Information processing apparatus, information processing method, and program

1. An information processing apparatus comprising:

a memory storing one or more instructions; and

a processor configured to execute the one or more instructions to:

receive an input indicating that at least one countermeasure is selected from among a plurality of countermeasures against vulnerability;

read out terminal-specific countermeasure information, indicating a countermeasure applicable for each of a plurality of terminals against the vulnerability, from a storage that stores the terminal-specific countermeasure information, and based on assumption that the selected countermeasure is applied to the plurality of terminals, identify remaining terminals from among the plurality of terminals which are terminals that would be left with the vulnerability due to non-applicability of the selected countermeasure based on the read-out terminal-specific countermeasure information;

count a number of terminals identified as the remaining terminals; and

display a screen including first information indicating the number of remaining terminals,

wherein the processor is further configured to determine one or more combinations of countermeasures in which the number of the remaining terminals is the smallest on the basis of the terminal specific countermeasure information, and determine a combination from among the one or more combinations of countermeasures in which the number of countermeasures included in the combination is the smallest.

2. The information processing apparatus according to claim 1 ,

wherein the processor is further configured to output information for specifying each of the identified remaining terminals, in addition to the number of the identified remaining terminals.

3. The information processing apparatus according to claim 1 ,

wherein in a case where a plurality of countermeasures are selected, the processor is further configured to identify a terminal to which each of the selected plurality of countermeasures is applicable, on the basis of the terminal-specific countermeasure information, and identifies the remaining terminal using a logical sum of terminals identified for each of the countermeasures.

4. An information processing method performed by a computer, the method comprising:

receiving an input indicating that at least one countermeasure is selected from among a plurality of countermeasures against vulnerability;

reading out terminal-specific countermeasure information, indicating a countermeasure applicable for each of a plurality of terminals against the vulnerability, from a storage that stores the terminal-specific countermeasure information, and based on an assumption that the selected countermeasure is applied to the plurality of terminals, identifying remaining terminals from among the plurality of terminals which are terminals that would be left with the vulnerability due to non-applicability of the selected countermeasure based on the read-out terminal-specific countermeasure information;

counting a number of terminals identified as the remaining terminals; and

displaying a screen including first information indicating the number of remaining terminals;

wherein the information processing method further comprises determining one or more combinations of countermeasures in which the number of the remaining terminals is the smallest based on the terminal-specific countermeasure information, and determining a combination from among the one or more combinations of countermeasures in which the number of countermeasures included in the combination is the smallest.

5. A non-transitory computer readable medium storing a program for causing a computer to execute an information processing method, the information processing method comprising:

receiving an input indicating that at least one countermeasure is selected from among a plurality of countermeasures against vulnerability;

reading out terminal-specific countermeasure information, indicating a countermeasure applicable for each of a plurality of terminals against the vulnerability, from a storage that stores the terminal-specific countermeasure information, and based on an assumption that the selected countermeasure is applied to the plurality of terminals, identifying remaining terminals from among the plurality of terminals which are terminals that would be left with the vulnerability due to non-applicability of the selected countermeasure based on the read-out terminal-specific countermeasure information;

counting a number of terminals identified as the remaining terminals; and

displaying a screen including first information indicating the number of remaining terminals;

wherein the information processing method further comprises determining one or more combinations of countermeasures in which the number of the remaining terminals is the smallest based on the terminal-specific countermeasure information, and determining a combination from among the one or more combinations of countermeasures in which the number of countermeasures included in the combination is the smallest.

6. The information processing apparatus according to claim 1 ,

wherein the screen further includes second information indicating, as to each of the plurality of countermeasures, a number of terminals to which the countermeasure is applicable, and

wherein the processor is further configured to update the second information based on identification results of the remaining terminal.