JP6249474B2 - Security state visualization method, program, and system - Google Patents

Description

  The present invention relates to a security state visualization method, program, and system on an SNS (social network service).

  SNS is currently used in various fields (see, for example, Patent Document 1). Such a security measure on the SNS is mainly a method in which the user himself / herself takes a measure for each service. For example, the security measure is executed by setting an information disclosure range by setting the SNS.

JP 2011-227846 A

Since the security state depends on the user's own settings, it is not a stable security measure. In addition, even if the security measures on the SNS are perfect, if the security measures of the equipment (for example, PC) used are not taken, there is a possibility that information will be leaked by the SNS unintentionally. There is. Furthermore, even if the security measures on the devices used and the SNS are thorough, if the security measures of another user in contact with the SNS are insufficient, problems such as information leakage due to impersonation may occur. There is.
In such a situation, it is impossible to observe a technology that allows the user himself to recognize the security state on the SNS.

  An object of the present invention is to solve the above-described problems, and provides a security state visualization method, program, and system in which the user can recognize the security state on the SNS.

The security status visualization program according to an aspect of the present invention is based on information indicating a disclosure range of writing on the SNS of the first user and client information of the first user. Processing to evaluate the degree,
The security risk of the second user is evaluated based on the information indicating the disclosure range of the writing on the SNS of the second user registered to receive the writing and the client information of the second user. Processing to
A process for evaluating the security status of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Processing for displaying information indicating the security state;
Is executed on the computer.

The security status visualization method according to an aspect of the present invention is based on information indicating a disclosure range of writing on the SNS of the first user and client information of the first user. A process of evaluating the degree,
The security risk of the second user is evaluated based on the information indicating the disclosure range of the writing on the SNS of the second user registered to receive the writing and the client information of the second user. And a process of
Evaluating the security status of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Displaying information indicating the security status;
Is provided.

The security status visualization system according to an aspect of the present invention is based on information indicating a disclosure range of writing on the SNS of the first user acquired from a server and client information of the first user. A process of assessing the user's security risk,
Security of the second user based on information indicating a public range of writing on the SNS of the second user registered to receive the writing acquired from the server and client information of the second user A process to evaluate the risk,
A process for evaluating the security status of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Processing to display information indicating the security state on the screen display unit;
The visualization processing part which performs is provided.

  According to the present invention, it is possible to provide a security state visualization method, program, and system in which a user can recognize the security state on the SNS.

It is the block diagram which showed the outline of the security status visualization system by embodiment. It is an image figure of a screen display part. (A) And (b) is a figure explaining the tweet browsing state etc. of the user who is making the tweet public and the user who is not making the tweet public. (C) is a figure explaining the tweet browsing state etc. of the user who used the official client, and the user who used the unofficial client. (A) And (b) is a figure explaining handling of a user's direct message. It is a flowchart which shows the processing flow which evaluates a user's security risk degree. It is a flowchart which shows the processing flow which evaluates a security risk of a follower. It is a flowchart which shows the flow until it evaluates the security state on SNS of the present user, and displays on a screen display part.

  A security status visualization method, program, and system according to an embodiment of the present invention will be described. However, the present invention is not limited to the following embodiment. In addition, for clarity of explanation, the following description and drawings are simplified as appropriate. In the following description, although twitter (registered trademark) is mentioned as an example of SNS, other SNS may be used.

  FIG. 1 is a block diagram showing an outline of a security state visualization system according to the present embodiment. The security status visualization system 1 includes a communication device 2 used by a user, a twitter server 3, and an external server 4.

  The communication device 2 includes an arithmetic processing unit 2a, a screen display unit 2b, and an information input unit 2c, and is a device having an external network communication function (external communication function) such as a mobile phone, a smartphone, or a personal computer. is there. The communication device 2 executes a twitter, a security state visualization process described later, and the like by the arithmetic processing unit 2a reading out and processing a client and an authentication application from a storage unit (not shown).

  The screen display unit 2b is a specific example of a display unit included in the communication device 2, and displays arbitrary information such as information on an authentication application. The screen display unit 2b is configured by, for example, a liquid crystal display device, an organic or inorganic EL display device, or the like. FIG. 2 is an image diagram of the screen display unit 2b. In the illustrated example, information indicating a security state evaluated by executing the authentication application is displayed. Note that information that can be displayed by the communication device 2 is not limited to information indicating a security state.

  The information input unit 2c is a specific example of information input / selection means, and has a function of performing an operation by a user and outputting input information corresponding to the operation. The information input unit 2c includes input devices such as a keyboard and mouse of a personal computer, a button of a mobile phone, and a touch panel. Using the information input unit 2c, the user can input arbitrary information such as an account name, a password, and the presence / absence of twitter tweet disclosure in the authentication application. The information input by the information input unit 2c is managed by the acquired information management unit.

  The authentication application (security state visualization program) is one of the functions executed by the arithmetic processing unit 2a, and is based on information indicating the user's security risk and information indicating the follower's security risk. In addition to the visualization processing unit that evaluates the user's twitter security status, the acquisition information management unit that manages the account-related information acquired from the twitter server 3 and the information input from the information input unit 2c, the visualization processing unit, and acquisition An internal DB unit that manages information used by the information management unit and the like is provided. The authentication application according to the embodiment of the present invention displays information indicating the evaluated security state on the screen display unit 2b. This makes it possible to easily recognize the security state on twitter.

  Specifically, the authentication application operates in the arithmetic processing unit 2a as a function (or service) of an arbitrary device such as a WEB (World Wide Web) application, a smartphone application, and a mobile phone application. Further, the function executed by the authentication application is not limited to the security state visualization process described in the present invention, and may have other functions.

  The authentication application is a program that links with the twitter client, and works correctly only when linked with the twitter client. In addition, the user account of twitter managed by the user by executing the API (Application Program Interface) that can be executed with the authority (read authority, read / write authority) set when registering as a linked application in the twitter client Related information can be acquired.

  The authentication application performs network communication with the twitter server 3 using the external communication function of the communication device 2. Since the authentication application cooperates with the twitter client, a screen that prompts the user to obtain an access token by OAuth authentication is displayed via the screen display unit 2b (the screen to be displayed is arbitrary). When the user performs an authentication procedure, a screen asking whether to permit access to the authentication application is displayed on the screen display unit 2b of the communication device 2 using the authentication application. When the user selects “permit”, the authentication application can acquire user account related information. Note that the authentication method is appropriately changed depending on the SNS used by the user.

  The visualization processing unit creates information indicating the security state to be displayed on the screen display unit 2b based on the information indicating the security risk level of the user and the information indicating the security risk level of the follower determined by the security state. .

  Specifically, the visualization processing unit includes a security state evaluation unit, and the security state evaluation unit acquires information necessary for security state evaluation from the acquired information management unit and the internal DB unit, and the security risk level of the user. And the security risk of the follower and the security state on the user's twitter based on the above two points.

  The acquired information management unit manages information acquired from the twitter server 3 using the external communication function and information input by the user using the information input unit 2c. The information managed by the acquired information management unit is not limited to the information required by the visualization processing unit.

  The internal DB unit manages internal information necessary for the visualization processing unit to evaluate the security state. Further, the internal DB unit periodically communicates with the external server 4 by using the external communication function of the communication device 2, and acquires security state evaluation information from the external server 4. In addition, information (for example, client information used by the user) analyzed from information acquired by the security state evaluation unit from the acquired information management unit is periodically transmitted to the external server 4.

  Next, a user's tweet browsing state on the twitter client will be described in detail with reference to FIG. FIG. 3A and FIG. 3B are diagrams for explaining the tweet browsing state and the like of a user who makes a tweet public and a user who does not make the tweet public. FIG. 3C is a diagram for explaining a tweet viewing state and the like of a user who uses an official client and a user who uses an unofficial client.

  As shown in FIGS. 3 (a) and 3 (b), the user A is in a follow state (registered to receive tweets) and the user is unfollowed to a tweet public user and a tweet private user. A user B who is in a state and a user C who is not using twitter are displayed.

  As for users who tweet publicly, all users can view them. Only the user C is in a state where only browsing is possible. This is because the operation that is possible only on twitter cannot be used because the twitter is not registered.

  In this way, users who are tweeting publicly can view, quote and spread tweets regardless of whether they follow or not, and the risk of tweet leakage is very high, The security level will be significantly reduced. On the other hand, for users who keep their tweets private, only the users who are in the follow state can view the tweets, so the risk of spreading tweets is extremely low. Quotation / spreading becomes impossible, so the security level can be set high.

  However, as shown in FIG. 3C, an exception may occur depending on the client used by the twitter registered user. Originally, tweets of private users can not be quoted / spread as shown in Fig. 3 (b), but when using an unofficial client, etc., it is possible to quote tweets regardless of whether the tweets are public or private. Because it becomes possible, tweets may be leaked from the quoted content.

  Also, if a tweet is quoted and spread, the user cannot determine who, when, what form, and how much the tweet has spread. For this reason, the twitter server tells you which client you use to tweet, and if you have spread the tweet (if you have made it private) It is necessary to analyze from the content of the tweet acquired from 3 and reflect it in the security risk of the follower.

  FIGS. 4A and 4B are diagrams for explaining the handling of the user's direct message (DM). Direct message is a message function that can be used only when the user follows and is also being followed by the other party, and the contents can be seen by a third party regardless of whether the account tweets are public or private. Because there is no (except the creator of the client in use), it is a highly secure function.

  However, if the other party's communication device is infected with a virus, or if the other party's account password is illegally used, a direct message that is malicious to the user, There is a possibility that a URL (Uniform Resource Locator) that moves to the link destination is sent. Therefore, it is necessary to refer to the contents of past direct messages, etc., determine the risk level of the user who sent the direct message, and reflect it in the security risk level of the follower.

  Next, a method for evaluating the user's security risk will be described in detail. FIG. 5 is a flowchart showing a processing flow for evaluating the security risk of the user.

  In step S411, the authentication application displays on the screen display unit 2b an input screen for tweet public / private information and a password set in twitter, and prompts the user to input information using the information input unit 2c. When the user inputs information using the information input unit 2c, the authentication application causes the acquired information management unit to manage the input information.

  In addition, the authentication application sends the input information to the security state evaluation unit for the user's security risk evaluation. When the information sent to the security status evaluation unit has changed from the past status, the security status evaluation unit indicates the content of the change and the date and time of the change, and indicates the number of times the security status evaluation unit has changed. The internal DB unit including information is managed.

  In step S412, the security state evaluation unit causes the acquisition information management unit to acquire information on the number of followers / followers of the user from the twitter server 3. Based on the acquired information, the security status assessment unit compares the users that are following and the users that are being followed, and the users that are following each other, the users that are following only the users, and those that are followed only by the other party. Divided into users. The security state evaluation unit causes the internal DB unit to manage information indicating the number of each of the divided information together with information indicating the analyzed date and time.

  In step S413, the security state evaluation unit causes the acquisition information management unit to acquire the user's tweet information from the twitter server 3.

  In step S414, the security state evaluation unit analyzes the tweet information acquired in step S413, and analyzes the client information used by the user at the time of tweeting. At this time, when a plurality of clients are used, the security state evaluation unit also analyzes the usage frequency and the usage count.

  Furthermore, in step S414, the security state evaluation unit compares the client information used by the analyzed user with the risk information for each account managed by the internal DB unit. The security state evaluation unit evaluates the security risk of the user's client from the collated information.

  In step S415, the security state evaluation unit analyzes the tweet information acquired in step S413, and determines whether there is a tweet with past position information. Then, when there is a tweet with location information, the security state evaluation unit analyzes the location information, and analyzes the distribution of the published location information and the number of times by location.

  In step S416, the security state evaluation unit causes the acquisition information management unit to acquire the tweeted content and the direct message transmitted by the twitter server 3 and analyze the tweeted content and the content of the direct message. When the URL is included in the analyzed content, the security state evaluation unit communicates with the external server 4 and checks the link destination of the URL.

  In step S417, the security state evaluation unit evaluates the user's security risk based on the contents analyzed in steps S411 to S416.

  Here, if the user has set the tweet public / private information input in step S411 to be private, the user's tweet can be viewed only by the follower permitted by the user, so the risk of tweet spreading is extremely high. Lower. However, if the number of “followers” of the tweet input in step S412 is large, there is a high possibility that the number of viewers will be increased or malicious users will be included.

  If there are many tweets with images attached in the tweet information confirmed in step S413, there is a risk that images that are not desired to be spread will be spread by followers.

  With respect to the client information analyzed in step S414, if the client is not a Twitter official one, the creator of the client can confirm the contents even if his / her tweet is not disclosed. In addition, the contents of the direct message can be confirmed in the same manner. Furthermore, since the creator of the client can acquire the user's password and the like at the time of user authentication performed when using the client, there is a high possibility that the account will be hijacked. For this reason, when using a client whose safety is uncertain, the user's security risk is greatly increased.

  If the user frequently tweeted with location information about the location information setting of the tweet analyzed in step S415, there is a possibility that the user's action range or residence will be specified by the person viewing the tweet. This is a big security risk.

  In step S416, the user's tweet / direct message is analyzed, and if a tweet with a malicious link destination is made without permission, the possibility that the user's account has been hijacked is extremely high. It becomes a big problem.

  In consideration of the above-mentioned fears, a method for evaluating the security risk level of a user sets parameters based on the analysis contents in steps S411 to S416, and evaluates them from the values. Details of the parameters set in each step are shown in Table 1.

  If there is even one item with the parameter value “3”, the security state evaluation unit evaluates that the user's security risk is high. If there are two items whose parameter value is “2”, the security state evaluation unit evaluates that the security risk is medium and the rest are low. However, the number of followers to be analyzed in step S412 and step S413 and the tweets attached to the image are not used as evaluation conditions, and the security state evaluation unit displays that there is a risk of diffusion on the screen display unit 2b.

  The security state evaluation unit causes the internal DB unit to manage information indicating the security risk of the evaluated user together with information indicating the date and time of evaluation. Moreover, when the information which shows the past evaluation result is managed by the internal DB part, a security state evaluation part compares with the said evaluation result, and displays a difference on the screen display part 2b. Here, only the information indicating the latest evaluation result is managed by the internal DB unit.

  Next, a method for evaluating the security risk of a follower will be described in detail. FIG. 6 is a flowchart showing a processing flow for evaluating the security risk of a follower.

  In the security risk evaluation of FIG. 6, the security state evaluation unit acquires follower information from the user information acquired from the twitter server 3 by the acquisition information management unit, and analyzes the account related information of all followers. FIG. 6 illustrates a procedure for analyzing one follower account.

  In step S511, the security state evaluation unit causes the acquisition information management unit to acquire message information (reply information) addressed to the user from the twitter server 3, and analyzes the content of the message. If the URL contains a URL, the security status evaluation unit communicates with the external server 4 to check the URL link destination. If the link destination is a malicious link destination, the security status evaluation unit The internal DB unit manages information indicating the name of the account that transmitted the message and information indicating the time.

  In step S512, the security state evaluation unit causes the acquisition information management unit to acquire the account related information from the twitter server 3, and analyzes the tweet disclosure / non-disclosure setting based on the account related information. In addition, in the case of a user who has been disclosed or not disclosed in the past, the security state evaluation unit records the time and number of times of change and causes the internal DB unit to manage it.

  In step S513, the security state evaluation unit acquires information indicating the number of followers / followers of the account based on the account related information. Further, the security state evaluation unit calculates the difference between the number of accounts being followed and the number of accounts being followed, and causes the internal DB unit to manage information indicating the calculation result.

  In step S514, the security state evaluation unit calculates the increase / decrease in follow / follower based on the information indicating the difference between the number of following accounts and the number of following accounts managed by the internal DB unit. The security state evaluation unit causes the internal DB unit to manage information indicating the calculation result for each date and time. In addition, when calculating the increase / decrease, the security status evaluation unit causes the internal DB unit to manage only the current information without performing the calculation when there is no past information to be compared (for a newly followed user). .

  In step S515, the security state evaluation unit analyzes the client information used when making a tweet based on the account related information. As the analysis method, a method substantially equivalent to step S414 in FIG. 5 can be used.

  In step S516, the security state evaluation unit calculates the number of tweets of the account to be analyzed based on the account related information. The security state evaluation unit divides the number of tweets into information indicating the number per day and information indicating the total number (from the time of account acquisition to the present), and causes the internal DB unit to manage each information. By the way, the number per day is a value from 24 hours before to information acquisition.

  In step S517, the security state evaluation unit causes the acquisition information management unit to acquire account tweet information from the twitter server 3, and analyzes the content of the tweet. The analysis target is, for example, the latest 20 items from the latest tweet of the account. However, the number of analysis targets is not particularly limited. If the user to be analyzed does not tweet, the analysis is not performed. In addition, in the case of a user who is a follower of the user but who is not following him, the content of the tweet cannot be acquired, and thus data is not acquired in this step.

  In step S518, the security state evaluation unit calculates how many times quotes (official retweets and informal retweets) have been made in the account to be analyzed from the account related information. In the case of informal RT, there is no method to search by API, so the security status evaluation unit analyzes whether there are characters attached to the tweet quote such as “RT” or “QT” in the tweet. To calculate the number of citations. In addition, the security state evaluation unit calculates how many times the account to be analyzed quotes its tweet. The security state evaluation unit causes the internal DB unit to manage information indicating the calculation result. Note that the method of analyzing whether or not there is a citation of a tweet is appropriately changed according to the SNS used by the follower.

  Here, when the analysis is performed in step S518, the security status evaluation unit, when the citation of the tweet is performed when the user's account is set to be private, the account related information used when the tweet is performed. Are managed by the internal DB unit.

  In step S519, the security state evaluation unit analyzes whether or not an account to be analyzed exists from the account related information at the time of the previous analysis. If the account is newly added in this analysis, the process proceeds to step S524. If the account exists from the previous analysis, the process proceeds to step S520.

  In step S520, the security state evaluation unit analyzes whether or not the user has received a direct message in the past from the account being analyzed. If the user has not received a direct message in the past, the process proceeds to step S524. If the user has received a direct message in the past, the process proceeds to S521.

  In step S521, the security state evaluation unit analyzes the content of the received direct message. As the analysis method, the same method as in step S511 can be used.

  In step S522, the security state evaluation unit determines a transition destination based on the result of analyzing the content of the direct message in step S521. If the URL of the malicious site is pasted in the analysis in step S521, the security state evaluation unit transitions to step S523. If there is no problem by analyzing the contents of the direct message, the security status evaluation unit proceeds to step S524.

  When the process proceeds to step S523, it is possible to determine that the user under analysis is a user who has a high possibility that the account is hijacked or a device being used (for example, a mobile phone, a smartphone, or a PC) is infected with a virus. The security state evaluation unit causes the internal DB unit to manage the account information being analyzed and information indicating the date and time of analysis.

  In step S524, the security state evaluation unit compares the information analyzed in steps S511 to S518 with the information analyzed in step S521, and evaluates the security risk of the user.

  Here, it is possible that an account that contains a URL for transitioning to a malicious site in the message addressed to itself or the transmitted direct message in step S511, step S521, or the like may be infected with a virus or the account is hijacked. Since there is a possibility that it has been performed, the security state evaluation unit causes the internal DB unit to manage it as an account with a high risk of virus infection.

  In step S513, in the case of a user who makes a tweet private, even if his tweet is quoted, it is unlikely that the tweet will be quoted again, so it can be determined that the user has a low risk of tweet diffusion. However, even if the user keeps the tweet private, if the number of followers is large (confirmed in step S513), or if the number of follow / followers is large (confirmed in step S514), quote the tweet. The risk of spreading increases to some extent because the number of people who browse can increase when retweeting.

  Accounts with a high risk of spreading because there is a possibility that the probability that one's tweet will be quoted may be high even if the number of tweets is large in step S516 or in the case of an account that has been judged that the number of citations in tweet is large in step S518. It can be judged.

  In the case of a user using a client other than the official application regarding the client in use confirmed in step S515, information may leak to the creator of the client. Among non-official applications, personally created clients are even more dangerous. In addition, some unofficial clients can quote and retweet private user tweets that cannot be quoted, and using such a client greatly increases the risk of spreading tweets.

  Some clients are used not only on mobile devices (for example, smartphones, mobile phones, etc.) and personal computers, but also on web sites such as news sites and blogs. In the case of this client, there is a high possibility that the content of the tweet will be released not only on twitter but also on the posted WEB, so the risk of spreading the tweet on the WEB also increases.

  In consideration of the above-mentioned fears, the method for evaluating the security risk of a follower sets parameters based on the analysis contents of steps S511 to S523, and evaluates them from the values. Details of parameters set in each step are shown in Table 2.

  The security state evaluation unit causes the internal DB unit to manage information indicating the security risk of the evaluated user together with information indicating the date and time of analysis for each user. If the information indicating the security risk of the same account is already managed in the internal DB unit, it is compared with the latest evaluation result and the difference is displayed on the screen display unit 2b. Further, only the information indicating the latest evaluation result is managed by the internal DB unit.

  Next, the flow from the evaluation of the security risk on the SNS of the current user based on the information indicating the security risk evaluated in the flowcharts of FIGS. 5 and 6 to the display on the screen display unit 2b will be described. . FIG. 7 is a flowchart showing the flow from the evaluation of the security status of the current user on the SNS based on the information evaluated in the flowcharts of FIGS. 5 and 6 to the display on the screen display unit 2b.

  First, based on the user's security risk (flowchart in FIG. 5) and the follower's security risk (flowchart in FIG. 6), in step S611, the security state evaluation unit evaluates the security state on the user's SNS. .

  The security state evaluation method is evaluated in four stages of high, medium, medium low, and low by combining the security risk evaluation result of the user and the security risk evaluation result of the follower. Details of the evaluation method are shown in Table 3.

  The security state evaluation unit causes the internal DB unit to manage information indicating the latest evaluation result evaluated in step S611. At this time, if the information indicating the past evaluation result has already remained in the internal DB unit, the information indicating the latest evaluation result is overwritten with the information indicating the past evaluation result and stored.

  In step S612, the security state evaluation unit converts the information indicating the evaluation result in step S611 into display information on the screen display unit 2b. At this time, the display information includes the evaluation result of the user's security risk, the evaluation result of the follower's security risk, and the security state on the user's SNS comprehensively evaluated from the above two points. is there.

  When displaying the display information, the internal DB unit searches whether information indicating the previous evaluation result is managed. When information indicating the previous evaluation result remains as a result of the search, the security state evaluation unit compares the latest evaluation result with the previous evaluation result, and information indicating the comparison result is also displayed on the screen display unit 2b. Convert to display information. By displaying the comparison result on the screen display unit 2b, the user can easily recognize the change in the security state.

  In step S613, the display information created by the security state evaluation unit is displayed on the screen display unit 2b. When there is a request for displaying the security setting status on the internal application operating inside the communication device, it is displayed as the screen of the authentication application. Thereby, the user can easily recognize the security state of the account he is using.

  In the conventional security setting method, the user himself / herself sets the information disclosure range and password. In this case, all security measures depend on the user's own settings, and the service is used without taking security measures for new users who have little knowledge of setting methods or users who have few opportunities to touch communication device terminals. This may lead to information leakage and virus infection.

  In addition, even if the user has taken security measures, it is difficult for the user himself to determine the level of security after setting, and the service can be performed without the security setting of the user's desired level. There is a possibility that unexpected information leakage will occur.

  Furthermore, with the direct message function, the user may check the content without being aware of the presence of dangerous information, or may be transferred to a link destination without knowing that it is a malicious URL, and may be infected with a virus.

  In addition, in the case of an SNS that allows easy user registration and can interact with an unspecified number of service users, the determination of whether or not the user is a malicious user will depend on the user's own determination. Sufficient countermeasures have not been established.

  According to the security status visualization method, program, and system of the present embodiment, it is possible to easily recognize the security status on the SNS that the user is using regardless of the presence or absence of SNS-related knowledge. It leads to the security improvement of SNS.

  The present invention is not limited to the above-described embodiment, and can be changed without departing from the spirit of the present invention.

  For example, if the twitter password entered in step S411 has not been changed for a long period of time (for example, 6 months or more), the security of the password may be lowered. Therefore, it is preferable to display information indicating that the password security is reduced on the screen display unit 2b.

  For example, if the password is too simple or easy to guess (for example, telephone numbers, English words, etc.), the risk of the account being hijacked increases. Therefore, it is preferable to display information indicating that the password is easily guessed on the screen display unit 2b.

  A part or all of the above-described embodiment can be described as the following supplementary notes, but is not limited to the following description.

<Appendix 1>
A process for evaluating the security risk of the first user based on information indicating a disclosure range of writing on the SNS of the first user and client information of the first user;
The security risk of the second user is evaluated based on the information indicating the disclosure range of the writing on the SNS of the second user registered to receive the writing and the client information of the second user. Processing to
A process of determining a security state of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Processing for displaying information indicating the security state;
Security status visualization program that causes a computer to execute.

<Appendix 2>
In the process of evaluating the security risk of the first user, further adding information indicating an analysis result as to whether or not there is writing with an image attached thereto, and evaluating the security risk of the first user,
The security status visualization program according to appendix 1, wherein in the process of displaying information indicating the security status, if there is a writing with the image attached, the information indicating that the image may be diffused is displayed.

<Appendix 3>
In the process of evaluating the security risk of the first user, information indicating an analysis result of whether or not position information is included in the writing is further added to evaluate the security risk of the first user. The security status visualization program according to attachment 1 or 2.

<Appendix 4>
In the process of evaluating the security risk of the first user, information indicating an analysis result as to whether or not a URL is included in the content of the message transmitted by the first user is further added. The security status visualization program according to any one of appendices 1 to 3, which evaluates a user's security risk.

<Appendix 5>
In the process of evaluating the security risk of the second user, information indicating an analysis result as to whether or not a URL is included in the content of the message transmitted by the second user is further added to the second user. The security status visualization program according to any one of appendices 1 to 4, which evaluates a user's security risk.

<Appendix 6>
In the process of evaluating the security risk of the second user, the number of the second user registered to receive the writing and the third user registered to receive the writing of the second user 6. The security state visualization program according to any one of appendices 1 to 5, wherein information indicating a difference between the number of and the security risk of the second user is further evaluated.

<Appendix 7>
In the process of evaluating the security risk of the second user, information indicating an increase or decrease in the number registered by the second user to receive the writing is further added to determine the security risk of the second user. The security status visualization program according to any one of appendices 1 to 6 to be evaluated.

<Appendix 8>
In the process of evaluating the security risk of the second user, the number written by the second user per day, the number received by the second user per day, or the second user 8. The security status visualization program according to any one of appendices 1 to 7, wherein information indicating the number of messages transmitted on a day is further added to evaluate the security risk of the second user.

<Appendix 9>
In the process of evaluating the security risk of the second user, information indicating an analysis result as to whether or not the second user is a new user who receives the writing of the first user is further added to the second user. The security status visualization program according to any one of appendices 1 to 8, which evaluates the security risk of the user.

<Appendix 10>
Evaluating the security risk of the first user based on the information indicating the disclosure range of writing on the SNS of the first user and the client information of the first user;
The security risk of the second user is evaluated based on the information indicating the disclosure range of the writing on the SNS of the second user registered to receive the writing and the client information of the second user. And a process of
Determining the security status of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Displaying information indicating the security status;
Security state visualization method comprising:

<Appendix 11>
In the step of evaluating the security risk of the first user, the security risk of the first user is evaluated by further adding information indicating an analysis result of whether or not there is a writing with an image attached thereto,
The security status visualization method according to appendix 10, wherein, in the step of displaying information indicating the security status, if there is a writing attached with the image, information indicating that the image may be diffused is displayed.

<Appendix 12>
In the step of evaluating the security risk of the first user, information indicating an analysis result of whether or not position information is included in the writing is further added to evaluate the security risk of the first user. The security state visualization method according to attachment 10 or 11.

<Appendix 13>
In the step of evaluating the security risk of the first user, information indicating an analysis result as to whether or not a URL is included in the content of the message transmitted by the first user is further added to the first user. 13. The security status visualization method according to any one of appendices 10 to 12, wherein the security risk level of a user is evaluated.

<Appendix 14>
In the step of evaluating the security risk of the second user, information indicating an analysis result as to whether or not a URL is included in the content of the message transmitted by the second user is further added to the second user. 14. The security state visualization method according to any one of appendices 10 to 13, which evaluates a user's security risk.

<Appendix 15>
In the step of evaluating the security risk of the second user, the number of the second user registered to receive the writing and the third user registered to receive the writing of the second user 15. The security state visualization method according to any one of appendices 10 to 14, wherein information indicating a difference between the number and the security risk of the second user is further evaluated.

<Appendix 16>
In the step of evaluating the security risk of the second user, information indicating an increase / decrease in the number of the second user registered to receive writing is further added to determine the security risk of the second user. 16. The security state visualization method according to any one of supplementary notes 10 to 15 to be evaluated.

<Appendix 17>
In the step of evaluating the security risk of the second user, the number written by the second user per day, the number received by the second user per day, or the second user 17. The security state visualization method according to any one of appendices 10 to 16, wherein information indicating the number of messages transmitted on a day is further added to evaluate the security risk of the second user.

<Appendix 18>
In the step of evaluating the security risk of the second user, information indicating an analysis result as to whether or not the second user is a new user who receives the writing of the first user is further added to the second user. 18. The security state visualization method according to any one of supplementary notes 10 to 17, wherein the security risk level of the user is evaluated.

<Appendix 19>
A process of evaluating the security risk of the first user based on the information indicating the disclosure range of writing on the SNS of the first user acquired from the server and the client information of the first user;
Security of the second user based on information indicating a public range of writing on the SNS of the second user registered to receive the writing acquired from the server and client information of the second user A process to evaluate the risk,
A process for determining a security state of the first user on the SNS based on information indicating the security risk of the first user and information indicating the security risk of the second user;
Processing to display information indicating the security state on the screen display unit;
Security state visualization system comprising a visualization processing unit for executing

DESCRIPTION OF SYMBOLS 1 Security state visualization system 2 Communication apparatus 2a Arithmetic processing part 2b Screen display part 2c Information input part 3 Twitter server 4 External server

Claims (10)

A process for evaluating a security risk on the SNS of the first user based on information indicating a disclosure range of writing on the SNS of the first user and client information of the first user;
Based on information indicating a public range of writing on the SNS of the second user registered to receive the writing and client information of the second user, the second user on the SNS A process of assessing security risk,
Based on said first of said information indicating the security risk on the SNS security risk information and the second user indicating an on SNS user, on the SNS of the first user Processing to evaluate security status;
Processing for displaying information indicating the security state;
Security status visualization program that causes a computer to execute. In the process of evaluating the security risk on the SNS of the first user, information indicating an analysis result as to whether or not there is a writing attached with an image is further added, and the SNS of the first user is added. Evaluate the security risk above ,
The security status visualization program according to claim 1, wherein in the process of displaying information indicating the security status, if there is a writing attached with the image, information indicating that the image may be diffused is displayed. The first in the process of evaluating the security risk on a user of the SNS are further added to the information indicating whether the analysis result contains location information to the write, the said first user The security status visualization program according to claim 1 or 2 , wherein the security risk on SNS is evaluated. In the process of evaluating the security risk on the SNS of the first user, information indicating an analysis result of whether or not a URL is included in the content of the message transmitted by the first user is further added. The security status visualization program according to any one of claims 1 to 3, wherein security risk on the SNS of the first user is evaluated. In the process of evaluating the security risk on the SNS of the second user, information indicating an analysis result of whether or not a URL is included in the content of the message transmitted by the second user is further added. The security status visualization program according to any one of claims 1 to 4, wherein the security risk on the SNS of the second user is evaluated. In the process of evaluating the security risk on the SNS of the second user, the number of users registered to receive the writing by the second user and the writing of the second user are received. 6. The security risk level of the second user on the SNS is evaluated by further adding information indicating a difference between the number of third users registered in the SNS. 6. Security status visualization program. In the process of evaluating the security risk on the SNS of the second user, the second user further adds information indicating an increase / decrease in the number of users registered to receive writing, The security status visualization program according to any one of claims 1 to 6, wherein a security risk on the SNS of a user is evaluated. In the process of evaluating the security risk on the SNS of the second user, the number written by the second user per day, the number received by the second user per day, or the 8. The security risk on the SNS of the second user is evaluated by further adding information indicating the number of messages transmitted by the second user per day. Security status visualization program. Evaluating a security risk on the SNS of the first user based on information indicating a disclosure range of writing on the SNS of the first user and client information of the first user;
Based on information indicating a public range of writing on the SNS of the second user registered to receive the writing and client information of the second user, the second user on the SNS A process of assessing security risk,
Based on said first of said information indicating the security risk on the SNS security risk information and the second user indicating an on SNS user, on the SNS of the first user Assessing the security status;
Displaying information indicating the security status;
Security state visualization method comprising: Based on the information indicating the disclosure range of writing on the SNS of the first user acquired from the server and the client information of the first user , the security risk on the SNS of the first user is evaluated. Processing,
Based on the registered second the information and the second user's client information indicating the disclosure range of the writing on the SNS user to receive the write acquired from the server, said second user A process for evaluating the security risk on the SNS;
Based on said first of said information indicating the security risk on the SNS security risk information and the second user indicating an on SNS user, on the SNS of the first user Processing to evaluate security status;
Processing to display information indicating the security state on the screen display unit;
Security state visualization system comprising a visualization processing unit for executing

Images