Priority determination system and priority determination method

1 . A priority determination system, comprising:

a processor; and

a memory including a program that, when executed by the processor, causes the processor to:

obtain information indicating a vulnerability related to an electronic control unit (ECU);

extract the ECU on which the vulnerability has influence;

calculate at least two risk values among an ECU risk value indicating a level of risk of a threat to the ECU caused by the vulnerability, a vehicle type risk value indicating a level of risk to a vehicle type equipped with the ECU to which the threat is caused by the vulnerability, and a spread risk value indicating a level of risk when the threat caused by the vulnerability is spread to the vehicle type;

determine, based on the at least two risk values, a priority of a countermeasure for the vulnerability; and

output the priority determined for each of a plurality of vulnerabilities, the plurality of vulnerabilities each being the vulnerability,

wherein the processor further calculates anticipated damage when the threat occurs or a response time required for responding to the threat, based on vehicle type management-related information, and calculates the spread risk value based on the anticipated damage or the response time.

2 . A priority determination system, comprising:

a processor; and

a memory including a program that, when executed by the processor, causes the processor to:

obtain information indicating a vulnerability related to a first electronic control unit (ECU) and a second ECU on which the vulnerability has influence;

calculate at least two risk values among an ECU risk value indicating a level of risk to the second ECU on which the vulnerability has influence, a vehicle type risk value indicating a level of risk to a vehicle type equipped with the second ECU on which the vulnerability has influence, and a spread risk value indicating a level of risk when a threat caused by the vulnerability is spread to the vehicle type;

determine, based on the at least two risk values, a priority of a countermeasure for the vulnerability; and

output the priority determined for each of one or more vulnerabilities, the one or more vulnerabilities each being the vulnerability,

wherein the processor further calculates anticipated damage when the threat occurs or a response time required for responding to the threat, based on vehicle type management-related information, and calculates the spread risk value based on the anticipated damage or the response time.

3 . The priority determination system according to claim 1 , wherein

the vehicle type management-related information includes a total number of vehicles of the vehicle type shipped or a response difficulty of the vehicle type.

4 . The priority determination system according to claim 3 , wherein

the total number of vehicles shipped is a total number of vehicles of the vehicle type shipped on a country basis or an area basis.

5 . The priority determination system according to claim 3 , wherein

the total number of vehicles shipped is a total number of vehicles in operation among vehicles of the vehicle type shipped.

6 . The priority determination system according to claim 1 , wherein

the processor calculates the ECU risk value or the vehicle type risk value, based on a method that is in conformity with a standard.

7 . The priority determination system according to claim 1 , wherein

the processor determines at least two coefficients each of which is for weighting a different one of the at least two risk values, and determines, based on the at least two risk values weighted by the at least two coefficients, the priority of the countermeasure for the vulnerability.

8 . The priority determination system according to claim 2 , wherein

the processor determines at least two coefficients each of which is for weighting a different one of the at least two risk values, and determines, based on the at least two risk values weighted by the at least two coefficients, the priority of the countermeasure for the vulnerability.

9 . The priority determination system according to claim 8 , wherein

the one or more vulnerabilities are a plurality of vulnerabilities when a total number of the one or more vulnerabilities is plural, the plurality of vulnerabilities each being the vulnerability.

10 . The priority determination system according to claim 7 , wherein

when the plurality of vulnerabilities include two or more vulnerabilities having a same priority determined based on the at least two risk values weighted by the at least two coefficients, the processor gives a highest priority to, among the two or more vulnerabilities, a vulnerability having a highest risk value among risk values each of which is one of the at least two risk values and has been weighted by a highest coefficient among the at least two coefficients.

11 . The priority determination system according to claim 1 , wherein

each of the at least two risk values has a different one of at least two levels of severity determined in advance, and

when the plurality of vulnerabilities include two or more vulnerabilities having a same priority determined based on the at least two risk values, the processor gives a highest priority to, among the two or more vulnerabilities, a vulnerability having a highest risk value among risk values each of which is one of the at least two risk values and has a highest level of severity among the at least two levels of severity.

12 . The priority determination system according to claim 2 , wherein

the one or more vulnerabilities are a plurality of vulnerabilities when a total number of the one or more vulnerabilities is plural, the plurality of vulnerabilities each being the vulnerability,

each of the at least two risk values has a different one of at least two levels of severity determined in advance, and

when the plurality of vulnerabilities include two or more vulnerabilities having a same priority determined based on the at least two risk values, the processor gives a highest priority to, among the two or more vulnerabilities, a vulnerability having a highest risk value among risk values each of which is one of the at least two risk values and has a highest level of severity among the at least two levels of severity.

13 . The priority determination system according to claim 1 , wherein

the processor calculates the at least two risk values for the ECU on which the vulnerability has influence, the ECU being one ECU, and

the processor determines the priority of the countermeasure for the ECU on which the vulnerability has influence.

14 . The priority determination system according to claim 1 , wherein

the processor calculates the at least two risk values for a combination of the ECU on which the vulnerability has influence and the vehicle type equipped with the ECU, the ECU being one ECU, the vehicle type being one vehicle type, and

the processor determines the priority of the countermeasure for the combination on which the vulnerability has influence.

15 . A priority determination method that is performed by a priority determination system, the priority determination method comprising:

obtaining information indicating a vulnerability related to an electronic control unit (ECU);

extracting the ECU on which the vulnerability has influence;

calculating at least two risk values among an ECU risk value indicating a level of risk of a threat to the ECU caused by the vulnerability, a vehicle type risk value indicating a level of risk to a vehicle type equipped with the ECU to which the threat is caused by the vulnerability, and a spread risk value indicating a level of risk when the threat caused by the vulnerability is spread to the vehicle type;

determining, based on the at least two risk values, a priority of a countermeasure for the vulnerability; and

outputting the priority determined for each of a plurality of vulnerabilities, the plurality of vulnerabilities each being the vulnerability,

wherein the priority determination method further comprises:

calculating anticipated damage when the threat occurs or a response time required for responding to the threat, based on vehicle type management-related information, and calculating the spread risk value based on the anticipated damage or the response time.

16 . A priority determination method that is performed by a priority determination system, the priority determination method comprising:

obtaining information indicating a vulnerability related to a first electronic control unit (ECU) and a second ECU on which the vulnerability has influence;

calculating at least two risk values among an ECU risk value indicating a level of risk to the second ECU on which the vulnerability has influence, a vehicle type risk value indicating a level of risk to a vehicle type equipped with the second ECU on which the vulnerability has influence, and a spread risk value indicating a level of risk when a threat caused by the vulnerability is spread to the vehicle type;

determining, based on the at least two risk values, a priority of a countermeasure for the vulnerability; and

outputting the priority determined for each of one or more vulnerabilities, the one or more vulnerabilities each being the vulnerability,

wherein the priority determination method further comprises:

calculating anticipated damage when the threat occurs or a response time required for responding to the threat, based on vehicle type management-related information, and calculating the spread risk value based on the anticipated damage or the response time.