RISK VALUE CALCULATION DEVICE, RISK VALUE CALCULATION METHOD, AND RISK VALUE CALCULATION PROGRAM

摘要

A risk value calculation device (10) receives inputs of a log of accesses to an information system to be analyzed and web content constituting the information system. The risk value calculation device (10) then totals the number of accesses to the information system from the access log. The risk value calculation device (10) also totals, from the details of the web content, the number of files, the number of password input forms, the number of actions, and the number of parameters included in the web content. The risk value calculation device (10) then calculates the degree of asset impact of the information system on the basis of the total number of accesses to the information system and on the basis of the number of files, the number of password input forms, the number of actions, and the number of parameters included in the web content. The risk value calculation device (10) then calculates a risk value for the information system using the degree of asset impact.