公开(公告)号：US20230376607A1

公开(公告)日：2023-11-23

申请号：US18034536

申请日：2020-11-19

Applicant: NEC CORPORATION

Inventor： Junpei KAMIMURA ,  Kazuhiko ISOYAMA ,  Yoshiakai SHKAE

IPC: G06F21/57

CPC classification number: G06F21/577 ,  G06F2221/033

Abstract: In order to determine whether or not there is a security risk, based on an actual data flow in a system to be analyzed, an analysis apparatus includes: a receiving unit configured to receive history information related to operation history of a program operating in a system to be analyzed; a generating unit configured to generate data flow information indicating a path of data exchanged in the system to be analyzed, based on the history information; and a risk determining unit configured to perform a risk determining process for determining whether or not there is a security risk in the data flow information, based on a preset determination condition.