OPTIMIZATION DEVICE, OPTIMIZATION METHOD, AND OPTIMIZATION PROGRAM

An optimization apparatus (10) collects cyber attack information that is information related to a cyber attack, and system information that is information related to an entire system including a device that has received the cyber attack. Based on the collected cyber attack information and system information, the optimization apparatus (10) identifies an attack route of the cyber attack, and extracts, as dealing point candidates, devices that are on the attack route and have an effective dealing function against the cyber attack. Subsequently, the optimization apparatus (10) selects a dealing point from the extracted dealing point candidates by using optimization logic that has been set.