Security design apparatus, security design method, and security design program

摘要

In a security design apparatus (10), a security database (22) defines a plurality of security processes to be executed for dealing with respective threats. When an input model (M1) that defines a program processing procedure is inputted, a countermeasure introduction unit (21) selects, from among the plurality of security processes defined by the security database (22), one or more security processes to be introduced, and outputs an output model (M3) that defines the program processing procedure to be performed after the selected security processes have been introduced. If two or more security processes, which have introduced portions overlapping each other and are to be executed for dealing with the same threat, are included in the security processes selected by the countermeasure introduction unit (21), a redundancy inspection unit (23) excludes at least one of the two or more security processes from the processes to be introduced.