Attack means evaluation apparatus, attack means evaluation method, and computer readable medium

Abstract

An attack means evaluation apparatus () evaluates an attack means used in a cyberattack. A score value calculation unit () obtains a plurality of attack means, and for each attack means of the plurality of attack means, calculates a score value that shows validity of an attack on an attack target system. A means selection unit () selects an attack means that is valid as an attack on the attack target system from the plurality of attack means using the score value of each attack means of the plurality of attack means and a threshold (). A means execution unit () executes the attack means that is selected on the attack target system, and verifies whether or not an attack for achieving a final aim of the cyberattack is possible based an execution result of the attack means that is selected.