VULNERABILITY MANAGEMENT DEVICE, VULNERABILITY MANAGEMENT METHOD AND PROGRAM

摘要

To provide a vulnerability management device, method and program for performing vulnerability management which takes patch application into account.SOLUTION: A vulnerability management device 10 for managing the vulnerability of software mounted on a device 20 includes: a vulnerability determination unit for determining whether vulnerability exists in the software mounted on the device on the basis of device information collected from the device; and a vulnerability management information generation unit for generating determination for determining whether a patch for eliminating vulnerability is applied to the software in the case that the vulnerability determination unit determines that the vulnerability exists in the software, and management information for managing the vulnerability existing in the software in the case that a patch application determination unit determines that the patch is not applied to the software.SELECTED DRAWING: Figure 2