情報セキュリティ監査支援のためのベイズ推定を用いたリスク用語提示方式

抄録

We present risk word suggestion for enabling an auditor to identify potential risks based on words of identified risks in an audit report. Once the auditor describes the identified risks in the report, words related to the potential risks are inferred with words in the description of the identified risks, and suggested to the auditor. For the word inference, we assume that words of potential risks and identified risks are related each other, and apply Bayesian inference to reveal the relation between the words. In our evaluation experiments with real five cases, Bayesian inference can suggest the words for identifying potential risks. Furthermore, two auditors can accurately identify potential risks by the suggested words.