VULNERABILITY ASSESSMENT DEVICE, VULNERABILITY ASSESSMENT METHOD AND VULNERABILITY ASSESSMENT PROGRAM

摘要

A vulnerability assessment device (10) obtains, from a web rehosting device, the content and URL of each of a plurality of websites after rehosting by the web rehosting device. Thereafter, on the basis of the content and URL of the plurality of obtained rehosted websites, the vulnerability assessment device (10) identifies one or more of the following: the URL set for each of the plurality of rehosted websites; the presence/absence of a setting for writing a Cookie in the plurality of websites; and the presence/absence of a code for accessing a prescribed browser function of the plurality of websites. The vulnerability assessment device (10) assesses an attack which could occur as a result of rehosting the plurality of websites by using the identified results, and outputs the assessment results.