System design device, system design method, and storage medium

Abstract

First configuration information is acquired, which includes information on a topology using components of any one component of nodes in a computer system and an edge indicating a relationship between nodes. A configuration of a topology of first configuration information is concretized. Whether or not a security threat event may occur in a node or an edge in the configuration of the concretized topology is determined, and configuration information is generated in which information indicating a relationship between the configuration component in which a threat may occur if the threat event may occur and another configuration component in which another threat contributing to the occurrence of the threat may occur, is added. Whether the content of each threat is concrete or abstract in a threat chain path based on the relationship between the threat in the configuration information and another threat that contributes to the occurrence of the threat, is determined, and whether or not a design is insecure if the content of the threat is concrete or if it is abstract, is determined.