Attack scenario generation apparatus, attack scenario generation method, and computer readable medium
A diversion determination unit ( 110 ) compares a configurational element included in a system threat ( 21 ) with a configurational element included in a scenario threat ( 311 ) which is a threat corresponded to an analysis scenario ( 31 ), where one attack scenario among a plurality of attack scenarios is used as the analysis scenario ( 31 ). The diversion determination unit ( 110 ) determines based on a comparison result, whether or not the analysis scenario ( 31 ) can be diverted to the attack scenario indicating a process up to occurrence of the system threat ( 21 ). When it is determined that the analysis scenario ( 31 ) can be diverted, a scenario diversion unit ( 120 ) generates a new attack scenario ( 32 ) indicating the process up to the occurrence of the system threat ( 21 ), by diverting the analysis scenario ( 31 ).
1 . An attack scenario generation apparatus that generates an attack scenario indicating a process up to occurrence of a security threat in a subject system, the attack scenario generation apparatus comprising:
an analysis memorandum database to store a plurality of attack scenarios which is calculated in advance, and each of which consists of attack activities listed in chronological order and each of which is corresponded to a threat; and
processing circuitry:
to specify a configurational element of a system threat which is a threat that occurs in the subject system and which is a threat for which a new attack scenario is to be generated, and a subject element that includes a system element string which is an element string indicating an order of system configurational elements in the subject system up to the system threat, and to obtain one attack scenario among the plurality of attack scenarios stored in the analysis memorandum database, as an analysis scenario;
to obtain the system element string and a scenario element string of a calculated element, the calculated element being generated from one of the stored plurality of attack scenarios and including the scenario element string which is an element string corresponding to attack activities that consist of the analysis scenario and configurational elements of a scenario threat which is a threat corresponded to the analysis scenario;
when all configurational elements are equal, and the system element string and the scenario element string are different, between the system threat and the scenario threat, to determine whether or not configurational elements of each of the different system element string and scenario element string are equal, and when it is determined that all configurational elements of the different system element string and scenario element string are equal, to determine that the analysis scenario can be diverted; and
when it is determined that the analysis scenario can be diverted, to generate the new attack scenario corresponding to the system threat, by replacing the element name of the scenario element string, with the element name of the system element string.
2 . The attack scenario generation apparatus according to claim 1 , wherein
the processing circuitry compares identity of system configurational elements included in the subject system, and stores a result of the comparison as a comparison result.
3 . The attack scenario generation apparatus according to claim 2 , wherein
the comparison result is tabular information, and
when the system configurational elements are equal, the processing circuitry sets in the comparison result, a setting column of setting the result of the comparison between the equal system configurational elements, as equal information indicating that the system configurational elements are equal.
4 . An attack scenario generation method used for an attack scenario generation apparatus that generates an attack scenario indicating a process up to occurrence of a security threat in a subject system, wherein
the attack scenario generation apparatus includes an analysis memorandum database to store a plurality of attack scenarios which is calculated in advance, and each of which consists of attack activities listed in chronological order and each of which is corresponded to a threat, and
the attack scenario generation method comprising:
specifying a configurational element of a system threat which is a threat that occurs in the subject system and which is a threat for which a new attack scenario is to be generated, and a subject element that includes a system element string which is an element string indicating an order of system configurational elements in the subject system up to the system threat, and obtaining one attack scenario among the plurality of attack scenarios stored in the analysis memorandum database, as an analysis scenario,
obtaining the system element string and a scenario element string of a calculated element, the calculated element being generated from one of the stored plurality of attack scenarios and including the scenario element string which is an element string corresponding to attack activities that consist of the analysis scenario and configurational elements of a scenario threat which is a threat corresponded to the analysis scenario, and
when all configurational elements are equal, and the system element string and the scenario element string are different, between the system threat and the scenario threat, determining whether or not configurational elements of each of the different system element string and scenario element string are equal, and when it is determined that all configurational elements of the different system element string and scenario element string are equal, determining that the analysis scenario can be diverted, and
when it is determined that the analysis scenario can be diverted, generating the new attack scenario corresponding to the system threat, by replacing the element name of the scenario element string, with the element name of the system element string.
5 . A non-transitory computer readable medium storing an attack scenario generation program used for an attack scenario generation apparatus that generates an attack scenario indicating a process up to occurrence of a security threat in a subject system, wherein
the attack scenario generation apparatus includes an analysis memorandum database to store a plurality of attack scenarios which is calculated in advance, and each of which consists of attack activities listed in chronological order and each of which is corresponded to a threat, and
the attack scenario generation program causing the attack scenario generation apparatus which is a computer to execute:
a diversion determination process to specify a configurational element of a system threat which is a threat that occurs in the subject system and which is a threat for which a new attack scenario is to be generated, and a subject element that includes a system element string which is an element string indicating an order of system configurational elements in the subject system up to the system threat, and to obtain one attack scenario among the plurality of attack scenarios stored in the analysis memorandum database, as an analysis scenario, to obtain the system element string and a scenario element string of a calculated element, the calculated element being generated from one of the stored plurality of attack scenarios and including the scenario element string which is an element string corresponding to attack activities that consist of the analysis scenario and configurational elements of a scenario threat which is a threat corresponded to the analysis scenario, and when all configurational elements are equal, and the system element string and the scenario element string are different, between the system threat and the scenario threat, to determine whether or not configurational elements of each of the different system element string and scenario element string are equal, and when it is determined that all configurational elements of the different system element string and scenario element string are equal, to determine that the analysis scenario can be diverted, and
when it is determined that the analysis scenario can be diverted, a scenario diversion process to generate the new attack scenario corresponding to the system threat, by replacing the element name of the scenario element string, with the element name of the system element string.