WO2021075577A1

WO2021075577A1 - Generating device, program, and generating method

Info

Publication number: WO2021075577A1
Application number: PCT/JP2020/039196
Authority: WO
Inventors: 今日子帆足; 英則土田; 剛史清國; 永治荻原; 健一郎平田
Original assignee: ソフトバンク株式会社
Priority date: 2019-10-18
Filing date: 2020-10-16
Publication date: 2021-04-22
Also published as: JP6952090B2; JP2021068031A

Abstract

Provided is a generating device provided with: a level identifying unit which identifies a security risk level, for a target company, of communication via the internet between an internal communication source and an external communication destination; and a display data generating unit which generates display data for displaying, in association with a communication object representing the communication, a risk object corresponding to the security risk level identified by the level identifying unit.

Description

Generator, program, and generation method

The present invention relates to a generator, a program, and a generation method.

A technique for generating a security hazard map using security diagnostic information has been known. (See, for example, Patent Document 1).
[Prior art literature]
[Patent Document]
[Patent Document 1] Japanese Unexamined Patent Publication No. 2004-234401

The problem to be solved

It is desirable to generate a security hazard map that makes it easy to understand the security risks that each of multiple companies has.

General disclosure

According to the first aspect of the present invention, a generator is provided. The generator may include a level identification unit that specifies the security risk level of communication between an internal communication source and an external communication destination via the Internet in the target company. The generation device may include a display data generation unit that generates display data for displaying a communication object representing communication in association with a risk object corresponding to a security risk level specified by the level identification unit.

The level specifying unit may specify the security risk level of each communication between a plurality of internal communication sources and a plurality of external communication destinations via the Internet in the target company, and the display data generation unit may specify the security risk level. , Display data may be generated in which the risk objects corresponding to the security risk levels specified by the level specifying unit are associated with the plurality of communication objects representing each of the plurality of communications. The display data generation unit may generate the display data for displaying the risk object in association with the communication object representing the communication whose security risk level is higher than a predetermined level. The display data generation unit may generate the display data for displaying the risk object having a higher emphasis in association with the communication object indicating the communication having a higher security risk level. The display data generation unit may generate display data to be displayed in association with the communication object by using a balloon object including a character string indicating the content of the risk as the risk object.

The level specifying unit may specify the security risk level for the data transmitted from the communication source to the communication destination as the security risk level of the communication, and the display data generation unit may specify the communication source object representing the communication source. In addition, the display data may be generated in which the risk objects corresponding to the security risk level are associated with the data transmitted from the communication source to the communication destination and displayed. The level specifying unit may specify the security risk level for the data transmitted from the communication destination to the communication source as the security risk level of the communication, and the display data generation unit may specify the communication destination object representing the communication destination. In addition, the display data that displays the risk objects corresponding to the security risk level with respect to the data transmitted from the communication destination to the communication source may be generated. The display data generation unit may generate the display data for displaying the risk object and the risk content object corresponding to the risk content in the communication indicated by the communication object in association with the communication object.

The level identification unit is based on the security measure level of the target company, the asset value of the data handled in the communication, and the frequency of security accidents of the data handled in the communication, and the security risk of the communication. You may specify the level. As the security risk level of the communication, the level specifying unit indicates a numerical value indicating the security measure level, which is higher as the security measure level is higher, and an asset value, which is higher as the asset value is higher. A value obtained by multiplying a numerical value by a numerical value indicating the frequency of occurrence may be specified. The level specifying department may determine the security measure level based on at least one of the company name of the target company, the years elapsed since its establishment, and the business content. The level specifying unit may determine the security measure level based on whether or not the data handled by the target company is subject to confidentiality of communication. The level specifying unit may determine the security measure level based on the number of data handled by the target company. The level specifying unit may determine the security measure level based on whether or not the data handled by the target company includes credit card information. The level specifying unit may determine the security measure level based on whether or not the data handled by the target company includes My Number information. The level specifying unit may determine the security measure level based on the occurrence status of data leakage handled by the target company.

According to the second aspect of the present invention, a program for making a computer function as the generator is provided.

According to the third aspect of the present invention, a production method is provided. The generation method may include a level specifying stage for specifying the security risk level of communication between the internal communication source and the external communication destination via the Internet in the target company. The generation method may include a display data generation stage for generating display data in which a communication object representing communication is associated with a risk object corresponding to the security risk level specified in the level specifying stage.

The outline of the above invention does not list all the necessary features of the present invention. Sub-combinations of these feature groups can also be inventions.

An example of the communication environment of the generator 100 is shown schematically. An example of the processing flow by the generator 100 is shown schematically. An example of the basic shape 300 of the hazard map is shown schematically. An example of the hazard map 400 is shown schematically. An example of the hazard map 400 is shown schematically. An example of the functional configuration of the generator 100 is shown schematically. An example of the classification process of the company 200 by the countermeasure level acquisition unit 112 is shown schematically. An example of the countermeasure level determination table 600 is shown schematically. An example of the hardware configuration of the computer 1200 that functions as the generator 100 is shown schematically.

Hereinafter, the present invention will be described through embodiments of the invention, but the following embodiments do not limit the inventions claimed. Also, not all combinations of features described in the embodiments are essential to the means of solving the invention.

FIG. 1 schematically shows an example of the communication environment of the generator 100. The generation device 100 according to the present embodiment generates display data for each of the plurality of companies 200 based on the communication status between the inside and outside of the company and the security risk level of the communication. Such display data may be described as a security hazard map.

The security risk level indicates the level of security-related risk. Security risk levels include, for example, four levels of caution, warning, critical, and urgent. Each level of security risk level is not limited to this and may be arbitrarily set. Further, the number of security risk levels is not limited to four and may be any number.

The generation device 100 receives information about the company 200 from, for example, the communication device 210 of the company 200. Information about the company 200 is entered, for example, by the person in charge 202 at the company 200. For example, the generation device 100 transmits an input sheet for inputting information about the company 200 to the communication device 210, and receives the information input to the input sheet by the person in charge 202. The input sheet may include an input field for each item, or may include an input field for inputting various information in the form of a question.

Information about company 200 includes company name, year of establishment, business content, etc. When the company 200 handles personal information, the information about the company 200 may include the number of personal information handled. Further, the information about the company 200 includes the information about the communication of the company 200.

Information related to communication includes information related to internal and external communication. Internal / external communication may mean communication between the inside and outside of the company via the Internet. Information on internal and external communication includes information on internal communication sources, external communication destinations, and data sent and received.

Information related to communication may include information related to internal communication. Internal communication may mean communication between internals. Information about internal communication includes information on internal communication sources, internal communication destinations, and data sent and received.

Information related to communication may include information related to external communication. The external communication may refer to communication between external parties related to the company 200. Information on external communication includes information on external communication sources, external communication destinations, and data sent and received.

Information related to communication may include information related to data sent and received. Information about communication may include information about the number of data. For example, when the data to be transmitted / received includes personal information, the information regarding communication indicates how many personal information is transmitted / received.

Information on communication may include information on the type of data. The information regarding communication may include information on whether or not the data includes credit card information. The information regarding communication may include information as to whether or not the data includes My Number information. The information regarding communication may include information on whether or not the data includes personal information. The information regarding communication may include information on whether or not the data is subject to confidentiality of communication. The secrecy of communications may be, for example, the "secret of communications" stipulated in the Constitution. Further, the secrecy of communication may be, for example, the "secret of communication" defined in the Telecommunications Business Law.

Information on communication may include information on the asset value of data. Information about the asset value of the data can indicate how high the asset value of the data is. For example, the asset value of data is highest when the data contains confidential information, when the data contains personal information, when the data contains confidential information, when the data contains confidential information, and when the data contains any of these information. If it does not include, it will gradually decrease. The asset value of the data may be determined by criteria other than these.

Information on communication may include information on the level of data management. Information about communication may include information about how to manage data. The information regarding communication may include information regarding data management rules. The information regarding communication may include information regarding how to handle data. The information regarding communication may include information regarding rules for handling data.

Information on communication may include information on the frequency of data security incidents. A data security accident is, for example, a data leakage accident.

The generation device 100 may communicate with the communication device 210 via the network 10. The network 10 may be any network. The network 10 includes, for example, the Internet, a LAN, a cloud network, and the like.

The generator 100 specifies, for example, the security risk level of communication between an internal communication source and an external communication destination based on information on communication, and sets a communication object representing communication according to the security risk level of the communication. Generate a security hazard map that displays risk objects in association with each other. With such a security hazard map, it is possible to easily grasp the security risk level of each of a plurality of internal and external communications.

FIG. 2 schematically shows an example of the processing flow by the generation device 100. Here, the flow of processing in which the generation device 100 generates a security hazard map of a certain company 200 is shown.

In step 102 (the step may be abbreviated as S) 102, the generator 100 acquires information about the target company 200. In S104, the generator 100 extracts internal / external communication, internal communication, and external communication from the information about the company 200.

In S106, the generation device 100 specifies the security risk level for one of the extracted plurality of communications. In S108, the generation device 100 determines whether or not the security risk level has been specified for all the extracted communications. If it is determined that the process is not completed, the process returns to S106, and if it is determined that the process is completed, the process proceeds to S110.

In S110, the generation device 100 generates a security hazard map including a plurality of communication objects representing each of the plurality of communications extracted in S104 and a risk object corresponding to each security risk level of the plurality of communications. For example, the generation device 100 associates a risk object only with a communication object whose communication security risk level is higher than a predetermined level among a plurality of communication objects.

In S112, the generation device 100 displays the security hazard map generated in S110. The generation device 100 may display the security hazard map on the display included in the generation device 100. Further, the generation device 100 may transmit the security hazard map to the communication device 210 and display the security hazard map on the display included in the communication device 210.

FIG. 3 schematically shows an example of the basic shape 300 of the security hazard map. The basic shape 300 includes an internal area 310, an Internet area 320, an external area 330, an icon legend area 340, and a line legend area 350.

In the internal area 310, for example, an internal communication source for internal / external communication, and a communication source and communication destination for internal communication are arranged. In the external area 330, for example, an external communication destination in internal / external communication, and a communication source and communication destination in external communication are arranged.

The communication object representing internal / external communication includes an object representing an internal communication source, an object representing an external communication destination, and an object representing communication. The object representing the communication will cross the Internet area 320.

The communication object representing internal communication includes an object representing an internal communication source, an object representing an internal communication destination, and an object representing communication. The communication object representing external communication includes an object representing an external communication source, an object representing an external communication destination, and an object representing communication.

In the icon legend area 340, an icon legend corresponding to an object representing a communication source, a communication destination, etc. is arranged. In the line legend area 350, a legend of a line object corresponding to an object representing communication is arranged.

4 and 5 schematically show an example of the security hazard map 400. FIG. 4 shows the state before the placement of the risk object, and FIG. 5 shows the state after the placement of the risk object.

In this example, the high security area 402 is arranged in the in-house area 310, and the dedicated PC (Personal Computer) 404 is arranged in the high security area 402. Further, the business system 410 and the customer 420 are arranged in the external area 330, the management system 412, the WEB server 414, and the database 416 are arranged in the business system 410, and the mobile terminal 422 and the PC 424 are arranged in the customer 420. Have been placed. Further, a FW432 representing a firewall is arranged between the in-house area 310 and the Internet area 320, and a FW434 is arranged between the Internet area 320 and the outside area 330.

The HP (Home Page) input 442 represents a communication in which the mobile terminal 422 and the PC 424 transmit the input data to the management system 412 via the home page by the WEB server 414. Browsing 452 represents communication for browsing data managed by the management system 412 from the dedicated PC 404. Operation 454 and development / maintenance 456 represent communication for accessing the database 416 from the dedicated PC 404 for operation, development, and maintenance.

The tag object 502, the tag object 504, and the tag object 506 are examples of risk objects. The tag object 502 indicates that the security risk is relatively high because the access right holder who can access the data managed by the management system 412 by using the dedicated PC 404 is not sufficiently educated and trained. The tag object 504 indicates that the security risk is relatively high because the handling rules of the external storage medium are not sufficient. The tag object 506 indicates that the security risk of the management system 412 is relatively high because the log acquisition is not sufficient.

The generation device 100 may emphasize each of the tag object 502, the tag object 504, and the tag object 506 according to the height of the security risk level. For example, the generation device 100 applies the color scheme emphasized as the security risk level is higher to the tag object 502, the tag object 504, and the tag object 506. Further, for example, the generation device 100 increases the size of the tag object 502, the tag object 504, and the tag object 506 as the security risk level increases. In this way, by emphasizing according to the level of security risk, it is possible to intuitively grasp the difference in security risk level.

The balloon object 512 may also be an example of a risk object. The balloon object 512 includes a character string indicating the content of the risk for communication by the dedicated PC 404. In the example shown in FIG. 5, the balloon object 512 shows that there is a risk of information leakage due to internal improprieties and data destruction due to erroneous operation with respect to communication by the dedicated PC 404. The character string included in the balloon object 512 can be registered, for example, by the administrator of the generation device 100 or the like. The generation device 100 may display the balloon object 512 and the risk content object corresponding to the risk content in the communication indicated by the communication object in association with each other on the communication object. In the example shown in FIG. 5, the internal fraud object 514 corresponding to the internal fraud is displayed. The tag object 502 and the tag object 504 make it possible to grasp that there is a security risk in the communication by the dedicated PC 404, and the balloon object 512 and the internal malicious object 514 make it possible to grasp what kind of risk actually exists. can do.

FIG. 6 schematically shows an example of the functional configuration of the generator 100. The generation device 100 includes an information collection unit 102, an information storage unit 104, a level identification unit 110, a display data generation unit 120, and a display data output unit 122.

The information collection unit 102 collects information about the company 200 for each of the plurality of companies 200. The information collecting unit 102 receives information about the company 200 from each of the plurality of companies 200. The information collecting unit 102 stores the collected information in the information storage unit 104.

The level specifying unit 110 acquires the information of the company 200 for which the display data is generated from the information storage unit 104, and specifies the security risk level of each of the plurality of communications in the company 200. The level specifying unit 110 specifies, for example, the security risk level of communication between an internal communication source and an external communication destination via the Internet in the company 200. The level specifying unit 110 may specify the security risk level of communication between the internal communication source and the internal communication destination in the company 200. The level specifying unit 110 may specify the security risk level of communication between an external communication source and an external communication destination. Further, the level specifying unit 110 specifies, for example, the security risk level for the data transmitted from the communication source to the communication destination. Further, the level specifying unit 110 specifies, for example, the security risk level for the data transmitted from the communication destination to the communication source.

The level specifying unit 110 has a countermeasure level acquisition unit 112, an asset value acquisition unit 114, and an occurrence frequency acquisition unit 116. The countermeasure level acquisition unit 112 acquires the security countermeasure level of the company 200. The security measure level of the company 200 may be the level of the security measure required for the company 200. The security measure level of the company 200 is registered by, for example, the administrator of the generation device 100, and is stored in the information storage unit 104. In this case, the countermeasure level acquisition unit 112 acquires the security countermeasure level of the target company 200 from the information storage unit 104.

The countermeasure level acquisition unit 112 may determine the security countermeasure level of the company 200 based on the information about the company 200 stored in the information storage unit 104. The countermeasure level acquisition unit 112 determines the security countermeasure level of the company 200 based on, for example, the company name of the company 200, the elapsed years since its establishment, and the content of the business. The countermeasure level acquisition unit 112 may further determine the security countermeasure level based on whether or not the data handled by the company 200 is subject to confidentiality of communication. Further, the countermeasure level acquisition unit 112 may further determine the security countermeasure level based on the number of data handled by the company 200. The countermeasure level acquisition unit 112 may further determine the security countermeasure level based on whether or not the data handled by the company 200 includes credit card information. The countermeasure level acquisition unit 112 may further determine the security countermeasure level based on whether or not the data handled by the company 200 includes the My Number information. The countermeasure level acquisition unit 112 may determine the security countermeasure level based on the occurrence status of data leakage handled by the company 200. Details of the method for determining the security measure level will be described later.

The asset value acquisition unit 114 acquires the asset value of the data handled in the communication for each of the plurality of communications. The asset value acquisition unit 114 may acquire the asset value of the data handled in the communication by referring to the information related to the communication stored in the information storage unit 104.

Occurrence frequency acquisition unit 116 acquires the frequency of occurrence of security accidents of data handled in communication for each of a plurality of communications. The occurrence frequency acquisition unit 116 may acquire the occurrence frequency of a security accident of the data handled in the communication by referring to the information related to the communication stored in the information storage unit 104.

The level specifying unit 110 may specify the security risk level of communication based on the security measure level of the data handled in communication, the asset value, and the frequency of occurrence of security accidents. For example, the level identification unit 110 has a numerical value indicating a security measure level that becomes higher as the security measure level is higher, a numerical value indicating an asset value that becomes higher as the asset value is higher, and security as a communication security risk level. The higher the frequency of accidents, the higher the value. Specify a value obtained by multiplying the value indicating the frequency of security accidents. The level identification unit 110 specifies the security risk level by storing the registration data in which the range of the corresponding value is registered for each of the plurality of levels included in the security risk level in advance and referring to the registration data. You may. By using the above-mentioned identification method, the higher the security measure level required for the data handled in communication, the higher the security risk level can be specified. In addition, the higher the asset value of the data handled in communication, the higher the security risk level can be identified. In addition, the higher the frequency of security accidents of data handled in communication, the higher the security risk level can be identified.

The display data generation unit 120 generates display data based on the information stored in the information storage unit 104 and the security risk level specified by the level identification unit 110. The display data generation unit 120 generates display data including a communication object representing each of a plurality of communications of the target company 200. The display data generation unit 120 generates display data for displaying the communication object in association with the risk object corresponding to the security risk level of the communication indicated by the communication object.

The display data generation unit 120 generates display data for displaying a risk object in association with a communication object representing a communication whose security risk level is higher than a predetermined level, for example. The display data generation unit 120 may generate display data in which the risk objects are associated with and displayed only on the communication objects representing the communication in which the security risk level is higher than the predetermined level among the plurality of communication objects. Further, the display data generation unit 120 specifies, for example, a predetermined number of communication objects in descending order of security risk level, and generates display data for displaying the identified communication objects in association with the risk objects.

The display data generation unit 120 may generate display data in which a risk object having a higher emphasis is associated with a communication object indicating a communication having a higher security risk level. The risk object with a higher degree of emphasis may be a risk object with a higher degree of emphasis on the color scheme. Further, the risk object with higher emphasis may be a risk object having a larger size. Further, the risk object having a higher degree of emphasis may be a risk object having a higher degree of emphasis on the shape.

The display data generation unit 120 may generate display data to be displayed in association with a communication object, using a balloon object including a character string indicating the content of the risk as a risk object. The display data generation unit 120 may generate display data for displaying the balloon object and the risk content object corresponding to the risk content in the notification indicated by the communication object in association with each other. The display data generation unit 120 generates display data for displaying the balloon object in association with the risk content object, for example.

The display data generation unit 120 may generate display data in which a communication source object representing a communication source is associated with a risk object corresponding to a security risk level for data transmitted from the communication source to the communication destination. The display data generation unit 120 may generate display data in which a communication destination object representing the communication destination is associated with a risk object corresponding to the security risk level for the data transmitted by the communication destination to the communication source.

The display data output unit 122 outputs the display data generated by the display data generation unit 120. The display data output unit 122 displays, for example, display data on a display included in the generation device 100. Further, the display data output unit 122 transmits display data to the communication device 210, for example, and displays the display data on the display provided in the communication device 210.

FIG. 7 schematically shows an example of the classification process of the company 200 by the countermeasure level acquisition unit 112. When determining the security countermeasure level of the company 200, the countermeasure level acquisition unit 112 can first classify the company 200 by executing the classification process shown in FIG. 7.

In S202, the countermeasure level acquisition unit 112 determines whether or not the company name includes a character string registered in advance. As the character string, for example, a character string that is particularly likely to be the target of an attack from overseas is registered by including it in the company name. An example of the character string is "bank" or the like. If it is included, the process proceeds to S204, and if it is not included, the process proceeds to S210.

In S204, the countermeasure level acquisition unit 112 determines whether or not it has been less than three years since the company was established. If it is determined that it is less than 3 years, the process proceeds to S206, and if it is determined that it is not less than 3 years, the process proceeds to S208.

In S206, the countermeasure level acquisition unit 112 determines whether or not the business of the company 200 corresponds to the licensed business. If the countermeasure level acquisition unit 112 determines that it is applicable, the company 200 is classified as classification C, and if it is determined that it is not applicable, the company 200 is classified as classification B.

In S208, the countermeasure level acquisition unit 112 determines whether or not the business of the company 200 falls under the licensed business. If the countermeasure level acquisition unit 112 determines that it is applicable, the company 200 is classified as classification C, and if it is determined that it is not applicable, the company 200 is classified as classification B.

In S210, the countermeasure level acquisition unit 112 determines whether or not it has been less than three years since the company was established. If it is determined that it is less than 3 years, the process proceeds to S212, and if it is determined that it is not less than 3 years, the process proceeds to S214.

In S212, the countermeasure level acquisition unit 112 determines whether or not the business of the company 200 falls under the licensed business. If it is determined that the countermeasure level acquisition unit 112 is applicable, the company 200 is classified as classification C, and if it is determined that the countermeasure level acquisition unit 112 is not applicable, the company 200 is classified as classification A.

In S214, the countermeasure level acquisition unit 112 determines whether or not the business of the company 200 falls under the licensed business. If it is determined that the countermeasure level acquisition unit 112 is applicable, the company 200 is classified as classification C, and if it is determined that the countermeasure level acquisition unit 112 is not applicable, the company 200 is classified as classification D.

FIG. 8 schematically shows an example of the countermeasure level determination table 600. The countermeasure level acquisition unit 112 determines the security countermeasure level of the company 200 by using the classification of the company 200 and the countermeasure level determination table 600. Here, a case where the security measure level consists of MAX, MID, and MIN will be described as an example. The number of security measure levels is not limited to three, and may be any number.

The countermeasure level acquisition unit 112 determines the security countermeasure level of the company 200 when the classification of the company 200 is classification A, and MAX 10,000 to 1 million when the personal information handled is 1 million or more. In that case, MID is tentatively decided in case of less than 10,000 cases. Further, the countermeasure level acquisition unit 112 provisionally sets the security countermeasure level of the company 200 to MID when the classification of the company 200 is classification B, MAX when the classification is C, and MIN when the classification is D. Decide.

The countermeasure level acquisition unit 112 determines whether or not the company 200 possesses information that is subject to confidential communication, whether or not it possesses at least one of the number of personal information to be handled, credit card information, and my number information. Adjust the security measure level according to the measure level determination table 600 based on whether an information leakage accident occurred within 5 years and whether the situation is such that personal information is not yet retained while starting a business. .. For example, the countermeasure level acquisition unit 112 sets the security countermeasure level to MAX when the company 200 holds information that is the target of confidentiality of communication.

FIG. 9 schematically shows an example of the hardware configuration of the computer 1200 that functions as the generator 100. A program installed on the computer 1200 causes the computer 1200 to function as one or more "parts" of the device according to the present embodiment, or causes the computer 1200 to perform an operation associated with the device according to the present embodiment or the one or more. A plurality of "parts" can be executed and / or a computer 1200 can be made to execute a process according to the present embodiment or a stage of the process. Such a program may be run by the CPU 1212 to cause the computer 1200 to perform certain operations associated with some or all of the blocks of the flowcharts and block diagrams described herein.

The computer 1200 according to this embodiment includes a CPU 1212, a RAM 1214, and a graphic controller 1216, which are connected to each other by a host controller 1210. The computer 1200 also includes input / output units such as a communication interface 1222, a storage device 1224, a DVD drive 1226, and an IC card drive, which are connected to the host controller 1210 via an input / output controller 1220. The DVD drive 1226 may be a DVD-ROM drive, a DVD-RAM drive, or the like. The storage device 1224 may be a hard disk drive, a solid state drive, or the like. The computer 1200 also includes a legacy I / O unit such as a ROM 1230 and a keyboard, which are connected to the I / O controller 1220 via an I / O chip 1240.

The CPU 1212 operates according to the programs stored in the ROM 1230 and the RAM 1214, thereby controlling each unit. The graphic controller 1216 acquires the image data generated by the CPU 1212 in a frame buffer or the like provided in the RAM 1214 or itself so that the image data is displayed on the display device 1218.

The communication interface 1222 communicates with other electronic devices via the network. The storage device 1224 stores programs and data used by the CPU 1212 in the computer 1200. The DVD drive 1226 reads a program or data from a DVD-ROM 1227 or the like and provides it to the storage device 1224. The IC card drive reads the program and data from the IC card and / or writes the program and data to the IC card.

The ROM 1230 stores a boot program or the like executed by the computer 1200 at the time of activation and / or a program depending on the hardware of the computer 1200. The input / output chip 1240 may also connect various input / output units to the input / output controller 1220 via a USB port, a parallel port, a serial port, a keyboard port, a mouse port, and the like.

The program is provided by a computer-readable storage medium such as a DVD-ROM 1227 or an IC card. The program is read from a computer-readable storage medium, installed in a storage device 1224, RAM 1214, or ROM 1230, which is also an example of a computer-readable storage medium, and executed by the CPU 1212. The information processing described in these programs is read by the computer 1200 and provides a link between the program and the various types of hardware resources described above. The device or method may be configured to implement the operation or processing of information in accordance with the use of the computer 1200.

For example, when communication is executed between the computer 1200 and an external device, the CPU 1212 executes a communication program loaded in the RAM 1214, and performs communication processing on the communication interface 1222 based on the processing described in the communication program. You may order. Under the control of the CPU 1212, the communication interface 1222 reads and reads transmission data stored in a transmission buffer area provided in a recording medium such as a RAM 1214, a storage device 1224, a DVD-ROM 1227, or an IC card. The data is transmitted to the network, or the received data received from the network is written to the reception buffer area or the like provided on the recording medium.

Further, the CPU 1212 makes the RAM 1214 read all or necessary parts of a file or a database stored in an external recording medium such as a storage device 1224, a DVD drive 1226 (DVD-ROM1227), an IC card, etc. Various types of processing may be performed on the data of. The CPU 1212 may then write back the processed data to an external recording medium.

Various types of information such as various types of programs, data, tables, and databases may be stored in recording media and processed. The CPU 1212 describes various types of operations, information processing, conditional judgment, conditional branching, unconditional branching, and information retrieval described in various parts of the present disclosure with respect to the data read from the RAM 1214. Various types of processing may be performed, including / replacement, etc., and the results are written back to the RAM 1214. Further, the CPU 1212 may search for information in a file, a database, or the like in the recording medium. For example, when a plurality of entries each having an attribute value of the first attribute associated with the attribute value of the second attribute are stored in the recording medium, the CPU 1212 is the first of the plurality of entries. The attribute value of the attribute of is searched for the entry that matches the specified condition, the attribute value of the second attribute stored in the entry is read, and the first attribute that satisfies the predetermined condition is selected. You may get the attribute value of the associated second attribute.

The program or software module described above may be stored on a computer 1200 or in a computer-readable storage medium near the computer 1200. In addition, a recording medium such as a hard disk or RAM provided in a dedicated communication network or a server system connected to the Internet can be used as a computer-readable storage medium, whereby the program can be transferred to the computer 1200 via the network. provide.

The blocks in the flowchart and the block diagram in the present embodiment may represent the stage of the process in which the operation is executed or the "part" of the device having a role of executing the operation. Specific stages and "parts" are supplied with dedicated circuits, programmable circuits supplied with computer-readable instructions stored on computer-readable storage media, and / or with computer-readable instructions stored on computer-readable storage media. It may be implemented by the processor. Dedicated circuits may include digital and / or analog hardware circuits, and may include integrated circuits (ICs) and / or discrete circuits. Programmable circuits include, for example, field programmable gate arrays (FPGAs), programmable logic arrays (PLAs), etc., such as logical products, logical sums, exclusive logical sums, negative logical products, negative logical sums, and other logical operations. , Flip-flops, registers, and reconfigurable hardware circuits, including memory elements.

The computer-readable storage medium may include any tangible device capable of storing instructions executed by the appropriate device, so that the computer-readable storage medium having the instructions stored therein is in a flow chart or block diagram. It will include a product that contains instructions that can be executed to create means for performing the specified operation. Examples of the computer-readable storage medium may include an electronic storage medium, a magnetic storage medium, an optical storage medium, an electromagnetic storage medium, a semiconductor storage medium, and the like. More specific examples of computer-readable storage media include floppy (registered trademark) disks, diskettes, hard disks, random access memory (RAM), read-only memory (ROM), and erasable programmable read-only memory (EPROM or flash memory). , Electrically Erasable Programmable Read Only Memory (EEPROM), Static Random Access Memory (SRAM), Compact Disc Read Only Memory (CD-ROM), Digital Versatile Disc (DVD), Blu-ray® Disc, Memory Stick , Integrated circuit card, etc. may be included.

Computer-readable instructions include assembler instructions, instruction set architecture (ISA) instructions, machine instructions, machine-dependent instructions, microcode, firmware instructions, state setting data, or Smalltalk®, JAVA®, C ++, etc. Object-oriented programming languages, and either source code or object code written in any combination of one or more programming languages, including traditional procedural programming languages such as the "C" programming language or similar programming languages. May include.

Computer-readable instructions are used to generate means for a general-purpose computer, a special-purpose computer, or the processor of another programmable data processing device, or a programmable circuit, to perform an operation specified in a flowchart or block diagram. General purpose computers, special purpose computers, or other programmable data processing locally or via a local area network (LAN), a wide area network (WAN) such as the Internet, etc. to execute the computer readable instructions. It may be provided in the processor of the device or in a programmable circuit. Examples of processors include computer processors, processing units, microprocessors, digital signal processors, controllers, microcontrollers and the like.

Although the present invention has been described above using the embodiments, the technical scope of the present invention is not limited to the scope described in the above embodiments. It will be apparent to those skilled in the art that various changes or improvements can be made to the above embodiments. It is clear from the claims that the form with such modifications or improvements may also be included in the technical scope of the invention.

The order of execution of each process such as operation, procedure, step, and step in the device, system, program, and method shown in the claims, specifications, and drawings is particularly "before" and "prior to". It should be noted that it can be realized in any order unless the output of the previous process is used in the subsequent process. Even if the claims, the specification, and the operation flow in the drawings are explained using "first", "next", etc. for convenience, it means that it is essential to carry out in this order. is not it.

10 network, 100 generator, 102 information collection unit, 104 information storage unit, 110 level identification unit, 112 countermeasure level acquisition unit, 114 asset value acquisition unit, 116 occurrence frequency acquisition unit, 120 display data generation unit, 122 display data output Department, 200 companies, 202 personnel, 210 communication devices, 300 basic shapes, 310 internal areas, 320 Internet areas, 330 external areas, 340 icon legend areas, 350 line legend areas, 400 hazard maps, 402 high security areas, 404 dedicated PC, 410 business system, 412 management system, 414 WEB server, 416 database, 420 customer, 422 mobile terminal, 424 PC, 432, 434 FW, 442 HP input, 452 browsing, 454 operation, 456 development and maintenance, 502, 504 , 506 tag object, 512 blowout object, 514 internal fraudulent object, 600 countermeasure level determination table, 1200 computer, 1210 host controller, 1212 CPU, 1214 RAM, 1216 graphic controller, 1218 display device, 1220 input / output controller, 1222 communication interface, 1224 storage device, 1226 DVD drive, 1227 DVD-ROM, 1230 ROM, 1240 input / output chip

Claims

A level identification department that identifies the security risk level of communication between internal communication sources and external communication destinations via the Internet at the target company,
A generation device including a display data generation unit that generates display data for displaying a communication object representing the communication in association with a risk object corresponding to the security risk level specified by the level specifying unit.
The level specifying unit identifies the security risk level of each communication between a plurality of internal communication sources and a plurality of external communication destinations via the Internet in the target company.
The display data generation unit generates display data for displaying a plurality of communication objects representing each of the communication in association with a risk object corresponding to the security risk level specified by the level specifying unit. , The generator according to claim 1.
The display data generation unit generates the display data for displaying the risk object in association with the communication object representing the communication whose security risk level is higher than a predetermined level, claim 1 or 2. The generator described in.
From claim 1, the display data generation unit generates the display data for displaying the risk object having a higher emphasis in association with the communication object indicating the communication having a higher security risk level. The generator according to any one of 3.
According to any one of claims 1 to 4, the display data generation unit generates display data to be displayed in association with the communication object, using a blowout object including a character string indicating the content of the risk as the risk object. The generator described.
The level specifying unit specifies the security risk level for the data transmitted from the communication source to the communication destination as the security risk level of the communication.
The display data generation unit generates the display data for displaying the communication source object representing the communication source in association with the risk object corresponding to the security risk level for the data transmitted from the communication source to the communication destination. The generator according to any one of claims 1 to 5.
The level specifying unit specifies the security risk level for the data transmitted from the communication destination to the communication source as the security risk level of the communication.
The display data generation unit generates the display data for displaying the communication destination object representing the communication destination in association with the risk object corresponding to the security risk level for the data transmitted from the communication destination to the communication source. The generator according to any one of claims 1 to 6.
The display data generation unit generates the display data for displaying the communication object in association with the risk object and the risk content object corresponding to the risk content in the communication indicated by the communication object. The generator according to any one of 1 to 7.
The level specifying unit determines the security risk of the communication based on the security measure level of the target company, the asset value of the data handled in the communication, and the frequency of occurrence of security accidents of the data handled in the communication. The generator according to any one of claims 1 to 8, which specifies a level.
The level specifying unit indicates, as the security risk level of the communication, a numerical value indicating the security measure level that becomes higher as the security measure level is higher, and the asset value that becomes higher as the asset value is higher. The generator according to claim 9, wherein a value obtained by multiplying a numerical value by a numerical value indicating the frequency of occurrence is specified.
The generator according to claim 9 or 10, wherein the level specifying unit determines the security measure level based on at least one of the company name of the target company, the years elapsed since its establishment, and the business content.
The generator according to claim 11, wherein the level specifying unit further determines the security measure level based on whether or not the data handled by the target company is subject to confidentiality of communication.
The generator according to claim 11 or 12, wherein the level specifying unit further determines the security measure level based on the number of data handled by the target company.
The generation according to any one of claims 11 to 13, wherein the level specifying unit determines the security measure level based on whether or not the data handled by the target company includes credit card information. apparatus.
The generation according to any one of claims 11 to 14, wherein the level specifying unit determines the security measure level based on whether or not the data handled by the target company includes My Number information. apparatus.
The generator according to any one of claims 11 to 15, wherein the level specifying unit determines the security measure level based on the occurrence status of data leakage handled by the target company.
A program for causing a computer to function as the generator according to any one of claims 1 to 16.
Level identification stage to identify the security risk level of communication between the internal communication source and the external communication destination via the Internet in the target company, and
Generation including a display data generation stage for generating display data for displaying a plurality of communication objects representing each of the plurality of communications in association with a risk object corresponding to the security risk level specified in the level specifying stage. Method.