Security risk assessment device, security risk assessment method and security risk assessment program

摘要

The person network detection unit (110) detects a person network showing a connection between the target person and a group of related persons based on the public information of the target person. The disclosure risk calculation unit (120) calculates the disclosure risk of the target person based on the public information of the target person, and the disclosure risk corresponding to the related person group based on the public information group corresponding to the related person group. Calculate the group. The connection risk determination unit (130) determines the representative value of the disclosure risk group as the connection risk of the target person based on the disclosure risk group corresponding to the related party group. The security risk calculation unit (140) calculates the security risk of the target person against a cyber attack by using the disclosure risk of the target person and the connection risk of the target person.