an analysis memorandum database to store a plurality of attack scenarios which is a plurality of attack scenarios calculated in advance, and each of which consists of attack activities listed in chronological order and each of which is corresponded to a threat, and
• the attack scenario generation program causing the attack scenario generation apparatus which is a computer to execute:
• a diversion determination process to specify a configurational element of a system threat which is a threat that occurs in the subject system and which is a threat for which a new attack scenario is to be generated, and a subject element that includes a system element string which is an element string indicating an order of system configurational elements in the subject system up to the system threat, and to obtain one attack scenario among the plurality of attack scenarios stored in the analysis memorandum database, as an analysis scenario, to obtain the system element string and a scenario element string of a calculated element that includes the scenario element string which is an element string corresponding to attack activities that consist of the analysis scenario and configurational elements of a scenario threat which is a threat corresponded to the analysis scenario, and when all configurational elements are equal, and the system element string and the scenario element string are different, between the system threat and the scenario threat, to determine whether or not elements of each of the different element strings are substantially equal, and when it is determined that all elements of the different element strings are substantially equal, to determine that the analysis scenario can be diverted, and
• when it is determined that the analysis scenario can be diverted, a scenario diversion process to generate the new attack scenario corresponding to the system threat, by replacing the element name of the scenario element string, with the element name of the system element string.