PROBLEM TO BE SOLVED: To solve the problem that improvement of a security policy cannot be easily executed.;SOLUTION: An information processor includes policy acquisition means for acquiring a policy including a plurality of determination rules from a system to be monitored on the basis of the type of an event being an action using an information processing system to be monitored, and determination rule detection means for detecting a determination rule corresponding to the entity of the event on the basis of the policy and an interpretation rule for regulating an interpretation method of the policy, and outputting the determination rule.;COPYRIGHT: (C)2015,JPO&INPIT
展开▼