Security specification creation support device and method of security specification creation support

摘要

A security specification creation support device has a security specification example database in which existing security specifications are registered as examples. A definition information acceptance unit accepts the definition information of respective components constituting the information network system from the user. A security specification selection unit looks up reusable examples from the security specification example database using definition information of the component in question accepted by the definition information acceptance unit in respect of the respective components. A security specification draft creation unit creates a composite security specification draft in respect of an information network system by entering the details of respective examples found by the security specification selection unit in a prescribed form of security specification and accepts revisions of the draft in question from the user.