Attack scenario generation apparatus, attack scenario generation method, and computer readable medium

Abstract

A diversion determination unit () compares a configurational element included in a system threat () with a configurational element included in a scenario threat () which is a threat corresponded to an analysis scenario (), where one attack scenario among a plurality of attack scenarios is used as the analysis scenario (). The diversion determination unit () determines based on a comparison result, whether or not the analysis scenario () can be diverted to the attack scenario indicating a process up to occurrence of the system threat (). When it is determined that the analysis scenario () can be diverted, a scenario diversion unit () generates a new attack scenario () indicating the process up to the occurrence of the system threat (), by diverting the analysis scenario ().