The present invention includes: a threat analysis processing unit that analyzes a threat to a system on the basis of an analysis result of a vulnerability analysis unit, and outputs a threat analysis resu a countermeasure planning unit that plans, on the basis of the threat analysis result and vulnerability information, a countermeasure plan that reduces the effect of a vulnerability; a security test planning unit that plans a security test on the basis of the countermeasure plan; an evaluation calculation unit that performs an evaluation on the basis of the security test and outputs an evaluation resu and a result processing unit that processes the evaluation result and generates a security countermeasure.
展开▼
