CYBER THREAT EVALUATION APPARATUS, CYBER THREAT EVALUATION PROGRAM AND CYBER THREAT EVALUATION METHOD

摘要

To determine importance of attack information depending on an organization using cyber threat intelligence (CTI) information, the attack information assembling motivation, an objective, a characteristic, a modus or the like of an attacker.SOLUTION: A cyber threat evaluation apparatus 1 comprises a first acquisition unit 11 that acquires campaign information 33 provided as cyber threat intelligence for each cyber attack event. The cyber threat evaluation apparatus 1 comprises a common keyword extraction unit 13 that extracts commonality between the acquired campaign information 33 and organization information 21 of a cyber attack defending side organization. The cyber threat evaluation apparatus 1 comprises a threat degree calculation unit 14 that calculates an influence degree for the organization for the cyber attack event on the basis of the extracted commonality.SELECTED DRAWING: Figure 1