RISK ANALYSIS DEVICE, RISK ANALYSIS METHOD AND RISK ANALYSIS PROGRAM

摘要

In this risk analysis device (10), a threat extraction unit (22) extracts a threat which can occur on an analysis target system. A possibility specifying unit (23) specifies the probability of occurrence of the threat extracted by the threat extraction unit (22) according to security measures which are being executed for a constituent element that is the location on which the threat occurs. A risk value calculation unit (24) calculates a risk value which indicates the level of the risk of the threat to the analysis target system from the probability of occurrence specified by the possibility specifying unit (23).