Patent 7797297 was granted and assigned to NEC Corporation on September, 2010 by the United States Patent and Trademark Office.
An information leakage analysis system is provided. The access route model input device 110 receives an access route model, which represents whether or not to what type of file a user is accessible and represents the corresponding access route. The setting information input device 130 receives the setting information for the verification-intended system 1010. The access route decider 1060 cross-checks an analysis-intended access route, acting as an information leakage decision criterion, and an input access route model. As a result of verification, the setting information identification means 2020 identifies the setting information corresponding to a model matched with to the analysis-intended access route. The information leakage countermeasure proposer 3040 extracts an information leakage countermeasure corresponding to the setting information from the information leakage countermeasure storage 3010 to displays it.