Attack tree generation device, attack tree generation method, and computer readable medium

Abstract

A system dividing unit () divides a target system into a plurality of sub-systems. A root system selection unit () selects a sub-system in which a threat on security occurs, as a root system from among the plurality of sub-systems. A root tree generation unit () generates an attack tree of the root system, as a root tree. A descendant system selection unit () selects one sub-system or more located on an intrusion course to the root system, as one descendent system or more from among the plurality of sub-systems. A descendant tree generation unit () generates one attack tree or more corresponding to the one descendent system or more, as one descendent tree or more. A sub-attack tree integration unit () integrates the root tree and the one descendent tree or more, to thereby generate an attack tree of the target system.