Test scenario generator, test scenario generator, test scenario generator

摘要

PROBLEM TO BE SOLVED: To create a test case without omission corresponding to an attack combining vulnerabilities in configuration and function. SOLUTION: A test scenario generation device 1 for generating a test scenario related to an attack on an in-vehicle device is composed of hierarchical information 500 including information indicating an asset that can be an attack target among a plurality of components and the components included in the in-vehicle device. A storage unit 40 that stores element connection 510 that indicates the connection between elements, vulnerability information 600 that indicates vulnerabilities for each component, and attack type information 900 that indicates the attack type for each vulnerability, hierarchical information 500, and vulnerabilities. Using the information 600 and the attack type information 900, an intrusion route to the component that is an asset is generated based on the allocation unit 21 that creates the attack type information that specifies the attack type for each component and the element connection 510, and the attack type. It has a processing unit 20 including a scenario creation unit 23 that generates a plurality of test scenarios in which combinations of components and attack types are arranged in the order of intrusion routes using the information 900. [Selection diagram] Fig. 3