SECURITY RULE EVALUATION DEVICE AND SECURITY RULE EVALUATION SYSTEM

摘要

The purpose of the present invention is to provide a technology which assists with considering a change in a security rule in connection with a change in environment. Provided is a security rule evaluation device, comprising: a threat information management unit which identifies information of the seriousness of an information security threat and pertinence characteristic information which indicates a pertinence characteristic between the threat and an information processing system subject to protection; a security rule evaluation unit which, using at least the seriousness information and the pertinence characteristic information, computes for each security rule of the information processing system a priority for updating the security rule; and a priority rule presentation unit which presents the security rules which are subject to updating, in order by the priority according to the security rule evaluation unit.