JP2014174678A - Information processing apparatus and control method thereof - Google Patents

Abstract

PROBLEM TO BE SOLVED: To efficiently control a device corresponding to severity of fragility in consideration of an actual operation environment.SOLUTION: Evaluation information is extracted from fragility information and compared whether the evaluation information matches actual operation environment information. When it matches, an evaluation value is extracted from the evaluation information, and when it does not match, a revaluation value is determined by revaluation. Then, severity is calculated based on the evaluation value or the revaluation value. An information processing apparatus is controlled corresponding to the calculated severity.

Description

  The present invention relates to a technique for controlling an apparatus using vulnerability information.

  In recent years, countermeasures against vulnerability to software in information processing apparatuses have become important from the viewpoint of information security. Even if vulnerabilities are not discovered at the time of development, they may be discovered over time, and it is necessary to keep track of information. Such vulnerabilities are generally disclosed in vulnerability DBs (Databases) such as NVD (National Vulnerability Database) and JVN (Japan Vulnerability Notes). The user of the information processing apparatus obtains the latest information on the vulnerability using such a vulnerability DB. On the other hand, vendors need to develop modified software and update software when vulnerabilities are disclosed. However, since many users do not have expert knowledge, it has been impossible to appropriately determine the degree of influence on their own information processing apparatus. Therefore, users who use information processing have had to choose to implement all targeted software updates when vulnerabilities and modified software are released, or not to perform software updates at their own discretion. .

  For this reason, a mechanism has been proposed for the user of the information processing apparatus to automatically and efficiently implement software updates.

  Patent Document 1 proposes a method for verifying the relationship between the state of operating software and published vulnerability information, determining the operating software, and updating only the operating software. ing.

JP 2010-67216 A

  However, Patent Document 1 considers only the operating software, and does not consider the actual operation environment including physical access and assets handled. There was a problem of implementation.

  The present invention has been made in view of the above-described problems, and an object of the present invention is to provide a technique for efficiently controlling an apparatus according to the severity of vulnerability in consideration of an actual operation environment.

  In order to solve the above problems, an information processing apparatus according to the present invention includes an actual operating environment information acquiring unit that acquires actual operating environment information, a vulnerability information acquiring unit that acquires vulnerability information, the actual operating environment information, and the Seriousness calculation means for calculating a severity based on vulnerability information, and control means for controlling the information processing apparatus according to the severity calculated by the severity calculation means .

  As described above, according to the present invention, the information processing apparatus can be efficiently controlled according to the severity of the vulnerability in consideration of the actual operation environment.

1 is a diagram illustrating a configuration of an information processing device according to a first embodiment. It is a figure explaining the actual operation environment information and evaluation information of the information processing apparatus in Embodiment 1. It is a figure explaining the evaluation result comparison information of the information processing apparatus in Embodiment 1. It is a figure explaining the reevaluation method of the information processing apparatus in Embodiment 1. FIG. 6 is a diagram illustrating a method for determining a control method according to the severity of the information processing apparatus according to Embodiment 1. FIG. FIG. 3 is a diagram illustrating a flow of a method for controlling the information processing apparatus according to the first embodiment. 6 is a diagram illustrating a functional configuration of an information processing apparatus according to Embodiment 2. FIG. FIG. 10 is a diagram for explaining threshold information of the information processing apparatus according to the second embodiment. FIG. 10 is a diagram illustrating a flow of a method for controlling an information processing apparatus according to a second embodiment.

(First embodiment)
<Configuration of information processing apparatus>
First, an example of the overall configuration of the information processing apparatus according to the present embodiment is shown in FIG. An information processing apparatus 100 according to this embodiment includes a CPU 101, a ROM 102, a RAM 103, an I / F 104, an HDD 105, an operation unit 106, and a processing unit 107, which are connected by a bus 108. The information processing apparatus 100 is a commonly used MFP (Multi Function Printer), for example. When an instruction is given using the operation unit 106, the processing unit 107 executes various processes such as printing, scanning, and copying. . In the figure, a CPU 101 is a CPU capable of controlling the operation of each unit in the information processing apparatus or executing a program loaded in the RAM 103. The ROM 102 is a read-only memory, and stores in advance shared information necessary for generating an operation program and verification data. A RAM 103 is a RAM that temporarily stores a program and data to be processed for processing by the CPU 101, and a program for the OS and the CPU 101 to perform various processes described later is loaded therein. Become. The I / F 104 is an interface with an external device such as a network or a USB device, and is used when data communication through the network or data transmission / reception with the external device is performed. The HDD 105 is a hard disk used for storing an OS or a program transferred to a RAM or the like, or for storing or reading data input while the apparatus is operating. The operation unit 106 is a user interface for accepting user's operation instructions and various instructions including various parameter settings. The processing unit 107 is a printer engine for printing image data on paper or a scanner engine that captures image data from paper data. When an instruction is given from the user via the operation unit 106, printing, reading, or the like is performed. Various processes are performed. In the present embodiment, the information processing apparatus is described as an MFP. However, for example, an information processing apparatus such as a commonly used PC or smart device may be used.

<Functional configuration of information processing apparatus>
Hereinafter, the functional configuration of the information processing apparatus 100 applied to the present embodiment will be described with reference to FIG. As shown in FIG. 1B, the information processing apparatus 100 in this embodiment includes an actual operating environment information acquisition unit 201, a vulnerability information acquisition unit 202, an evaluation information extraction unit 203, a reevaluation unit 204, and a severity calculation unit. 205 and a control unit 206.

  First, the actual operation environment information acquisition unit 201 will be described. The actual operating environment information acquisition unit 201 acquires the actual operating environment information in the information processing apparatus 100 and outputs the acquired actual operating environment information to the reevaluation unit 204. Here, the actual operation environment information is information relating to the actual operation of the information processing apparatus 100 as shown in FIG. As operation conditions, installation location, connection environment, identification and authentication, confidentiality request, integrity request, and availability request are preset, and specific contents can be selected for each operation condition.

  Next, each operation condition will be explained. The installation location is an operating condition that determines the environment in which the information processing apparatus 100 is installed. For example, when it is installed in a public facility such as a library or a convenience store, and an unspecified number of persons can use it, the administrator of the information processing apparatus 100 sets the installation location as open. In addition, if the access is restricted by an IC card access control or the placement of security guards in a place such as a general corporate office, access is restricted. Set. Furthermore, when the access is set in a place where only a specific limited number of persons can access, the access is strictly set as a restriction. Here, when none of the preset setting locations is applicable, for example, the setting location is not fixed, it is set as other. Alternatively, the administrator of the information processing apparatus 100 may add a new installation location. In this embodiment, the administrator of the information processing apparatus 100 sets the installation location. However, the installation location can be automatically set in cooperation with, for example, GPS information or an entrance / exit management system of each company. It may be.

  The connection environment is an operating condition for determining the connection environment to the information processing apparatus 100. For example, when the information processing apparatus 100 can be accessed from the outside such as being connected to the Internet, the connection environment is set as Internet access. When access is possible using short-range communication such as Bluetooth (registered trademark), infrared communication, or in-house LAN instead of Internet connection, the connection environment is set as intranet access. If there is only a method of directly accessing the information processing apparatus 100 such as a USB connection or an operation panel, the connection environment is set as local access. Here, when none of the preset connection environments such as establishment of a new connection technology is applicable, it is set as other. Alternatively, the administrator of the information processing apparatus 100 may add a new connection environment. In this embodiment, the administrator of the information processing apparatus 100 sets the connection environment. However, for example, the installation location can be automatically set in cooperation with the management function of the information processing apparatus 100. Good.

  The identification authentication is an operation condition for determining whether or not the identification authentication function of the information processing apparatus 100 is present. For example, when two or more elements such as an ATM card and a PIN are required, such as ATM, or when it is necessary to enter a password that is different from the one used to log in to perform specific processing after logging in as an administrator Configure authentication as requiring multiple authentication functions. When only the identification and authentication based on the ID and password is enabled, the identification authentication is set as requiring the single authentication function. When there is an environment in which anyone can use without using the identification / authentication function like the information processing apparatus 100 installed in the convenience store, the authentication function is set as invalid. Here, since biometric authentication such as fingerprint authentication and iris authentication is used, if you want to distinguish from general ID password authentication, such as when you do not apply any of the preset identification authentication, other Set as. Alternatively, the administrator of the information processing apparatus 100 may add new identification and authentication. In this embodiment, the administrator of the information processing apparatus 100 sets identification authentication. However, for example, the identification authentication can be automatically set in cooperation with the management function of the information processing apparatus 100. Good.

  The confidentiality request is an operating condition for determining whether or not confidential information is included in the information asset handled by the information processing apparatus 100. For example, when dealing with documents containing personal information in the company or personal information, the confidentiality request is set as confidential. If only information such as pamphlets and leaflets that have already been published is handled, the confidentiality request is set as not confidential. Here, when it is unknown whether the information asset handled in the information processing apparatus 100 is confidential information, the confidentiality request is set as unknown. In this embodiment, the administrator of the information processing apparatus 100 sets a confidentiality request. For example, the confidentiality of a document is automatically determined by determining the confidentiality of a document by OCR (Optical Character Reader) at the time of scanning. A request may be set.

  The integrity request is an operating condition for determining whether integrity is required for the information asset handled by the information processing apparatus 100. For example, when dealing with documents such as invoices and receipts, it is important that the amount is not tampered with, so the integrity request is set as integrity. If the administrator of the information processing apparatus 100 does not request integrity, the integrity request is set as not requiring integrity. Here, when it is unclear whether or not the information asset being handled in the information processing apparatus 100 is requested to be complete, the integrity request is set as unknown. Similar to the confidentiality request, the integrity request may be automatically set by determining the format or wording of a document that clearly requires completeness, such as a contract, by OCR during scanning.

  The availability request is an operation condition for determining whether availability of the information processing apparatus 100 is requested. For example, if the server is used in an environment where it is frequently used in a server or business, and if it is used in an environment that would hinder the business, availability is important, the availability request is set as important. If the usage frequency is extremely low or if you want to update the security at the expense of availability, set the availability request as not requiring availability. Here, when it is unknown whether availability of the information processing apparatus 100 is requested, the availability request is set as unknown. In the present embodiment, the administrator of the information processing apparatus 100 sets the availability request. However, the usage frequency and the usage time zone are analyzed by using an audit log and the availability request is automatically set. You may be able to do it. Furthermore, in the present embodiment, the operation conditions are described as the above-described conditions. However, the present invention is not limited to these operation conditions. You may make it set.

  Next, the vulnerability information acquisition unit 202 will be described. For example, the vulnerability information acquisition unit 202 acquires vulnerability information that is publicly disclosed in a vulnerability DB such as NVD or JVN, and outputs the acquired vulnerability information to the evaluation information extraction unit 203. Vulnerability information in this embodiment is described as information including a summary of vulnerability, affected system, detailed information on vulnerability, expected impact, countermeasure method, vulnerability analysis result, etc. Any information related to vulnerability, such as information and development vendor information, may be used.

  The evaluation information extraction unit 203 extracts the evaluation information included in the vulnerability information input from the vulnerability information acquisition unit 202 and outputs the extracted evaluation information to the reevaluation unit 204. The evaluation information is information that summarizes evaluation results, evaluation values, and severity levels, which will be described later, and is a basic evaluation standard in a common vulnerability evaluation system such as CVSS (Common Vulnerability Scoring System). Evaluation information is generally included in vulnerability information as a result of vulnerability analysis.

  Here, the evaluation result, evaluation value, and severity included in the vulnerability information will be described. The severity is a basic value calculated from an evaluation value by CVSS, for example. In addition, the evaluation result is a content that is evaluated by a vendor or an organization that discloses the vulnerability in order to express the inherent severity of the vulnerability, and the evaluation value is the value. In the present embodiment, the evaluation value and evaluation value use the CVSS evaluation value as they are, and for example, the basic value calculated from the evaluation result and evaluation value related to the evaluation information as shown in FIG. . Note that the detailed description of CVSS is well known to those skilled in the art, and thus detailed description thereof is omitted. The severity is calculated from the evaluation value shown in FIG. 2B, and is expressed by a numerical value from 0.0 to 10.0. In the present embodiment, the severity is described using CVSS as an example, but information that can express the degree of influence of vulnerability may be used as the severity regardless of this.

  Next, the reevaluation unit 204 will be described. The reevaluation unit 204 compares the actual operation environment information acquired by the actual operation environment information acquisition unit 201 with the evaluation information acquired by the evaluation information extraction unit 203, and determines the re-evaluation value or the evaluation value as the severity calculation unit 205. Output to. The reevaluation unit 204 compares the actual operation environment information acquired from the actual operation environment information acquisition unit 201 with the evaluation information acquired from the evaluation information extraction unit 203. As a result of the comparison, if the actual operating environment information matches the evaluation information acquired from the evaluation information extraction unit 203, the evaluation value included in the evaluation information is output to the severity calculation unit 205. If they do not match, the re-evaluation value is determined by re-evaluation. At this time, the re-evaluation unit 204 determines a re-evaluation value as a new evaluation value according to the evaluation result included in the evaluation information and the content of the actual operation condition.

  For example, as shown in FIG. 3, the correspondence between the actual operation condition and the evaluation result is determined by using the evaluation result comparison information 401 to set the processing content for each actual operation condition and determining the re-evaluation value. In this embodiment, the evaluation result comparison information 401 will be described as an example. For example, the relationship between the actual operation condition and the evaluation result is held in a table format, and the corresponding evaluation value is re-evaluated according to the operation condition and the evaluation result. May be determined as If a new item is added by the administrator of the information processing apparatus 100 in the actual operating environment information acquisition unit 201, the newly added item and the evaluation result corresponding to the evaluation result acquired from the evaluation information extraction unit 203 are displayed. It is necessary to set an evaluation value as evaluation result comparison information.

  Hereinafter, the re-evaluation unit 204 will be described with reference to the specific examples of FIG. 4 (A) and FIG. 4 (B). FIG. 4A shows the actual operation environment information 501 acquired by the actual operation environment information acquisition unit 201. FIG. 4B shows the evaluation information 502 acquired from the evaluation information extraction unit 203. The re-evaluation unit 204 determines a re-evaluation value using the above-described evaluation result comparison information 401 for the actual operating environment information 501 and the evaluation information 502. The actual operation environment information 501 has an open installation location. Referring to the evaluation result comparison information 401 described above, information that the evaluation value is not changed when the installation location is open is described. Therefore, the re-evaluation unit 204 does not change the evaluation result and the evaluation value of the evaluation information 502. Subsequently, when the connection environment of the actual operation environment information 501 is confirmed, the intranet access is set. Referring to the evaluation result comparison information 401 in the same manner as the installation location, if the evaluation result of the attack source section is a network, the evaluation value of the attack source section is 0.646 (adjacent). When the evaluation information 502 is confirmed, the evaluation result of the attack source section is a network, so the re-evaluation unit 204 sets the evaluation result of the attack source section as adjacent and changes the evaluation value to 0.646. In this way, the vulnerability itself can be attacked from the network, but the severity can be calculated assuming an attack from the intranet that is the actual operating environment. If the evaluation result comparison information 401 relating to identification and authentication of the actual operational environment information 501 is continuously referred to, it is not necessary to change the evaluation result and evaluation value regarding the necessity of authentication before the attack of the evaluation information 502 from the contents of the evaluation result comparison information 401. Similarly, it is not necessary to change the influence of the evaluation information 502 on the confidentiality. Finally, when the evaluation result comparison information 401 regarding the integrity request and availability request of the actual operating environment information 501 is confirmed, an evaluation result is obtained regarding the influence on the integrity of the evaluation information 502 and the influence on the availability, and the evaluation value is set to 0. It can be confirmed that it is changed. By re-evaluating the evaluation results in this way, it is possible to consider the impact on strict vulnerabilities in cases where information that considers integrity is not handled or in a production environment where the demand for availability of the information processing apparatus 100 is low. It becomes possible. Finally, the evaluation information 502 becomes a re-evaluation result 503 as shown in FIG. 4C, and the re-evaluation value is output to the severity calculation unit 205.

  Next, the severity calculation unit 205 will be described. The seriousness degree calculation unit 205 obtains a re-evaluation value from the re-evaluation part 204, and calculates a seriousness degree from the obtained re-evaluation value. The severity in the present embodiment can be calculated using the following equations 1 to 4 when CVSS is taken as an example.

Influence = 10.41 × (1- (1-C)) × (1-I) × (1-A)) (Formula 1)
Here, C represents the impact on confidentiality, I represents the impact on integrity, and A represents the impact on availability.

Ease of attack = 20 x AV x AC x Au (Formula 2)
Here, AV represents the attack source classification, AC represents the complexity of the attack condition, and Au represents the necessity of authentication before the attack.

f (degree of influence) = 0 (when the degree of influence is 0), 1.176 (when the degree of influence is other than 0) (Formula 3)
Severity = ((0.6 x Influence) + (0.4 x Ease of attack)-1.5) x f (Effect) (Formula 4)
When the severity is calculated by the above method, the severity of the evaluation information 502 acquired as vulnerability information is 6.4, but becomes 0 when the result re-evaluated by the re-evaluation unit 204 is taken into consideration. In other words, it can be determined that the vulnerability is generally a relatively serious vulnerability with a severity level of 6.4, but it is determined that there is no effect when used in an environment such as the actual operational environment information 501. can do.

  Finally, the control unit 206 will be described. The control unit 206 controls the information processing apparatus 100 according to the severity calculated by the severity calculation unit 205. For example, as shown in FIG. 5, the control unit 206 includes control regarding whether or not update is possible, update timing, update presence / absence check, warning display, provisional response method presentation, degeneration method, and control presence / absence. In these control methods, control contents are set in advance for the severity, and when the severity is determined, control according to the severity is performed. In the present embodiment, the description will be given as the control contents as shown in FIG. 5. For example, the acquired severity is sent to the management server, the control method is received, and the control is performed according to the control method. Any device that controls 100 can be used. Further, in the present embodiment, the control content corresponding to the severity is set in advance, but information such as whether or not to update according to the severity may be provided on the updater side when updating, for example. In this case, if vulnerability information related to the updater is also given, the update can be performed efficiently. When setting the control content, the administrator of the information processing apparatus 100 may be able to set the control content by itself, or may be selected from predetermined control content.

  Hereinafter, the control method of the information processing apparatus 100 according to the present embodiment will be described with reference to FIG. In this embodiment, a control method related to update will be described as an example. First, the actual operating environment information acquisition unit 201 in the information processing apparatus 100 acquires actual operating environment information (S701). The actual operating environment information may be set by the user of the information processing apparatus 100, or may be set automatically during operation. When the actual operating environment information is acquired, the information processing apparatus 100 acquires update information (S702). At this time, vulnerability information related to the update is assigned to the update information, and the vulnerability information acquisition unit 202 acquires the assigned vulnerability information (S703). When the vulnerability information is acquired, the evaluation information extraction unit 203 extracts the evaluation information included in the vulnerability information (S704). The re-evaluation unit 204 compares the set actual operation environment information with the evaluation information extracted from the vulnerability information (S705). If the actual operating environment information matches the operating environment of the evaluation information, the severity calculation unit 205 calculates the severity using the evaluation value extracted from the vulnerability information as it is (S706). If they do not match, the re-evaluation unit 204 re-evaluates the evaluation information using preset evaluation result comparison information (S707). When the evaluation information is re-evaluated, the severity calculation unit 205 recalculates the severity from the re-evaluation value output as a result (S706). When the severity is determined, the control unit 206 controls the process according to the preset severity and the control content. If the severity is low, there is no effect and no update is performed (S708). If the severity is medium, it is not urgent, but there is an impact, so only a warning is displayed and updated later (S709). If the degree of urgency is high, an immediate update is performed because the influence is great (S710). As a result, the information processing apparatus 100 can be controlled according to the actual operating environment.

  In this embodiment, an example related to update has been described. However, for example, the above-described control such as degeneration of functions may be performed according to the actual operation environment.

  As described above, by performing processing according to the actual operating environment, it is possible to ensure security in consideration of the severity of vulnerability and to control the information processing apparatus 100 efficiently.

(Second Embodiment)
In the first embodiment, the operational environment conditions are controlled in comparison with the evaluation results of vulnerability information regarding the installation location, connection environment, identification and authentication, and the confidentiality, integrity, and availability of information. In the present embodiment, threshold values for the complexity and severity of attack conditions are set in advance, and the information processing apparatus 100 is controlled according to the threshold values.

<Functional configuration of information processing apparatus>
A functional configuration of the information processing apparatus 800 in this embodiment will be described with reference to FIG. As illustrated in FIG. 7, the information processing apparatus 800 according to the present embodiment includes a threshold information acquisition unit 801, a vulnerability information acquisition unit 202, an evaluation information extraction unit 203, a reevaluation unit 204, a severity calculation unit 205, and a control unit 206. Consists of Since the vulnerability information acquisition unit 202, the evaluation information extraction unit 203, the reevaluation unit 204, the severity calculation unit 205, and the control unit 206 are the same as those in the first embodiment, description thereof is omitted. In addition, the physical configuration of the information processing apparatus 800 according to the present embodiment is the same as the physical configuration illustrated in FIG. 1A described in the first embodiment, and description thereof is omitted.

  The threshold information acquisition unit 801 acquires a threshold set in advance by the administrator of the information processing apparatus 800 and outputs the acquired threshold to the reevaluation unit 204. Here, the threshold value is a value set by the administrator of the information processing apparatus 800 with respect to a specific basic evaluation criterion, considered as one of the operating environments. For example, in the basic evaluation criteria of FIG. 2B described above, when the evaluation result for the item of complexity of the attack condition is high, it is set when processing is not performed regardless of the evaluation result of other items. Value. The threshold information set by the threshold information acquisition unit 801 will be described with reference to FIG. As shown in FIG. 8, the CVSS basic evaluation criteria and the processing contents according to the result of the basic value (severity) are set. The threshold values 901 are collectively shown in FIG. For example, when focusing on the attack source classification, the evaluation result for local vulnerabilities is a process of setting the evaluation value of the impact on confidentiality, the impact on integrity, and the impact on availability to 0 regardless of other evaluation results It is. This indicates that the administrator of the information processing apparatus 800 does not consider an attack that can only be attacked locally. Similarly, when attention is paid to the complexity of the attack condition, it is indicated that the administrator of the information processing apparatus 800 does not consider the vulnerability having a complicated attack condition even when the evaluation result is high. Further, regarding the severity itself, for example, it is shown that a vulnerability having a very high severity is controlled regardless of the actual operation environment. By setting the threshold value in this way, control according to the manager's intention of the information processing apparatus 800 is enabled.

Hereinafter, the control method of the information processing apparatus 800 in this embodiment will be described with reference to FIG. First, the threshold information acquisition unit 801 in the information processing apparatus 800 acquires threshold information (S1001). When the threshold information is acquired, the vulnerability information acquisition unit 202 acquires the disclosed vulnerability information (S1002). When the vulnerability information is acquired, the evaluation information extraction unit 203 extracts the evaluation information included in the vulnerability information (S1003). The re-evaluation unit 204 compares the set threshold information with the evaluation information extracted from the vulnerability information (S1004). When re-evaluating as a result of verifying the threshold regarding the severity, the re-evaluation unit 204 re-evaluates the evaluation result using the threshold information (S1005). When the evaluation result is re-evaluated, the severity calculation unit 205 recalculates the severity from the re-evaluation value output as a result (S1006). When there is no need for re-evaluation, the severity based on the evaluation information extracted from the vulnerability information is output to the control unit 206. When the severity is determined, the control unit 206 performs control according to a preset severity, as in the first embodiment. For example, in the case of control related to update, if the severity is low, there is no influence and no update is performed (S1007). If the severity is medium, it is not urgent, but there is an effect, so only a warning is displayed and updated later (S1008). If the degree of urgency is high, an immediate update is performed because the impact is great (S1009). As a result, it becomes possible to control the information processing apparatus 800 in accordance with the intention of the manager of the information processing apparatus.
As described above, the severity of the vulnerability is described by performing processing according to the actual operating environment. In this embodiment, the example related to the update has been described. For example, the function is degraded according to the actual operating environment. Control may be performed.

  As described above, by performing processing according to the actual operating environment, it is possible to ensure security in consideration of the severity of vulnerability and to control the information processing apparatus 800 efficiently.

(Other examples)
The present invention can also be realized by executing the following processing. That is, software (program) that realizes the functions of the above-described embodiments is supplied to a system or apparatus via a network or various storage media, and a computer (or CPU, MPU, etc.) of the system or apparatus reads the program. It is a process to be executed.

Claims (18)

An information processing apparatus,
Production environment information acquisition means for acquiring production environment information;
Vulnerability information acquisition means for acquiring vulnerability information;
A severity calculating means for calculating a severity based on the actual operational environment information and the vulnerability information;
An information processing apparatus comprising control means for controlling the information processing apparatus in accordance with the severity calculated by the severity calculation means. Evaluation information extraction means for extracting evaluation information from the vulnerability information;
A re-evaluation that compares whether the evaluation information matches the actual operating environment information, extracts an evaluation value from the evaluation information if they match, and determines a re-evaluation value by re-evaluation if they do not match And further comprising means
The information processing apparatus according to claim 1, wherein the seriousness level calculation unit calculates a seriousness level based on the evaluation value extracted by the re-evaluation unit or the re-evaluation value. Evaluation information extraction means for extracting the evaluation information described in the vulnerability information, Judgment whether re-evaluation is necessary based on the evaluation information and threshold information, and if re-evaluation is unnecessary, the evaluation value from the evaluation information And re-evaluation means for extracting a re-evaluation value determined by re-evaluation when re-evaluation is necessary,
The information processing apparatus according to claim 1, wherein the seriousness level calculation unit calculates a seriousness level based on the evaluation value extracted by the re-evaluation unit or the re-evaluation value.   3. The re-evaluation means re-evaluates evaluation information based on evaluation result comparison information that is information for determining a re-evaluation value of an evaluation result for an item of actual operational environment information. Item 4. The information processing device according to Item 3.   5. The system according to claim 1, wherein the actual operating environment information includes at least information on installation location, connection environment, identification and authentication, confidentiality request, integrity request, and availability request. The information processing apparatus according to item.   The threshold information is a threshold for re-evaluating evaluation information for at least one of installation location, connection environment, identification and authentication, confidentiality requirement, integrity requirement, availability requirement, attack condition complexity, and severity. The information processing apparatus according to claim 3, wherein:   The information processing apparatus according to claim 3, wherein the evaluation information is information based on a basic evaluation standard of CVSS.   The control means controls the apparatus based on any of update availability, update timing, update presence / absence check, warning display, provisional response method presentation, degeneration method, and control presence / absence. Item 8. The information processing apparatus according to any one of Items 1 to 7. A method for controlling an information processing apparatus,
An actual operation environment information acquisition means for acquiring actual operation environment information;
A vulnerability information acquisition step in which the vulnerability information acquisition means acquires vulnerability information; and
A severity calculation step in which a severity calculation means calculates a severity based on the actual operational environment information and the vulnerability information;
A control method for an information processing apparatus, wherein the control means includes a control step of controlling the information processing apparatus in accordance with the severity calculated in the severity calculation step. An evaluation information extraction means for extracting evaluation information from the vulnerability information;
The re-evaluation means compares whether or not the evaluation information matches the actual operating environment information. If the evaluation information matches, the evaluation value is extracted from the evaluation information. And a re-evaluation step for determining
The information processing apparatus control method according to claim 9, wherein the severity calculation step calculates the severity based on the evaluation value extracted in the re-evaluation step or the re-evaluation value. An evaluation information extraction unit for extracting evaluation information described in the vulnerability information and a re-evaluation unit determine whether re-evaluation is necessary based on the evaluation information and threshold information, A re-evaluation step of extracting an evaluation value from the evaluation information when evaluation is unnecessary, and extracting a re-evaluation value determined by re-evaluation when re-evaluation is necessary;
The information processing apparatus control method according to claim 9, wherein the severity calculation step calculates the severity based on the evaluation value extracted in the re-evaluation step or the re-evaluation value.   The re-evaluation step re-evaluates evaluation information based on evaluation result comparison information that is information for determining a re-evaluation value of an evaluation result for an item of actual operational environment information. Item 12. A method for controlling an information processing apparatus according to Item 11.   13. The actual operation environment information includes at least information on installation location, connection environment, identification / authentication, confidentiality request, integrity request, and availability request. A method for controlling the information processing apparatus according to item.   The threshold information is a threshold for re-evaluating evaluation information for at least one of installation location, connection environment, identification and authentication, confidentiality requirement, integrity requirement, availability requirement, attack condition complexity, and severity. The method of controlling an information processing apparatus according to claim 11, wherein:   15. The method according to claim 11, wherein the evaluation information is information based on a CVSS basic evaluation standard.   The control step is to control the apparatus based on any of update availability, update timing, update presence / absence check, warning display, provisional response method presentation, degeneration method, and control presence / absence. Item 16. A method for controlling an information processing apparatus according to any one of Items 9 to 15.   The program for functioning a computer as each means which the information processing apparatus of any one of Claims 1 thru | or 8 has.   A computer-readable storage medium storing the program according to claim 17.

Images