INFORMATION PROCESSING DEVICE, INFORMATION PROCESSING SYSTEM, SECURITY ASSESSMENT METHOD, AND SECURITY ASSESSMENT PROGRAM

摘要

In order to achieve a security assessment system which can assess attack paths including air gap paths, this information processing device is provided with: a system configuration detection means which detects at least two hosts included in a system and communication links between said at least two hosts; an air gap path detection means which, from among said at least two hosts, detects a group of hosts between which no communication link exists but between which data can move; a calculation means which calculates a score relating to the possibility of the group of hosts detected by the air gap path detection means being used in an attack, and a security assessment means which performs a security assessment utilizing the communication links between the aforementioned hosts, information about the aforementioned group of hosts, and the aforementioned score.