PROBLEM TO BE SOLVED: To deal with an attach on an early stage by shortening an operation time from detection of the attack to management of the attack.SOLUTION: A security management plan design device configured to design a security management plan with respect to an attack that occurs in a network comprises: a management template storage part which stores management templates for creating security management plans with respect to attacks; a reception part which receives detection information of an attack from an attack detection device configured to detect attacks; a management plan creation part which extracts a management template corresponding to the detection information from the management template storage part, creates a security management plan based on the extracted management template and the detection information and refers to apparatus information and topology information in the network to extract a security management plan that can be implemented, from among the created security management plans; and a management plan output part which outputs the extracted security management plan.SELECTED DRAWING: Figure 2
展开▼